r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$packet(r3, &(0x7f00000003c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$packet(r8, &(0x7f00000003c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r6, &(0x7f0000000180)={0x1d, r10}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x841}, 0x40001) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c4f16e4f31c8766ca00"]) 01:13:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) 01:13:14 executing program 2: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x8000000}) 01:13:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:14 executing program 4: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000"], 0x28}}, 0x0) 01:13:14 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r0 = dup(0xffffffffffffffff) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008894}, 0x20000800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_complete(0x0) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='show_sys_fr>', @ANYRESDEC=0x0, @ANYBLOB=',func=POLICY_CHECK,\x00']) r1 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 01:13:14 executing program 2: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x8000000}) 01:13:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:14 executing program 3: syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[], [{@fowner_gt={'fowner>'}}]}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 911.929235][T23387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:14 executing program 4: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) [ 912.035718][T23389] __ntfs_error: 17 callbacks suppressed [ 912.035765][T23389] ntfs: (device loop1): parse_options(): Unrecognized mount option show_sys_fr>00000000000000000000. [ 912.052689][T23389] ntfs: (device loop1): parse_options(): Unrecognized mount option func. [ 912.061184][T23389] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:13:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000"], 0x28}}, 0x0) [ 912.323101][T23389] ntfs: (device loop1): parse_options(): Unrecognized mount option show_sys_fr>00000000000000000000. [ 912.334171][T23389] ntfs: (device loop1): parse_options(): Unrecognized mount option func. [ 912.342821][T23389] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:13:15 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x8000000}) [ 912.550452][T23404] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner>00000000000000000000. [ 912.561227][T23404] ntfs: (device loop3): parse_options(): Unrecognized mount option . 01:13:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:15 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_complete(0x0) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[], [{@fowner_gt={'fowner>'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) r0 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) [ 912.657041][T23404] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner>00000000000000000000. [ 912.668006][T23404] ntfs: (device loop3): parse_options(): Unrecognized mount option . 01:13:15 executing program 4: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) [ 912.878026][T23416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:15 executing program 3: syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="66771d65723e", @ANYRESDEC=0x0, @ANYBLOB="03dd1afcdfd12c00"]) 01:13:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000"], 0x28}}, 0x0) 01:13:16 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:16 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x8000000}) 01:13:16 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_complete(0x0) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@show_sys_files_no='show_sys_files=no'}], [{@fowner_gt={'fowner>'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x4}, 0x7, 0x0, &(0x7f0000000000)={0x4, 0x8, 0x3, 0x8001, 0x44}, 0x8, 0xb3, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)="5c3e117cc14f56dbf62857b9bc607a52ba08f591e375ad45c223c47750056eb710168013bba55f92a3e51b93f54ec47f9ea2c6a3bbdb5a74fbe703359a1cda5ac2846fad8118432fc6251754f991b2269420caad0a1a6a30efc2d19457960e4a69b76776f3bd403bacf794585cb951ddcdb7598fb720df932ed94d978b329b924cb84b5b2ba5"}) r1 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 01:13:16 executing program 5: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) [ 913.429056][T23435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:16 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000080)={[{@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}, {@utf8='utf8'}], [{@fowner_gt={'fowner>'}}]}) 01:13:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a30"], 0x28}}, 0x0) 01:13:16 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:16 executing program 5: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:16 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x8000000}) [ 914.082824][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:17 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2cd72a6a20c888c6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) syz_io_uring_complete(0x0) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@show_sys_files_no='show_sys_files=no'}], [{@fowner_gt={'fowner>'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) r3 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) 01:13:17 executing program 2: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x8000000}) 01:13:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a30"], 0x28}}, 0x0) 01:13:17 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6657778cd1723e", @ANYRESDEC=0x0, @ANYRESHEX=r0]) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0804124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:13:17 executing program 5: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:17 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) [ 914.711717][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:17 executing program 4: syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:17 executing program 2: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x8000000}) 01:13:17 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:17 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 01:13:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a30"], 0x28}}, 0x0) 01:13:17 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_complete(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x1) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/192) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@show_sys_files_no='show_sys_files=no'}], [{@fowner_gt={'fowner>'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) r2 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x100000) 01:13:18 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:18 executing program 2: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x8000000}) [ 915.397620][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:18 executing program 4: syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f0005"], 0x28}}, 0x0) 01:13:18 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x900}}}}]}, 0x78}}, 0x0) 01:13:18 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_complete(0x0) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='show_sys_files=no,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',f,\x00']) r0 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 01:13:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, 0x0) 01:13:18 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:18 executing program 4: syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000180)={0x5, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:18 executing program 3: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x2}) 01:13:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f0005"], 0x28}}, 0x0) 01:13:19 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_complete(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4040, 0x100) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@show_sys_files_no='show_sys_files=no'}], [{@fowner_gt={'fowner>'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) r1 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 01:13:19 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, 0x0) 01:13:19 executing program 5: syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:19 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) 01:13:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f0005"], 0x28}}, 0x0) 01:13:19 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r1) write$binfmt_script(r2, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) 01:13:19 executing program 5: syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:19 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, 0x0) 01:13:19 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_complete(0x0) syz_mount_image$ntfs(&(0x7f0000000700)='ntfs\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f775f7379735f66696c65733d6e6f2c666f776e65723e80356ca983ab14a943d2", @ANYRESDEC=0x0, @ANYBLOB=',func=POLICY_CHECK,\x00']) r0 = openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x1, 0x1, {0x0, 0xff, 0x4}, {0x1, 0xff, 0xa7209833e09ae279}, 0xfd, 0x2}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 01:13:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f00050001"], 0x28}}, 0x0) 01:13:20 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) 01:13:20 executing program 3: 01:13:20 executing program 5: syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x3, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)) [ 917.615881][T23569] __ntfs_error: 27 callbacks suppressed [ 917.615934][T23569] ntfs: (device loop1): parse_options(): Unrecognized mount option fowner>€5l©ƒ«©CÒ00000000000000000000. [ 917.633198][T23569] ntfs: (device loop1): parse_options(): Unrecognized mount option func. [ 917.641685][T23569] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:13:20 executing program 3: 01:13:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f00050001"], 0x28}}, 0x0) 01:13:20 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) [ 917.907921][T23569] ntfs: (device loop1): parse_options(): Unrecognized mount option fowner>€5l©ƒ«©CÒ00000000000000000000. [ 917.925443][T23569] ntfs: (device loop1): parse_options(): Unrecognized mount option func. [ 917.934141][T23569] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:13:21 executing program 3: 01:13:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)) 01:13:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) 01:13:21 executing program 1: 01:13:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f00050001"], 0x28}}, 0x0) 01:13:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x0, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:21 executing program 3: 01:13:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)) 01:13:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) 01:13:21 executing program 1: 01:13:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f0005000100"], 0x28}}, 0x0) 01:13:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x0, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:22 executing program 3: 01:13:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) 01:13:22 executing program 1: 01:13:22 executing program 2: 01:13:22 executing program 3: 01:13:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f0005000100"], 0x28}}, 0x0) 01:13:22 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x0, @raw_data="16375ac67176195280db8b65161332975a78e5c243d61a17b2d723c08d2695415ad5c32c2b12d7875d6a992560ccf7cb1f63fd1444187dc5d80bd56dc79b6de86974f08d4dd1d0d5fc7999c8adb81a6130e1fc616555e75c11e4b28ec1cdeae09b2a6bc9382946d2c397e5dca5a7b0d4ba380b4e68d66195aec24c84aff9d41eda4f086dced1b236b686efe171a5cc92d73e0ae00edb5d76daa7449bcc4ad5098641a55f5b9b3e8cdbf90f56e2dd8d040c41c3d70404f4e5bd8608d25ea262d06071a3cfcec57ab6"}) 01:13:22 executing program 1: 01:13:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x0, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:22 executing program 2: 01:13:22 executing program 3: 01:13:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003060104047d36c1d7000000000000000900020073797a3000006f0005000100"], 0x28}}, 0x0) 01:13:23 executing program 4: 01:13:23 executing program 1: 01:13:23 executing program 2: 01:13:23 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x0, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:23 executing program 3: 01:13:23 executing program 4: 01:13:23 executing program 0: 01:13:23 executing program 1: 01:13:23 executing program 2: 01:13:23 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x0, @raw_data="6103d4d5192ecb24089c9b78a4531659aa1b6e7b5cde2de78c983c2cfbb22689cc664afb27f427f926b19dde5b4cde3dd1413d17ba76a1c5562edad858d46aeda87e9cafe7a08bc51d6b2ede5548187f5e96707fbb70edb7c69a86aece1dd0f6b8dfd32baeaccca1bc18d4f4b5cb002df0d513f95bf3a0fc8470c06f52bac37809368b4cd40b9f83777a0ab781bf659715ea40fab5c76b1541d02994d443f081aeb8359159b83664adebc9fc013e2344fad6de5d4641843d00"}) 01:13:24 executing program 3: 01:13:24 executing program 4: 01:13:24 executing program 0: 01:13:24 executing program 1: 01:13:24 executing program 5: 01:13:24 executing program 2: 01:13:24 executing program 3: 01:13:24 executing program 4: 01:13:24 executing program 0: 01:13:24 executing program 1: 01:13:24 executing program 5: 01:13:25 executing program 3: 01:13:25 executing program 2: 01:13:25 executing program 4: 01:13:25 executing program 0: 01:13:25 executing program 1: 01:13:25 executing program 5: 01:13:25 executing program 3: 01:13:25 executing program 4: 01:13:25 executing program 2: 01:13:25 executing program 1: 01:13:25 executing program 0: 01:13:25 executing program 5: 01:13:25 executing program 3: 01:13:26 executing program 2: 01:13:26 executing program 1: 01:13:26 executing program 4: 01:13:26 executing program 0: 01:13:26 executing program 5: 01:13:26 executing program 2: 01:13:26 executing program 3: 01:13:26 executing program 1: 01:13:26 executing program 4: 01:13:26 executing program 0: 01:13:27 executing program 5: 01:13:27 executing program 2: 01:13:27 executing program 3: 01:13:27 executing program 1: 01:13:27 executing program 4: 01:13:27 executing program 0: 01:13:27 executing program 5: 01:13:27 executing program 3: 01:13:27 executing program 2: 01:13:27 executing program 4: 01:13:27 executing program 1: 01:13:27 executing program 5: 01:13:27 executing program 0: 01:13:28 executing program 2: 01:13:28 executing program 4: 01:13:28 executing program 3: 01:13:28 executing program 1: 01:13:28 executing program 5: 01:13:28 executing program 0: 01:13:28 executing program 2: 01:13:28 executing program 3: 01:13:28 executing program 4: 01:13:28 executing program 1: 01:13:28 executing program 0: 01:13:29 executing program 5: 01:13:29 executing program 2: 01:13:29 executing program 3: 01:13:29 executing program 1: 01:13:29 executing program 4: 01:13:29 executing program 5: 01:13:29 executing program 0: 01:13:29 executing program 2: 01:13:29 executing program 3: 01:13:29 executing program 1: 01:13:29 executing program 4: 01:13:29 executing program 0: 01:13:30 executing program 2: 01:13:30 executing program 5: 01:13:30 executing program 1: 01:13:30 executing program 3: 01:13:30 executing program 4: 01:13:30 executing program 4: 01:13:30 executing program 5: 01:13:30 executing program 1: 01:13:30 executing program 3: 01:13:31 executing program 2: 01:13:31 executing program 0: 01:13:31 executing program 4: 01:13:31 executing program 1: 01:13:31 executing program 5: 01:13:31 executing program 3: 01:13:31 executing program 0: 01:13:31 executing program 2: 01:13:32 executing program 4: 01:13:32 executing program 5: 01:13:32 executing program 3: 01:13:32 executing program 2: 01:13:32 executing program 0: 01:13:32 executing program 1: 01:13:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfa30, 0x0, 0x0, 0x21) shutdown(r0, 0x1) 01:13:32 executing program 4: 01:13:32 executing program 2: 01:13:32 executing program 0: 01:13:32 executing program 3: 01:13:32 executing program 1: 01:13:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="24000000180007841dfffd946f61050002008100fd038b0602000800080004000400ff7e", 0x24}], 0x1}, 0x0) 01:13:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, r1, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 01:13:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x4, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '\x00'}, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0xcc}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:33 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c000000) 01:13:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 930.628171][T23766] binder: BC_ATTEMPT_ACQUIRE not supported [ 930.634279][T23766] binder: 23763:23766 ioctl c0306201 20001400 returned -22 01:13:33 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) [ 930.678900][T23771] ptrace attach of "/root/syz-executor.5"[23770] was attempted by "/root/syz-executor.5"[23771] [ 930.761693][T23776] binder: 23772:23776 unknown command 0 [ 930.767465][T23776] binder: 23772:23776 ioctl c0306201 20001400 returned -22 01:13:33 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x54}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:33 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="38aed10e86d559a6380000001000010400"/28, @ANYRES32=r4, @ANYBLOB="00000000000000001800128008000100736974000c00028008000200", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x2f, 0x3, 0x7f, 0x3, 0x50, @dev={0xfe, 0x80, [], 0x3d}, @private2={0xfc, 0x2, [], 0x1}, 0x40, 0x40, 0x8, 0x2010}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001880)={'syztnl1\x00', &(0x7f0000001800)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x1f, 0xfffff9ec, 0x20, @dev={0xfe, 0x80, [], 0x1d}, @mcast2, 0x1, 0x20, 0x7, 0x6}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x43, 0x6, 0x0, 0x400, 0x0, 0x40190081, r8}) 01:13:33 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x149042, 0x0) sendfile(r2, r0, 0x0, 0xffbfff38) 01:13:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 931.186512][T23786] ptrace attach of "/root/syz-executor.0"[23785] was attempted by "/root/syz-executor.0"[23786] 01:13:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwrite64(r0, 0x0, 0x0, 0x0) [ 931.473690][T23794] binder: 23792:23794 unknown command 0 [ 931.479481][T23794] binder: 23792:23794 ioctl c0306201 20001400 returned -22 [ 931.547584][ T29] audit: type=1800 audit(1596849214.335:100): pid=23801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16382 res=0 01:13:34 executing program 1: socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, r1, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 931.724520][ T29] audit: type=1804 audit(1596849214.375:101): pid=23804 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir544972963/syzkaller.tor3o8/502/file0" dev="sda1" ino=16382 res=1 [ 931.749769][ T29] audit: type=1804 audit(1596849214.405:102): pid=23804 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir544972963/syzkaller.tor3o8/502/file0" dev="sda1" ino=16382 res=1 01:13:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="18"], 0x30}}], 0x2, 0x0) 01:13:34 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x22}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 01:13:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6654070000053e27bc3376003639405cb4aed12f0000001500ae47a825d881ff278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d25692e664ebf68e6faa53367f05f4ad6142134b62f11e9524436df89bc7631e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f75030000007e24ab61f0866f15da7f480800b1000000000500", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:13:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@var, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x64}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) syz_open_procfs(0x0, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 932.306030][T23823] binder: 23818:23823 unknown command 0 [ 932.311876][T23823] binder: 23818:23823 ioctl c0306201 20001400 returned -22 [ 932.327371][T23822] fuse: Unknown parameter 'fd"0xffffffffffffffff' [ 932.352848][T23825] fuse: Unknown parameter 'fd"0xffffffffffffffff' 01:13:35 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1cc, 0x2011, r1, 0x0) 01:13:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8903, 0x0) [ 932.506789][T23833] ptrace attach of "/root/syz-executor.4"[23831] was attempted by "/root/syz-executor.4"[23833] [ 932.511829][T23832] ptrace attach of "/root/syz-executor.5"[23830] was attempted by "/root/syz-executor.5"[23832] 01:13:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x178, 0xffffff80, 0x178, 0x178, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) [ 932.920827][T23850] binder: 23844:23850 unknown command 0 [ 932.926839][T23850] binder: 23844:23850 ioctl c0306201 20001400 returned -22 01:13:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6654070000053e27bc3376003639405cb4aed12f0000001500ae47a825d881ff278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d25692e664ebf68e6faa53367f05f4ad6142134b62f11e9524436df89bc7631e7d62ead037cd2157df6b2bcb47fb53455560c", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:13:35 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var]}, {0x0, [0x0]}}, 0x0, 0x2b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:36 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479ceef6fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece10d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b04e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 01:13:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:36 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:36 executing program 1: unshare(0x6c060000) socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfa30, 0x0, 0x0, 0x21) shutdown(r0, 0x1) [ 933.712376][T23861] ptrace attach of "/root/syz-executor.0"[23859] was attempted by "/root/syz-executor.0"[23861] 01:13:36 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x100007, r0}) [ 933.803614][T23865] ptrace attach of "/root/syz-executor.4"[23863] was attempted by "/root/syz-executor.4"[23865] 01:13:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 01:13:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000440)={'lo\x00', @ifru_addrs=@nl=@unspec}) [ 934.132580][T23873] IPVS: ftp: loaded support on port[0] = 21 01:13:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:37 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:13:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) [ 934.913410][T23874] IPVS: ftp: loaded support on port[0] = 21 01:13:37 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000400e13495000000000000002ba7e1d30cb599e83f24a3aa81d36bb3019c13bd23212fb56f040026fbfefc41eab2a2c952d40a703c056bd8174b7960317142fa9e741c4e345c652fbc1626cca2a2add7de7ea8255e35806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277beee1cbf8d144def23d410f6accd3641110bec4e90a6341965c39e9ef8f6e3968f200e011ea665c45a3449abe802f5ab3e89cf6d662ed414a13b3e22278d00031e5388ee5c867de2ce211d6ececb0cd2b6d357b8580218ce740068720000074e468ee23f0300000000000000822775985bf31b405b433a8acd715f5888b2007f00000000000002000100000000000000000006a10f58faffde6453358dfbba03674a1290460600000000000000000000000031000000000000000000e65a89faf697992ca4f72f62cfff01210cce39bf400000846c12423a164a33e680846f26dc7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d616116a6520655a80d608df4d433623c850af895abba14f6fbd7fbad2a431ab9142f3a06d54740a46792cbf4709646b6c83c1f2889dc06518e06258dc5c29647d2f90000f8af78f32e3012799a91121bd5b89e7a767c35bd6007b9a27466842a36e87ddb3164e93b87114903a06eafbc5488f1e44c113bf040f1c5503c14420d6bf9464b0b45a8ab726ec6acfa1556ff652425931b593a416dbe894cf27b85bc1a079e2ed8f292debb90da6de949044bc52b10d480a24c86db8e7251d29a27087e55ef719f0033e91fa84d2f72c55dc3c05ff98dc04b2c0ee4064a82affd04e51c0cbdb78c03fdba835e1a5c4186f5edfc1d596b44a3912922a71450dcea0c7fb4737ae37bea34b28d9196d3047c221237480004934f4e1139350c"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="f55af8af1b01", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x29, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 01:13:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) [ 935.116024][ T7] tipc: TX() has been purged, node left! 01:13:38 executing program 4: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8000000000119050004000000000000000000003c0001802c0001001400030016f8bcd383ad9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe8800000000000000000000000000ff14000400ff00000c000000800000000000000001080007000000000024000f"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 01:13:40 executing program 1: socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 01:13:40 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlockall(0x4a1393433996c3f6) 01:13:40 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x3, [@const, @array, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}, @restrict]}, {0x0, [0x0]}}, 0x0, 0x73}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000200012000c00010076"], 0x48}}, 0x0) [ 937.490202][T23977] ptrace attach of "/root/syz-executor.0"[23976] was attempted by "/root/syz-executor.0"[23977] [ 937.528680][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:13:40 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8000000000119050004000000000000000000003c0001802c0001"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 937.538266][T23979] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:13:40 executing program 2: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x4fa0, 0x0, &(0x7f00000001c0), 0x10) 01:13:40 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:40 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@var, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x5c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:40 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20006000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) 01:13:41 executing program 0: socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x6}}, 0x0, 0x0, 0x36, 0x0, "86cdb6415a2f0710e53d85e5bfb3d2dcd262cfae39e1ed4e25dd5ffa4e05c4dffc1565752d6b800ef1289f8e51a17a578b70dc5a3888faf3ab5bed63e7a7c33c7155a7074e667d323dc68c3fc31dd8f9"}, 0xd8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, r0, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 938.386355][T24004] fuse: Bad value for 'source' 01:13:41 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) [ 938.449528][T24006] ptrace attach of "/root/syz-executor.1"[24005] was attempted by "/root/syz-executor.1"[24006] 01:13:41 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd603b000000102f00fe800000000000000000000000000000ff02"], 0x0) 01:13:41 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/77, 0x4d}, 0x1}, {{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000cc0)=""/112, 0x70}, {&(0x7f0000000d40)=""/85, 0x55}], 0x3, &(0x7f0000000540)=""/48, 0x30}, 0x805}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/10, 0xa}, {0x0}], 0x3, &(0x7f0000000580)=""/103, 0x67}, 0x8001}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/49, 0x31}, 0x559f92a3}, {{&(0x7f0000000c40), 0x80, &(0x7f0000000740)=[{&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/85, 0x55}], 0x2, &(0x7f0000000f40)=""/85, 0x55}, 0x8000}, {{&(0x7f00000010c0)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001140)=""/206, 0xce}, {&(0x7f0000001240)=""/90, 0x5a}, {&(0x7f0000002700)=""/208, 0xd0}], 0x3, &(0x7f0000002500)=""/55, 0x37}, 0xaac}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32]}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3, 0x7}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 01:13:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 01:13:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 01:13:41 executing program 3: syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="24000000180007841dfffd946f61050002008100fd038b0602000800080006000400ff7e", 0x24}], 0x1}, 0x0) 01:13:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r2, &(0x7f0000000000)=0xf000000, 0x12) 01:13:41 executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 939.499107][T24037] syz-executor.1 (24037): /proc/24035/oom_adj is deprecated, please use /proc/24035/oom_score_adj instead. 01:13:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 01:13:42 executing program 3: syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:42 executing program 2: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) ftruncate(r0, 0x48280) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x100007, r1}) 01:13:42 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 01:13:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/77, 0x4d}, 0x1}, {{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000cc0)=""/112, 0x70}, {&(0x7f0000000d40)=""/85, 0x55}], 0x3, &(0x7f0000000540)=""/48, 0x30}, 0x805}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/10, 0xa}, {0x0}], 0x3, &(0x7f0000000580)=""/103, 0x67}, 0x8001}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/49, 0x31}, 0x559f92a3}, {{&(0x7f0000000c40), 0x80, &(0x7f0000000740)=[{&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/85, 0x55}], 0x2, &(0x7f0000000f40)=""/85, 0x55}, 0x8000}, {{&(0x7f00000010c0)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001140)=""/206, 0xce}, {&(0x7f0000001240)=""/90, 0x5a}, {&(0x7f0000002700)=""/208, 0xd0}], 0x3, &(0x7f0000002500)=""/55, 0x37}, 0xaac}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32]}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3, 0x7}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 01:13:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 01:13:43 executing program 3: syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:13:43 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file1\x00') 01:13:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) 01:13:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:13:43 executing program 0: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/226, 0xe2) 01:13:44 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x3, [@const, @array, @union, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}]}, {0x0, [0x0]}}, 0x0, 0x5b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:44 executing program 4: [ 941.587148][T24071] binder: 24070:24071 ioctl c0306201 0 returned -14 [ 941.739644][T24075] ptrace attach of "/root/syz-executor.2"[24074] was attempted by "/root/syz-executor.2"[24075] 01:13:44 executing program 2: 01:13:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) 01:13:46 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:13:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:13:46 executing program 0: 01:13:46 executing program 4: 01:13:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) 01:13:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfa30, 0x0, 0x0, 0x21) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) [ 943.448100][T24091] binder: 24086:24091 ioctl c0306201 0 returned -14 01:13:46 executing program 4: 01:13:46 executing program 0: 01:13:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:13:46 executing program 2: 01:13:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}]}) 01:13:46 executing program 1: [ 943.895364][T24097] ptrace attach of "/root/syz-executor.1"[24096] was attempted by "/root/syz-executor.1"[24097] [ 944.186010][T24104] binder: 24101:24104 ioctl c0306201 0 returned -14 01:13:47 executing program 0: 01:13:47 executing program 4: 01:13:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:13:47 executing program 2: 01:13:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}]}) 01:13:47 executing program 1: 01:13:47 executing program 4: 01:13:47 executing program 0: 01:13:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:13:47 executing program 2: 01:13:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}]}) 01:13:47 executing program 1: 01:13:48 executing program 4: 01:13:48 executing program 0: 01:13:48 executing program 2: 01:13:48 executing program 1: 01:13:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x0, 0x0, 0x0, 0x7ffffff7}]}) 01:13:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:13:48 executing program 4: 01:13:48 executing program 0: 01:13:48 executing program 2: 01:13:48 executing program 1: 01:13:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x0, 0x0, 0x0, 0x7ffffff7}]}) 01:13:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 01:13:49 executing program 4: 01:13:49 executing program 0: 01:13:49 executing program 2: 01:13:49 executing program 1: 01:13:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 01:13:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x0, 0x0, 0x0, 0x7ffffff7}]}) 01:13:49 executing program 4: 01:13:49 executing program 0: 01:13:49 executing program 1: 01:13:49 executing program 2: 01:13:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6}]}) 01:13:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 01:13:50 executing program 0: 01:13:50 executing program 4: 01:13:50 executing program 2: 01:13:50 executing program 1: 01:13:50 executing program 3: 01:13:50 executing program 0: [ 947.889143][ T29] audit: type=1326 audit(1596849230.666:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24156 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:13:50 executing program 4: 01:13:50 executing program 2: 01:13:50 executing program 1: 01:13:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6}]}) 01:13:51 executing program 3: 01:13:51 executing program 0: 01:13:51 executing program 2: 01:13:51 executing program 4: 01:13:51 executing program 1: [ 948.678718][ T29] audit: type=1326 audit(1596849231.456:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24171 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:13:51 executing program 3: 01:13:51 executing program 0: 01:13:51 executing program 2: 01:13:51 executing program 4: 01:13:51 executing program 1: 01:13:52 executing program 3: 01:13:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x3c}, {0x6}]}) 01:13:52 executing program 2: 01:13:52 executing program 0: 01:13:52 executing program 4: 01:13:52 executing program 1: 01:13:52 executing program 0: [ 950.003590][ T29] audit: type=1326 audit(1596849232.776:105): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24186 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:13:52 executing program 2: 01:13:52 executing program 3: 01:13:53 executing program 1: 01:13:53 executing program 4: 01:13:53 executing program 0: 01:13:53 executing program 2: 01:13:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:53 executing program 3: 01:13:53 executing program 1: 01:13:53 executing program 0: 01:13:53 executing program 4: 01:13:53 executing program 2: 01:13:53 executing program 3: 01:13:54 executing program 1: 01:13:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:54 executing program 0: 01:13:54 executing program 2: 01:13:54 executing program 4: 01:13:54 executing program 1: 01:13:54 executing program 3: 01:13:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:54 executing program 0: 01:13:54 executing program 4: 01:13:54 executing program 2: 01:13:55 executing program 1: 01:13:55 executing program 3: 01:13:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:55 executing program 0: 01:13:55 executing program 4: 01:13:55 executing program 2: 01:13:55 executing program 1: 01:13:55 executing program 3: 01:13:55 executing program 0: 01:13:55 executing program 2: 01:13:55 executing program 4: 01:13:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:56 executing program 3: 01:13:56 executing program 1: 01:13:56 executing program 0: 01:13:56 executing program 4: 01:13:56 executing program 2: 01:13:56 executing program 3: 01:13:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4", 0xc}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1, 0x0, 0x0, 0x7}, 0x0) 01:13:57 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, 0x0}, 0x210) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe2c5e16d87cebd96a909d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000100), 0x26, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}}) 01:13:57 executing program 4: gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc08c5334, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 01:13:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sysfs$3(0x3) socket(0x0, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x4, r0, 0x0, 0x0) keyctl$assume_authority(0x10, r0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000940)=""/71, 0x47}], 0x1, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) socket$inet6(0xa, 0xa, 0x0) listen(0xffffffffffffffff, 0x100000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) 01:13:57 executing program 3: exit(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:13:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:13:57 executing program 0: sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)=ANY=[], 0x1}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') exit(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 01:13:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0x0) [ 954.909396][ T29] audit: type=1326 audit(1596849237.686:106): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24260 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 [ 955.126076][T24264] new mount options do not match the existing superblock, will be ignored 01:13:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe2c5e16d87cebd96a909d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000180)="888a9b259e78b0b06b4373b6db31017643d6caecee93a31c1b893f0edfa7444705eceea1902242b0967d53aa0c6d2ef6319eb765473e0d0cf3eb4dce7eaf49a62fb940cc3f59ebd986fb7c2ac7beaa72fe945fd6e93d1ae69a67444a37684d7b919af344541730d54e170693b3fd3b169727b253ae70069fbe", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}}) 01:13:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sysfs$3(0x3) socket(0x0, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x4, r0, 0x0, 0x0) keyctl$assume_authority(0x10, r0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000940)=""/71, 0x47}], 0x1, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) socket$inet6(0xa, 0xa, 0x0) listen(0xffffffffffffffff, 0x100000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) 01:13:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000940)=""/71, 0x47}], 0x1, 0x1800, 0xfffffffc) 01:13:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:13:59 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 956.346401][T24289] new mount options do not match the existing superblock, will be ignored [ 956.576807][T24291] new mount options do not match the existing superblock, will be ignored [ 956.941752][ T29] audit: type=1326 audit(1596849239.726:107): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24301 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:13:59 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r3 = socket(0x15, 0x80005, 0x0) dup2(r3, r0) 01:13:59 executing program 2: 01:14:00 executing program 0: 01:14:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:14:00 executing program 2: 01:14:00 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r3 = socket(0x15, 0x80005, 0x0) dup2(r3, r0) 01:14:00 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 958.151674][ T29] audit: type=1326 audit(1596849240.937:108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24317 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:14:01 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe2c5e16d87cebd96a909d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000180)="888a9b259e78b0b06b4373b6db31017643d6caecee93a31c1b893f0edfa7444705eceea1902242b0967d53aa0c6d2ef6319eb765473e0d0cf3eb4dce7eaf49a62fb940cc3f59ebd986fb7c2ac7beaa72fe945fd6e93d1ae69a67444a37684d7b919af344541730d54e170693b3fd3b169727b253ae70069fbe", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}}) 01:14:01 executing program 0: 01:14:01 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r3 = socket(0x15, 0x80005, 0x0) dup2(r3, r0) 01:14:01 executing program 2: 01:14:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:14:01 executing program 2: 01:14:02 executing program 0: 01:14:02 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r3 = socket(0x15, 0x80005, 0x0) dup2(r3, r0) 01:14:02 executing program 1: 01:14:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:02 executing program 2: [ 959.482816][ T29] audit: type=1326 audit(1596849242.267:109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24338 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:14:02 executing program 1: 01:14:02 executing program 0: 01:14:02 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) dup2(0xffffffffffffffff, r0) 01:14:02 executing program 2: 01:14:02 executing program 0: 01:14:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:14:03 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) dup2(0xffffffffffffffff, r0) 01:14:03 executing program 1: 01:14:03 executing program 2: 01:14:03 executing program 0: 01:14:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:03 executing program 1: 01:14:03 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) dup2(0xffffffffffffffff, r0) [ 961.051834][ T29] audit: type=1326 audit(1596849243.837:110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24361 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:14:04 executing program 0: 01:14:04 executing program 2: 01:14:04 executing program 1: 01:14:04 executing program 2: 01:14:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x1}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:14:04 executing program 0: 01:14:04 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x15, 0x80005, 0x0) dup2(r3, r0) 01:14:04 executing program 2: 01:14:04 executing program 1: [ 962.133176][ T29] audit: type=1326 audit(1596849244.917:111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24381 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:14:05 executing program 3: gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) 01:14:05 executing program 0: 01:14:05 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x15, 0x80005, 0x0) dup2(r3, r0) 01:14:05 executing program 0: 01:14:05 executing program 2: 01:14:05 executing program 1: 01:14:05 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x15, 0x80005, 0x0) dup2(r3, r0) 01:14:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:14:05 executing program 0: 01:14:06 executing program 2: 01:14:06 executing program 1: 01:14:06 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r2 = socket(0x15, 0x80005, 0x0) dup2(r2, r0) 01:14:06 executing program 3: gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) 01:14:06 executing program 0: [ 963.608584][ T29] audit: type=1326 audit(1596849246.387:112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24402 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:14:06 executing program 2: 01:14:06 executing program 0: 01:14:06 executing program 1: 01:14:07 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:07 executing program 2: 01:14:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:14:07 executing program 1: 01:14:07 executing program 0: 01:14:07 executing program 2: 01:14:07 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) [ 964.904589][ T29] audit: type=1326 audit(1596849247.687:113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24422 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:14:07 executing program 3: gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) 01:14:07 executing program 0: 01:14:07 executing program 1: 01:14:08 executing program 2: 01:14:08 executing program 4: bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r0 = socket(0x15, 0x80005, 0x0) dup2(r0, 0xffffffffffffffff) 01:14:08 executing program 1: 01:14:08 executing program 0: 01:14:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0x3c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 01:14:08 executing program 2: 01:14:08 executing program 4: bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r0 = socket(0x15, 0x80005, 0x0) dup2(r0, 0xffffffffffffffff) 01:14:08 executing program 0: 01:14:08 executing program 1: [ 966.234088][ T29] audit: type=1326 audit(1596849249.017:114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24444 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 01:14:09 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) tkill(r0, 0x1004000000016) 01:14:09 executing program 2: 01:14:09 executing program 4: bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r0 = socket(0x15, 0x80005, 0x0) dup2(r0, 0xffffffffffffffff) 01:14:09 executing program 0: 01:14:09 executing program 1: 01:14:09 executing program 2: 01:14:09 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:10 executing program 5: 01:14:10 executing program 0: 01:14:10 executing program 2: 01:14:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xf07, 0x0, 0x0, {}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 01:14:10 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:12 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) tkill(r0, 0x1004000000016) 01:14:12 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0xa4a03148861467fe) creat(&(0x7f0000000000)='./file0\x00', 0x0) 01:14:12 executing program 2: request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) 01:14:12 executing program 1: 01:14:12 executing program 0: 01:14:12 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:13 executing program 0: 01:14:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r1, 0x0, 0x0) 01:14:13 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000001c0)=0x3ff, 0x4) 01:14:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrusage(0x0, &(0x7f0000000200)) 01:14:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() capset(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)) [ 971.112762][T24510] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 01:14:16 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) tkill(r0, 0x1004000000016) 01:14:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r1, &(0x7f0000000400)) 01:14:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:14:16 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x86100, 0x0) 01:14:16 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffd) 01:14:16 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000516000/0x4000)=nil, 0x2) 01:14:16 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x6, 0x0, 0x0, "70ec2f35ab71"}}) 01:14:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x4, 0x6, 0x5}, 0x14}}, 0x0) 01:14:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') 01:14:17 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000), 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:19 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:19 executing program 5: 01:14:19 executing program 2: 01:14:19 executing program 1: 01:14:19 executing program 0: 01:14:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000), 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:20 executing program 5: 01:14:20 executing program 1: 01:14:20 executing program 0: 01:14:20 executing program 2: 01:14:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000), 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 01:14:20 executing program 2: 01:14:21 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:21 executing program 5: 01:14:21 executing program 1: 01:14:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x0, 0x80005, 0x0) dup2(r1, r0) 01:14:21 executing program 0: 01:14:21 executing program 2: 01:14:21 executing program 0: 01:14:21 executing program 1: 01:14:21 executing program 5: 01:14:21 executing program 2: 01:14:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x0, 0x80005, 0x0) dup2(r1, r0) 01:14:22 executing program 1: 01:14:22 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:22 executing program 0: 01:14:22 executing program 5: 01:14:22 executing program 2: 01:14:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x0, 0x80005, 0x0) dup2(r1, r0) 01:14:22 executing program 1: 01:14:22 executing program 5: 01:14:23 executing program 0: 01:14:23 executing program 2: 01:14:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x0, 0x0) dup2(r1, r0) 01:14:23 executing program 1: 01:14:23 executing program 5: 01:14:24 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:24 executing program 2: 01:14:24 executing program 0: 01:14:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x0, 0x0) dup2(r1, r0) 01:14:24 executing program 1: 01:14:24 executing program 5: 01:14:24 executing program 2: 01:14:24 executing program 0: 01:14:24 executing program 1: 01:14:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x0, 0x0) dup2(r1, r0) 01:14:24 executing program 5: 01:14:24 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:24 executing program 2: 01:14:24 executing program 0: 01:14:25 executing program 1: 01:14:25 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) socket(0x15, 0x80005, 0x0) dup2(0xffffffffffffffff, r0) 01:14:25 executing program 5: 01:14:25 executing program 2: 01:14:25 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:25 executing program 1: 01:14:25 executing program 0: 01:14:25 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) socket(0x15, 0x80005, 0x0) dup2(0xffffffffffffffff, r0) 01:14:25 executing program 5: 01:14:25 executing program 2: 01:14:26 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) read(0xffffffffffffffff, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:26 executing program 1: 01:14:26 executing program 0: 01:14:26 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) socket(0x15, 0x80005, 0x0) dup2(0xffffffffffffffff, r0) 01:14:26 executing program 5: 01:14:26 executing program 2: 01:14:26 executing program 0: 01:14:26 executing program 1: 01:14:27 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) read(0xffffffffffffffff, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:27 executing program 2: 01:14:27 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, 0xffffffffffffffff) 01:14:27 executing program 5: 01:14:27 executing program 0: 01:14:27 executing program 1: 01:14:27 executing program 2: 01:14:27 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) read(0xffffffffffffffff, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:27 executing program 5: 01:14:27 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, 0xffffffffffffffff) 01:14:27 executing program 0: 01:14:27 executing program 1: 01:14:28 executing program 2: 01:14:28 executing program 5: 01:14:28 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:28 executing program 0: 01:14:28 executing program 1: 01:14:28 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, 0xffffffffffffffff) 01:14:28 executing program 2: 01:14:28 executing program 5: 01:14:29 executing program 0: 01:14:29 executing program 1: 01:14:29 executing program 4: 01:14:29 executing program 2: 01:14:29 executing program 5: 01:14:29 executing program 0: 01:14:31 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:31 executing program 1: 01:14:31 executing program 4: 01:14:31 executing program 2: 01:14:31 executing program 5: 01:14:31 executing program 0: 01:14:32 executing program 0: 01:14:32 executing program 4: 01:14:32 executing program 1: 01:14:32 executing program 5: 01:14:32 executing program 2: 01:14:32 executing program 4: 01:14:35 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:35 executing program 5: 01:14:35 executing program 1: 01:14:35 executing program 0: 01:14:35 executing program 2: 01:14:35 executing program 4: 01:14:35 executing program 1: 01:14:35 executing program 0: 01:14:35 executing program 5: 01:14:35 executing program 2: 01:14:35 executing program 4: 01:14:36 executing program 2: 01:14:38 executing program 3: timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 01:14:38 executing program 0: 01:14:38 executing program 5: 01:14:38 executing program 1: 01:14:38 executing program 4: 01:14:38 executing program 2: 01:14:39 executing program 4: 01:14:39 executing program 1: 01:14:39 executing program 2: 01:14:39 executing program 5: 01:14:39 executing program 0: 01:14:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') finit_module(r0, 0x0, 0x0) 01:14:40 executing program 3: timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 01:14:40 executing program 2: timer_create(0x0, &(0x7f00000002c0), 0x0) clock_gettime(0x5, &(0x7f0000000080)) 01:14:40 executing program 1: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x6) 01:14:40 executing program 0: 01:14:40 executing program 5: 01:14:40 executing program 4: 01:14:40 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000040)) 01:14:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$get_persistent(0x16, 0x0, 0x0) 01:14:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000200012000c0001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32], 0x20}, 0x1, 0x74}, 0x0) 01:14:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() readv(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 01:14:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6000000024000bd068930f000000000000000000", @ANYRES32, @ANYBLOB="00000068ffffffff"], 0x60}}, 0x0) [ 998.247598][T24780] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 998.272513][T24781] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 01:14:41 executing program 2: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000780), 0x65, 0x0, &(0x7f0000000140)="c3561bd191b094715194fe6e1a6539714502acdb3859a05c1cea6deed12d2ecb1939a6d81be4f4e5b19e94bda8cd7e2bc2c732b488278357dea46ea5e8ee4d5d0702efe368e552e3f5753a1d39569de269b65ec939286b063e8967d2c3fda93363973c94f1"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 998.345602][T24782] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 998.441780][T24782] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 998.503086][T24781] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 01:14:41 executing program 3: timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 01:14:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:41 executing program 4: r0 = socket(0x2, 0x3, 0x67) sendto$unix(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=@abs, 0x6e) 01:14:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000010000104ff0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c00002800028014000200fe8000000000000000000000000000bb08000100", @ANYRES32=0x0, @ANYBLOB="060011000000000008000a00", @ANYRES32], 0x60}}, 0x0) [ 998.928994][T24798] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 01:14:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 01:14:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x28) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x400000000000064, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x3, 0x1ffbffe) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1}) 01:14:42 executing program 4: mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) 01:14:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:42 executing program 0: timer_create(0x0, &(0x7f00000002c0), 0x0) getrlimit(0x0, &(0x7f0000000000)) 01:14:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0x108, 0x238, 0x108, 0x0, 0x0, 0x2f0, 0x338, 0x338, 0x338, 0x2f0, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth1\x00', 'lo\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d1f}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'rose0\x00', 'bond_slave_0\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e127cdab440d1df98d3ea398b2a59b7226374548061bd780dfc892265b0a"}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 01:14:42 executing program 1: r0 = getpid() r1 = gettid() kcmp(r1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:42 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) shutdown(r1, 0x0) 01:14:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x8, r3, 0x0, 0xfeffffff}, 0x80, 0x0}}], 0x1, 0x0) 01:14:43 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @random="e0080018049b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 01:14:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec0100002800270d000000110000000000000000", @ANYRES32, @ANYBLOB="0480"], 0x1ec}}, 0x0) 01:14:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1001.860687][T24848] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.2'. 01:14:46 executing program 4: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000780), 0x65, 0x0, &(0x7f0000000140)="c3561bd191b094715194fe6e1a6539714502acdb3859a05c1cea6deed12d2ecb1939a6d81be4f4e5b19e94bda8cd7e2bc2c732b488278357dea46ea5e8ee4d5d0702efe368e552e3f5753a1d39569de269b65ec939286b063e8967d2c3fda93363973c94f1"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:14:46 executing program 1: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000240), 0x0) 01:14:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000140)=0x44) 01:14:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:46 executing program 2: getrandom(0x0, 0xfffffffffffffdc8, 0x2) 01:14:46 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:46 executing program 0: socket$netlink(0x10, 0x3, 0x13) 01:14:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x400000000000ad}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/timer\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000440), 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x3}, 0x0, 0x0) 01:14:46 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000000c0)=0x1) r3 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r3, 0x0) 01:14:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a40)="95", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) 01:14:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d", 0x29}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 01:14:47 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 01:14:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x5) 01:14:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) [ 1005.814294][ T29] audit: type=1326 audit(1596849288.599:115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24910 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f2d549 code=0x7ffc0000 [ 1005.946663][ T29] audit: type=1326 audit(1596849288.639:116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24910 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2d549 code=0x7ffc0000 [ 1005.970118][ T29] audit: type=1326 audit(1596849288.649:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24910 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f2d549 code=0x7ffc0000 [ 1005.993239][ T29] audit: type=1326 audit(1596849288.649:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24910 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f2d549 code=0x7ffc0000 [ 1006.016323][ T29] audit: type=1326 audit(1596849288.669:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24910 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f2d549 code=0x7ffc0000 [ 1006.039395][ T29] audit: type=1326 audit(1596849288.689:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24910 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2d549 code=0x7ffc0000 [ 1006.062445][ T29] audit: type=1326 audit(1596849288.689:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24910 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2d549 code=0x7ffc0000 01:14:50 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1}}) 01:14:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e", 0x231) sendfile(r0, r1, 0x0, 0x1c500) 01:14:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:14:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-arm64\x00'}, 0x58) [ 1007.689865][ T29] audit: type=1804 audit(1596849290.479:122): pid=24941 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir762364535/syzkaller.xu26lO/721/file0" dev="sda1" ino=16352 res=1 01:14:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 01:14:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) writev(r0, 0x0, 0x0) 01:14:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) [ 1008.433599][ T29] audit: type=1804 audit(1596849291.219:123): pid=24953 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir762364535/syzkaller.xu26lO/721/file0" dev="sda1" ino=16352 res=1 01:14:51 executing program 4: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0xfc49c6dc03b22f18) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) getpgrp(0xffffffffffffffff) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x25) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x81, 0x100000001, 0x9, 0x2, 0x1, 0xc9}) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) 01:14:51 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') [ 1008.855812][T24970] IPVS: ftp: loaded support on port[0] = 21 [ 1009.286859][T24972] IPVS: ftp: loaded support on port[0] = 21 [ 1009.643161][ T7] tipc: TX() has been purged, node left! 01:14:54 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:54 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:14:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="dd04001300000000000100fb79db1d5bf5f7bd64b859341d"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) add_key(0x0, &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 01:14:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a800160003000100e558110000000100000e006f94007134cfb316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48500000000000000d9d322fe04730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215c1e1de7122321f25bdab53658d70727ad9a4329e3ef08e3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd8}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = dup2(r3, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000003800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800a9a55256f71fe572fec2291bfca6c51c49b9dbe628c0212ec3241a", @ANYRES16=r6, @ANYBLOB="08002bbd7000fedb630204000000140003e8756172745f776966694dab9c1fe50462"], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x4004800) 01:14:54 executing program 0: shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) [ 1011.178278][ T7] tipc: TX() has been purged, node left! [ 1011.407400][T25036] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1011.516761][T25036] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. 01:14:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0x108, 0x238, 0x108, 0x0, 0x0, 0x2f0, 0x338, 0x338, 0x338, 0x2f0, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth1\x00', 'lo\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'rose0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e127cdab440d1df98d3ea398b2a59b7226374548061bd780dfc892265b0a"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 01:14:54 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read(r1, &(0x7f0000000000)=""/47, 0x2f) 01:14:54 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:14:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:55 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:57 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:14:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:14:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 01:14:57 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:14:57 executing program 4: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x6}, 0x0) unshare(0x40000000) getpgrp(0xffffffffffffffff) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mknod$loop(0x0, 0x0, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x25) 01:14:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1015.005906][T25084] IPVS: ftp: loaded support on port[0] = 21 01:14:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:14:58 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:14:58 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r1, 0x0) 01:14:58 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec09, 0x0) [ 1015.657405][T25088] IPVS: ftp: loaded support on port[0] = 21 01:14:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1016.507193][ T21] tipc: TX() has been purged, node left! 01:14:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:15:01 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:01 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:15:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:01 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r1, 0x0) 01:15:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:15:01 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) [ 1019.100232][ T21] tipc: TX() has been purged, node left! 01:15:01 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:15:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000010000104ff0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002"], 0x60}}, 0x0) 01:15:02 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:15:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:15:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1019.835082][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1019.844789][T25189] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 01:15:05 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:05 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) 01:15:05 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) socket(0x11, 0x800000003, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 01:15:05 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:15:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 01:15:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:05 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:15:06 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) 01:15:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x5, 0x4) 01:15:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 01:15:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:08 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:08 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 01:15:08 executing program 2: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 01:15:08 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) 01:15:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) 01:15:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:15:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) 01:15:09 executing program 2: r0 = getpgid(0x0) ptrace$peek(0xffffffffffffffff, r0, 0x0) 01:15:09 executing program 0: socket$kcm(0x29, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b703000000000000620a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78ab7f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8502f53c778e41bc5305eb57c6a14bb746c71e3ac6efdbe1d99e90f4580d78e0c9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbd7bc04b82d2789cb13236a5e965ca1c9be2cf215bf76408b8667c21476619f28d9961b63e1a9cf6c2bcbbf35b1e7be6bc927d9eb643c50dc9be7c320df0148ba532e6ea09c346dfebd31a08b32808b80200000055000000004f1f45701b6131c9b43f298f334d832397d27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89adab359b4eea0c6e95767d42b4e54860d0227dbfd2e6d7f715a7f3deadd7130856ff56436303767d2e24f29e5dad97926e56487e717ad4bd9314cdb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c9727808700146065780fd9e08f00993094af7d3d3557b651c9f00f818e85840c9573cf3bede5e915d16111b7a26d8cedc1ed7b52c9d28f1eb9df100332eb3487d38cdada4d282a0f6d6f1665bb7cd5d8accead44e2e9fa4edada79458bf8a1f10b82c477b6b25741b6696e2f23b80476fcd4290069bdc4f0be5f46535e7d54fa3db3803faf6828473c8f22d31a9e6ba97388bc1cf2576ef0681502e5a3529e451e81d81098a25a1a1324a601ad3c71f9783734c7b6067c03be2ee34c256a48bcc05d9a2693091f325bd0309283d102ea6f5fcb96ea8de50000f778817cdb7e8119a79f0bfc845cde8790bd4f0104fdfa6553ab14f5bc1794a077bd077699c3d653f65688440a8da914a9ffb177e18ebd73d923c01c841d9ccd3cbf130b69b18c4375a801902c62c8e1957b4489e6ffa865d9522696c4e1e146a5b26671c112c819fb999e927b952772469eca1047614d99d0b0672d0453fe1f9e7f9e0c4888e96338f67d881815122db983236d58cf5e37f8dcdf988ce01ae42f02c35afddf4ae433682c7950d8284e9d84d016674e7457c740c718ebb22ef3c9432f783d34c37ad29f2dc0613eb25743e4319565141ac57a6f3518682ee87cec69f5c32dad0a8487207cc23d836b49e7b875e15c208be5859f4fa0cda02e17799142ec95dac7b60c8d54398487ef78267e6d001b5adfb67d3a9b829edc14c0c4adf9a02410dfad009a1c949a850000000000000037162b4fd7010059e03ad4433fc10626f1192fe12cd2323acb3ae8299a3bf00b4b46c554acfa683132ef7bedbc47ac787969bdca6c1683fdef5bc9715ec95a48e639732444919906f01c53fe408ed6aa95a4349834c69a0d9f4f8d36557a83ffea45af98ed851b41b274dce2cf6eda260a26e0a3ad0b6b1b336a6c8da2c13f51498c8de9305e9a3759b78cc1fde0511ea4c0cb5664964a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 01:15:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:15:11 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:15:11 executing program 2: getrandom(&(0x7f0000000140)=""/4142, 0x102e, 0x0) 01:15:11 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2281, 0x0) 01:15:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) 01:15:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000780)) 01:15:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 01:15:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:15:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff61}, 0x48) 01:15:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) 01:15:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000080)) 01:15:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:15:15 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) 01:15:15 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='oom_adj\x00') preadv(r0, &(0x7f00000017c0), 0x2ec, 0x0, 0x0) 01:15:15 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) 01:15:15 executing program 0: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 01:15:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:15:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='syz', 0x0) 01:15:15 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0xb27203, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='cgroup.max.descendants\x00', 0x2, 0x0) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000480)='$', 0x1}], 0x2) 01:15:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:15:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0), 0x0, 0x0) 01:15:16 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0xb27a03, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cgroup.max.descendants\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='0', 0x20000141}], 0x1) 01:15:16 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 01:15:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0), 0x0, 0x0) 01:15:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:16 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) 01:15:16 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0xb27a03, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cgroup.max.descendants\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='0', 0x20000141}], 0x1) 01:15:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 01:15:17 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0), 0x0, 0x0) 01:15:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 01:15:17 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0xb27a03, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cgroup.max.descendants\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='0', 0x20000141}], 0x1) 01:15:18 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) 01:15:18 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 01:15:19 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:19 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x2ec, 0x0, 0x0) 01:15:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:19 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='oom_adj\x00') preadv(r0, &(0x7f00000017c0), 0x2ec, 0x0, 0x0) [ 1036.604259][T10867] usb 6-1: new high-speed USB device number 8 using dummy_hcd 01:15:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 01:15:19 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 1036.975411][T10867] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1036.984713][T10867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:15:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) [ 1037.095015][T10867] usb 6-1: config 0 descriptor?? [ 1037.138148][T10867] cp210x 6-1:0.0: cp210x converter detected 01:15:20 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x53643fff, 0x30051, r2, 0x0) socket$inet(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:15:20 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:15:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) [ 1037.554348][T10867] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1037.561794][T10867] cp210x: probe of ttyUSB0 failed with error -71 [ 1037.637586][T10867] usb 6-1: USB disconnect, device number 8 [ 1037.645678][T10867] cp210x 6-1:0.0: device disconnected [ 1038.434052][T10867] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1038.815217][T10867] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1038.824946][T10867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.875262][T10867] usb 6-1: config 0 descriptor?? [ 1038.927390][T10867] cp210x 6-1:0.0: cp210x converter detected 01:15:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 01:15:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:15:21 executing program 2: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$link(0x7, r5, 0x0) 01:15:22 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 1039.188979][T10867] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1039.197117][T10867] cp210x 6-1:0.0: querying part number failed [ 1039.316402][T10867] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1039.324014][T10867] cp210x: probe of ttyUSB0 failed with error -71 [ 1039.361980][T10867] usb 6-1: USB disconnect, device number 9 [ 1039.370033][T10867] cp210x 6-1:0.0: device disconnected 01:15:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 01:15:22 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 01:15:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket(0x10, 0x80002, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg(r1, &(0x7f0000000780), 0x400000000000152, 0x1062, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/28}, {&(0x7f0000000340)=""/194}, {&(0x7f0000000440)=""/145}, {&(0x7f0000000500)=""/205}, {&(0x7f0000000600)=""/235}], 0x29) r2 = socket$nl_route(0x10, 0x3, 0x0) dup3(r2, r0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = dup(r3) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) [ 1040.084093][T10867] usb 6-1: new high-speed USB device number 10 using dummy_hcd 01:15:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) [ 1040.465540][T10867] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1040.475210][T10867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.534183][T10867] usb 6-1: config 0 descriptor?? [ 1040.577942][T10867] cp210x 6-1:0.0: cp210x converter detected [ 1041.014029][T10867] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1041.021361][T10867] cp210x: probe of ttyUSB0 failed with error -71 [ 1041.054795][T10867] usb 6-1: USB disconnect, device number 10 [ 1041.062603][T10867] cp210x 6-1:0.0: device disconnected 01:15:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 01:15:24 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:24 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket(0x10, 0x80002, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg(r1, &(0x7f0000000780), 0x400000000000152, 0x1062, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/28}, {&(0x7f0000000340)=""/194}, {&(0x7f0000000440)=""/145}, {&(0x7f0000000500)=""/205}, {&(0x7f0000000600)=""/235}], 0x29) r2 = socket$nl_route(0x10, 0x3, 0x0) dup3(r2, r0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = dup(r3) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) 01:15:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e", 0x17}], 0x1}, 0x0) 01:15:24 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:24 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 1042.263557][T10867] usb 6-1: new high-speed USB device number 11 using dummy_hcd 01:15:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1042.644724][T10867] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1042.654304][T10867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:15:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e", 0x17}], 0x1}, 0x0) [ 1042.744349][T10867] usb 6-1: config 0 descriptor?? [ 1042.803730][T10867] cp210x 6-1:0.0: cp210x converter detected [ 1043.259201][T10867] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1043.266600][T10867] cp210x: probe of ttyUSB0 failed with error -71 [ 1043.331034][T10867] usb 6-1: USB disconnect, device number 11 [ 1043.339077][T10867] cp210x 6-1:0.0: device disconnected 01:15:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:26 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e", 0x17}], 0x1}, 0x0) 01:15:26 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x53643fff, 0x30051, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:15:26 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:27 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r4, 0x4) 01:15:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e", 0x23}], 0x1}, 0x0) 01:15:27 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) [ 1044.576483][T10867] usb 6-1: new high-speed USB device number 12 using dummy_hcd 01:15:27 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e", 0x23}], 0x1}, 0x0) [ 1044.977861][T10867] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1044.987219][T10867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.109291][T10867] usb 6-1: config 0 descriptor?? [ 1045.166873][T10867] cp210x 6-1:0.0: cp210x converter detected [ 1045.623117][T10867] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1045.630526][T10867] cp210x: probe of ttyUSB0 failed with error -71 [ 1045.679938][T10867] usb 6-1: USB disconnect, device number 12 [ 1045.702042][T10867] cp210x 6-1:0.0: device disconnected 01:15:29 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) 01:15:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:29 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e", 0x23}], 0x1}, 0x0) 01:15:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:29 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 01:15:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000", 0x29}], 0x1}, 0x0) 01:15:29 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 1047.262794][ T3364] usb 6-1: new high-speed USB device number 13 using dummy_hcd 01:15:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1047.624196][ T3364] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1047.633628][ T3364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:15:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000", 0x29}], 0x1}, 0x0) [ 1047.809995][ T3364] usb 6-1: config 0 descriptor?? [ 1047.859387][ T3364] cp210x 6-1:0.0: cp210x converter detected [ 1048.062701][ T3364] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1048.070511][ T3364] cp210x 6-1:0.0: querying part number failed [ 1048.095393][ T3364] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1048.102948][ T3364] cp210x: probe of ttyUSB0 failed with error -71 [ 1048.124958][ T3364] usb 6-1: USB disconnect, device number 13 [ 1048.147385][ T3364] cp210x 6-1:0.0: device disconnected 01:15:31 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) 01:15:31 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:31 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 01:15:31 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:31 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000", 0x29}], 0x1}, 0x0) [ 1048.673489][ T4874] kworker/dying (4874) used greatest stack depth: 4248 bytes left 01:15:31 executing program 2: 01:15:31 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000", 0x2c}], 0x1}, 0x0) 01:15:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000", 0x2c}], 0x1}, 0x0) 01:15:32 executing program 2: [ 1049.472150][ T9666] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1049.863768][ T9666] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1049.873555][ T9666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.943963][ T9666] usb 6-1: config 0 descriptor?? [ 1049.986029][ T9666] cp210x 6-1:0.0: cp210x converter detected [ 1050.192395][ T9666] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1050.200141][ T9666] cp210x 6-1:0.0: querying part number failed [ 1050.228461][ T9666] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1050.236605][ T9666] cp210x: probe of ttyUSB0 failed with error -71 [ 1050.288802][ T9666] usb 6-1: USB disconnect, device number 14 [ 1050.309343][ T9666] cp210x 6-1:0.0: device disconnected 01:15:33 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) 01:15:33 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 01:15:33 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:33 executing program 0: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000", 0x2c}], 0x1}, 0x0) 01:15:33 executing program 2: 01:15:33 executing program 2: 01:15:33 executing program 0: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:33 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, 0x0, 0x0) 01:15:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1", 0x2d}], 0x1}, 0x0) 01:15:34 executing program 2: [ 1051.303120][T10867] usb 6-1: new high-speed USB device number 15 using dummy_hcd 01:15:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1", 0x2d}], 0x1}, 0x0) [ 1051.705163][T10867] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1051.714472][T10867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.819765][T10867] usb 6-1: config 0 descriptor?? [ 1051.879210][T10867] cp210x 6-1:0.0: cp210x converter detected [ 1052.082463][T10867] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1052.090217][T10867] cp210x 6-1:0.0: querying part number failed [ 1052.123732][T10867] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1052.131111][T10867] cp210x: probe of ttyUSB0 failed with error -71 [ 1052.163291][T10867] usb 6-1: USB disconnect, device number 15 [ 1052.182871][T10867] cp210x 6-1:0.0: device disconnected 01:15:35 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:35 executing program 0: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:35 executing program 2: 01:15:35 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, 0x0, 0x0) 01:15:35 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200c03737153e370a00118000000000d1", 0x2d}], 0x1}, 0x0) 01:15:36 executing program 2: 01:15:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, 0x0, 0x0) 01:15:36 executing program 0: r0 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:36 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x0, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040), 0x8) 01:15:36 executing program 2: 01:15:36 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:36 executing program 1: 01:15:37 executing program 0: r0 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:37 executing program 1: 01:15:37 executing program 2: 01:15:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040), 0x8) 01:15:37 executing program 1: 01:15:37 executing program 0: r0 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:37 executing program 2: 01:15:38 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x0, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:38 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040), 0x8) 01:15:38 executing program 2: 01:15:38 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:38 executing program 1: 01:15:38 executing program 0: r0 = socket(0x11, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:38 executing program 4: 01:15:38 executing program 2: 01:15:38 executing program 1: 01:15:38 executing program 4: 01:15:39 executing program 0: r0 = socket(0x11, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:39 executing program 2: 01:15:39 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:39 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x0, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:39 executing program 4: 01:15:39 executing program 1: 01:15:39 executing program 0: r0 = socket(0x11, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:39 executing program 2: 01:15:39 executing program 4: 01:15:39 executing program 1: 01:15:40 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:40 executing program 4: 01:15:40 executing program 2: 01:15:40 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:40 executing program 1: 01:15:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:40 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:40 executing program 4: 01:15:40 executing program 2: 01:15:40 executing program 1: 01:15:41 executing program 4: 01:15:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:41 executing program 2: 01:15:41 executing program 1: 01:15:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:41 executing program 4: 01:15:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:42 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:42 executing program 2: 01:15:42 executing program 1: 01:15:42 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:42 executing program 4: 01:15:42 executing program 1: 01:15:42 executing program 2: 01:15:42 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:42 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:42 executing program 4: 01:15:42 executing program 1: 01:15:42 executing program 2: [ 1060.221220][T18843] usb 6-1: new high-speed USB device number 16 using dummy_hcd 01:15:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:43 executing program 4: 01:15:43 executing program 2: 01:15:43 executing program 1: [ 1060.492304][T18843] usb 6-1: device descriptor read/64, error 18 01:15:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:43 executing program 4: [ 1060.880984][T18843] usb 6-1: device descriptor read/64, error 18 [ 1061.154051][T18843] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1061.432244][T18843] usb 6-1: device descriptor read/64, error 18 [ 1061.821518][T18843] usb 6-1: device descriptor read/64, error 18 [ 1061.941428][T18843] usb usb6-port1: attempt power cycle [ 1062.650405][T18843] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1062.821226][T18843] usb 6-1: device descriptor read/8, error -61 01:15:45 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:45 executing program 2: 01:15:45 executing program 1: 01:15:45 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:45 executing program 4: 01:15:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 1063.030594][T18843] usb 6-1: device descriptor read/8, error -71 01:15:46 executing program 1: 01:15:46 executing program 4: 01:15:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0), 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:46 executing program 2: [ 1063.600519][T18843] usb 6-1: new high-speed USB device number 19 using dummy_hcd 01:15:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0), 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:46 executing program 1: [ 1063.781835][T18843] usb 6-1: device descriptor read/8, error -61 [ 1064.050931][T18843] usb 6-1: device descriptor read/8, error -61 [ 1064.172971][T18843] usb usb6-port1: unable to enumerate USB device 01:15:49 executing program 2: 01:15:49 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:49 executing program 4: 01:15:49 executing program 1: 01:15:49 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0), 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:49 executing program 1: 01:15:49 executing program 2: 01:15:49 executing program 4: 01:15:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6", 0x2) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1066.879921][ T5] usb 6-1: new high-speed USB device number 20 using dummy_hcd 01:15:49 executing program 1: 01:15:49 executing program 4: [ 1067.170201][ T5] usb 6-1: device descriptor read/64, error 18 [ 1067.590877][ T5] usb 6-1: device descriptor read/64, error 18 [ 1067.878314][ T5] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1068.149753][ T5] usb 6-1: device descriptor read/64, error 18 [ 1068.569652][ T5] usb 6-1: device descriptor read/64, error 18 [ 1068.689967][ T5] usb usb6-port1: attempt power cycle [ 1069.409540][ T5] usb 6-1: new high-speed USB device number 22 using dummy_hcd 01:15:52 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6", 0x2) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:52 executing program 2: 01:15:52 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 01:15:52 executing program 1: 01:15:52 executing program 4: [ 1069.579577][ T5] usb 6-1: device descriptor read/8, error -71 [ 1069.791328][ T5] usb 6-1: device descriptor read/8, error -71 01:15:52 executing program 1: 01:15:52 executing program 4: 01:15:52 executing program 2: 01:15:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6", 0x2) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:53 executing program 1: [ 1070.290534][ T5] usb 6-1: new high-speed USB device number 23 using dummy_hcd 01:15:53 executing program 2: [ 1070.490764][ T5] usb 6-1: device descriptor read/8, error -61 [ 1070.795778][ T5] usb 6-1: device descriptor read/8, error -61 [ 1070.921387][ T5] usb usb6-port1: unable to enumerate USB device 01:15:55 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:55 executing program 4: 01:15:55 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e699", 0x3) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:55 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1004000000016) 01:15:55 executing program 2: 01:15:55 executing program 1: 01:15:55 executing program 1: 01:15:56 executing program 4: 01:15:56 executing program 2: 01:15:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e699", 0x3) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1073.589319][ T9666] usb 6-1: new high-speed USB device number 24 using dummy_hcd 01:15:56 executing program 4: 01:15:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e699", 0x3) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1073.859828][ T9666] usb 6-1: device descriptor read/64, error 18 [ 1074.250145][ T9666] usb 6-1: device descriptor read/64, error 18 [ 1074.519436][ T9666] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1074.798846][ T9666] usb 6-1: device descriptor read/64, error 18 [ 1075.188808][ T9666] usb 6-1: device descriptor read/64, error 18 [ 1075.319031][ T9666] usb usb6-port1: attempt power cycle [ 1076.039406][ T9666] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1076.191250][ T0] NOHZ: local_softirq_pending 08 [ 1076.208694][ T9666] usb 6-1: device descriptor read/8, error -61 01:15:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:15:59 executing program 2: 01:15:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 01:15:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 01:15:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:59 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1004000000016) [ 1076.419215][ T9666] usb 6-1: device descriptor read/8, error -71 01:15:59 executing program 4: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x41000) 01:15:59 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setns(r0, 0x0) 01:15:59 executing program 2: creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40442, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) 01:15:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:15:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_notify(0xffffffffffffffff, 0x0) [ 1076.988993][ T9666] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1077.031944][ T29] audit: type=1804 audit(1596849359.828:124): pid=26043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir640133253/syzkaller.dX9OOs/723/bus" dev="sda1" ino=15881 res=1 01:15:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x2e0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@dev, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@random="3eb6256c532c"}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macsec0\x00', 'macvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x8}}}, {{@arp={@broadcast, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'veth0_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x3}}}, {{@arp={@empty, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 1077.160721][ T9666] usb 6-1: device descriptor read/8, error -61 [ 1077.189821][ T29] audit: type=1804 audit(1596849359.868:125): pid=26044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir640133253/syzkaller.dX9OOs/723/bus" dev="sda1" ino=15881 res=1 [ 1077.214322][ T29] audit: type=1804 audit(1596849359.898:126): pid=26043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir640133253/syzkaller.dX9OOs/723/bus" dev="sda1" ino=15881 res=1 [ 1077.430057][ T9666] usb 6-1: device descriptor read/8, error -61 [ 1077.551567][ T9666] usb usb6-port1: unable to enumerate USB device 01:16:02 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f23800"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240), &(0x7f00000002c0)=0x8) 01:16:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:16:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000500)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x24000000) 01:16:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="3801000059e95b"], 0x138}}, 0x0) 01:16:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1004000000016) [ 1079.717769][T26070] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59737 sclass=netlink_xfrm_socket pid=26070 comm=syz-executor.4 01:16:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:16:02 executing program 1: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/84) 01:16:02 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) 01:16:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) [ 1080.238368][ T5] usb 6-1: new high-speed USB device number 28 using dummy_hcd 01:16:03 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1080.553210][ T5] usb 6-1: no configurations [ 1080.558143][ T5] usb 6-1: can't read configurations, error -22 [ 1080.741464][ T5] usb 6-1: new high-speed USB device number 29 using dummy_hcd 01:16:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) personality(0x0) [ 1081.052488][ T5] usb 6-1: no configurations [ 1081.057331][ T5] usb 6-1: can't read configurations, error -22 [ 1081.098675][ T5] usb usb6-port1: attempt power cycle [ 1081.848347][ T5] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1081.988022][ T5] usb 6-1: no configurations [ 1081.992871][ T5] usb 6-1: can't read configurations, error -22 [ 1082.147760][ T5] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1082.278088][ T5] usb 6-1: no configurations [ 1082.282949][ T5] usb 6-1: can't read configurations, error -22 [ 1082.290467][ T5] usb usb6-port1: unable to enumerate USB device 01:16:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f23800"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:05 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:16:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, @in={0x2, 0x0, @multicast1}, @phonet, @phonet={0x23, 0x0, 0x0, 0xff}}) 01:16:05 executing program 1: msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 01:16:05 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='schedstat\x00') 01:16:05 executing program 3: gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) [ 1083.068819][T26118] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 01:16:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 01:16:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:16:06 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 01:16:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_stats}) [ 1083.407810][ T5] usb 6-1: new high-speed USB device number 32 using dummy_hcd 01:16:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:16:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000180)=""/78, &(0x7f0000000100)=0x4e) [ 1083.700020][ T5] usb 6-1: no configurations [ 1083.705020][ T5] usb 6-1: can't read configurations, error -22 [ 1083.898187][ T5] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1084.212360][ T5] usb 6-1: no configurations [ 1084.217189][ T5] usb 6-1: can't read configurations, error -22 [ 1084.244381][ T5] usb usb6-port1: attempt power cycle [ 1084.977466][ T5] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1085.108782][ T5] usb 6-1: no configurations [ 1085.113567][ T5] usb 6-1: can't read configurations, error -22 [ 1085.277438][ T5] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1085.407690][ T5] usb 6-1: no configurations [ 1085.412510][ T5] usb 6-1: can't read configurations, error -22 [ 1085.419983][ T5] usb usb6-port1: unable to enumerate USB device 01:16:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f23800"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x135) 01:16:08 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x0) 01:16:08 executing program 3: gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 01:16:08 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:16:08 executing program 2: r0 = inotify_init1(0x0) fstat(r0, 0x0) 01:16:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r0, 0x0) 01:16:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@private0}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 01:16:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$CHAR_RAW_PBSZGET(r2, 0x127b, 0x0) 01:16:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1086.723478][ T5] usb 6-1: new high-speed USB device number 36 using dummy_hcd 01:16:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) [ 1087.041992][ T5] usb 6-1: no configurations [ 1087.046931][ T5] usb 6-1: can't read configurations, error -22 01:16:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r2 = dup(r1) lseek(r2, 0x0, 0x3) [ 1087.277550][ T5] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1087.568661][ T5] usb 6-1: no configurations [ 1087.573511][ T5] usb 6-1: can't read configurations, error -22 [ 1087.629855][ T5] usb usb6-port1: attempt power cycle [ 1088.378023][ T5] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1088.521161][ T5] usb 6-1: no configurations [ 1088.526111][ T5] usb 6-1: can't read configurations, error -22 [ 1088.707139][ T5] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1088.868310][ T5] usb 6-1: no configurations [ 1088.873167][ T5] usb 6-1: can't read configurations, error -22 [ 1088.880581][ T5] usb usb6-port1: unable to enumerate USB device 01:16:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f2380000000109021200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:12 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) 01:16:12 executing program 3: gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 01:16:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) 01:16:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) mq_notify(r1, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 01:16:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) 01:16:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0xee}) 01:16:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040), 0x1c) 01:16:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, 0x0, 0xfdef) 01:16:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x9, 0x803}, 0x14}}, 0x0) 01:16:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0xa, 0x4) [ 1090.014956][ T5] usb 6-1: new high-speed USB device number 40 using dummy_hcd 01:16:13 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 1090.418701][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.429180][ T5] usb 6-1: config 0 has no interfaces? [ 1090.435116][ T5] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1090.444564][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.611547][ T5] usb 6-1: config 0 descriptor?? 01:16:15 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f2380000000109021200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:15 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000280)) 01:16:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, 0x0, 0xfdef) 01:16:15 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x0) 01:16:15 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'batadv_slave_0\x00', &(0x7f0000000740)=@ethtool_flash={0x26, 0xac47, './file1\x00'}}) 01:16:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="580000001400192340834b80043f679a0aff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b38945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff000000000000000000", 0x58}], 0x1) [ 1092.644117][ T8695] usb 6-1: USB disconnect, device number 40 [ 1092.822189][T26256] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 01:16:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, 0x0, 0xfdef) 01:16:15 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 01:16:15 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000080)={r0}, 0x8) 01:16:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:16:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 1093.405602][ T5] usb 6-1: new high-speed USB device number 41 using dummy_hcd 01:16:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) [ 1093.837583][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.848040][ T5] usb 6-1: config 0 has no interfaces? [ 1093.853754][ T5] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1093.863170][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.977766][ T5] usb 6-1: config 0 descriptor?? 01:16:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f2380000000109021200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:18 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x0) 01:16:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchown(0xffffffffffffffff, 0xee01, 0x0) 01:16:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x1f0, 0x0, 0x1f0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'bond0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@ipv4={[], [], @remote}, @local, [], [], 'caif0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 01:16:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 01:16:18 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x3, 0x0) [ 1096.030177][ T5] usb 6-1: USB disconnect, device number 41 01:16:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 01:16:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 01:16:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040), 0x1c) listen(r0, 0x0) 01:16:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 01:16:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0) [ 1096.732382][ T5] usb 6-1: new high-speed USB device number 42 using dummy_hcd 01:16:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) [ 1097.127299][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.137837][ T5] usb 6-1: config 0 has no interfaces? [ 1097.143573][ T5] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1097.153061][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.358065][ T5] usb 6-1: config 0 descriptor?? 01:16:22 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:22 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x8411c0, 0x0) 01:16:22 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x0) 01:16:22 executing program 4: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000380)=""/179) 01:16:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) 01:16:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0700000000000000feff1f20000000000087"]}) [ 1099.386026][ T5] usb 6-1: USB disconnect, device number 42 01:16:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) 01:16:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x40}}]}, 0x2c}}, 0x0) 01:16:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) 01:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) [ 1100.095827][T18843] usb 6-1: new high-speed USB device number 43 using dummy_hcd 01:16:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0x2, 0x9}) 01:16:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e", 0x47}], 0x2}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de", 0x68}], 0x1}}], 0x2, 0x0) [ 1100.456850][T18843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.467508][T18843] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.476870][T18843] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1100.486329][T18843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.680563][T18843] usb 6-1: config 0 descriptor?? 01:16:25 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000"], 0xfdef) 01:16:25 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 01:16:25 executing program 3: r0 = inotify_init1(0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x101) 01:16:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) 01:16:25 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8}}, @TCA_STAB={0x4}]}, 0x3c}}, 0x0) [ 1102.732521][T18843] usb 6-1: USB disconnect, device number 43 01:16:25 executing program 2: getrandom(&(0x7f0000000700)=""/4096, 0x1000, 0x0) 01:16:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000"], 0xfdef) 01:16:26 executing program 1: setresgid(0x0, 0x0, 0x0) 01:16:26 executing program 3: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1103.422777][T18843] usb 6-1: new high-speed USB device number 44 using dummy_hcd 01:16:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) 01:16:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000"], 0xfdef) [ 1103.796668][T18843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.807278][T18843] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1103.816614][T18843] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1103.825897][T18843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.996681][T18843] usb 6-1: config 0 descriptor?? 01:16:28 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) eventfd(0x0) 01:16:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) 01:16:28 executing program 4: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 01:16:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f00000001c0)="a4", 0x1}], 0x3}}], 0x1, 0x0) 01:16:28 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700"/18], 0xfdef) [ 1106.061149][ T3364] usb 6-1: USB disconnect, device number 44 01:16:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700"/18], 0xfdef) 01:16:29 executing program 4: shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) 01:16:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x14, r3, 0x1}, 0x14}}, 0x0) 01:16:29 executing program 2: 01:16:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(0x0, r1, 0xffffffffffffffff) [ 1106.794761][ T9666] usb 6-1: new high-speed USB device number 45 using dummy_hcd 01:16:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700"/18], 0xfdef) [ 1107.167085][ T9666] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.177570][ T9666] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1107.186917][ T9666] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1107.196264][ T9666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.316771][ T9666] usb 6-1: config 0 descriptor?? 01:16:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f2380000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:32 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 01:16:32 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x301000, 0x0) close(r0) 01:16:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00130b"], 0x1c}}, 0x0) 01:16:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) flistxattr(r0, 0x0, 0xffffffffffffff6e) 01:16:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700"/21], 0xfdef) [ 1109.415082][ T9666] usb 6-1: USB disconnect, device number 45 01:16:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700"/21], 0xfdef) 01:16:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast2}}) 01:16:32 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 01:16:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0x2}) 01:16:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0x0) [ 1110.074304][ T9666] usb 6-1: new high-speed USB device number 46 using dummy_hcd 01:16:33 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000007c0)=ANY=[], 0x7b) [ 1110.465849][ T9666] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1110.475819][ T9666] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1110.485165][ T9666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.586081][ T9666] usb 6-1: config 0 descriptor?? 01:16:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f2380000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:35 executing program 1: r0 = gettid() wait4(r0, 0x0, 0x0, 0x0) 01:16:35 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700"/21], 0xfdef) 01:16:35 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x8, 0x4) 01:16:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, 0x0) 01:16:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f196588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1112.795060][ T3364] usb 6-1: USB disconnect, device number 46 01:16:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1) 01:16:35 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 01:16:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fstat(r0, &(0x7f0000000080)) 01:16:36 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700000000000000000000000000000000000089"], 0xfdef) [ 1113.389006][T12907] usb 6-1: new high-speed USB device number 47 using dummy_hcd 01:16:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x5, 0x6, 0x5, 0x4, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) 01:16:36 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) [ 1113.756907][T12907] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1113.766173][T12907] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1113.775575][T12907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.903912][T12907] usb 6-1: config 0 descriptor?? 01:16:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f2380000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:38 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700000000000000000000000000000000000089"], 0xfdef) 01:16:38 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) 01:16:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x57) 01:16:38 executing program 2: socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000180)=""/246) ioctl$EVIOCGREP(r2, 0x4004743c, 0x0) 01:16:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1116.079773][ T3364] usb 6-1: USB disconnect, device number 47 [ 1116.380277][T26595] syz-executor.2 (26595) used obsolete PPPIOCDETACH ioctl 01:16:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="24000000180007841dfffd946f61050002008100fd038b0602000800080006000400ff7e280000001100ffffba16a0aa1c09001b04694c5d3b33af00000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:16:39 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b0700000000000000000000000000000000000089"], 0xfdef) 01:16:39 executing program 1: symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0) [ 1116.823676][ T3364] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1116.835824][T26614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:16:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 01:16:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSKBENT(r1, 0x4b47, 0x0) 01:16:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getown(r0, 0x9) [ 1117.195242][ T3364] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1117.204807][ T3364] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1117.214171][ T3364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.352969][ T3364] usb 6-1: config 0 descriptor?? 01:16:42 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:42 executing program 1: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 01:16:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 01:16:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) 01:16:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) 01:16:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) [ 1119.440589][T10867] usb 6-1: USB disconnect, device number 48 01:16:42 executing program 2: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x2) 01:16:42 executing program 1: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 01:16:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 01:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x3, 0x136, [0x20000380, 0x0, 0x0, 0x200004be, 0x20000fca], 0x0, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x9, 0x0, 0x0, 'gretap0\x00', 'sit0\x00', 'bond_slave_0\x00', 'vlan0\x00', @remote, [], @local, [], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@link_local}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x3}]}, 0x17e) 01:16:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 1120.113442][ T8695] usb 6-1: new high-speed USB device number 49 using dummy_hcd 01:16:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'team_slave_0\x00', {0x2, 0x0, @private}}) [ 1120.474707][ T8695] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1120.484198][ T8695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.619899][ T8695] usb 6-1: config 0 descriptor?? [ 1120.721697][ T8695] cp210x 6-1:0.0: cp210x converter detected [ 1120.883296][ T8695] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1120.891124][ T8695] cp210x 6-1:0.0: querying part number failed [ 1120.966945][ T8695] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1120.974668][ T8695] cp210x: probe of ttyUSB0 failed with error -71 [ 1121.037113][ T8695] usb 6-1: USB disconnect, device number 49 [ 1121.045532][ T8695] cp210x 6-1:0.0: device disconnected 01:16:44 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:44 executing program 1: shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) select(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0) 01:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) getpeername$packet(r1, 0x0, 0x0) 01:16:44 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40041, 0x0) 01:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040), 0x4) 01:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, 0x0, 0xffffffffffffff78}) 01:16:44 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 01:16:44 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) 01:16:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 01:16:44 executing program 0: request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0) 01:16:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 01:16:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0x108, 0x248, 0x0, 0x0, 0x0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @local, [], [], 'veth0_vlan\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bridge0\x00', {0x0, 0x0, 0x9, 0x2, 0x0, 0x3590, 0x1}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb331f3ae839a733f3041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) [ 1122.222950][T12907] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1122.594433][T12907] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1122.603854][T12907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.705220][T12907] usb 6-1: config 0 descriptor?? [ 1122.753774][T12907] cp210x 6-1:0.0: cp210x converter detected [ 1122.963204][T12907] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1122.971111][T12907] cp210x 6-1:0.0: querying part number failed [ 1123.017861][T12907] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1123.025359][T12907] cp210x: probe of ttyUSB0 failed with error -71 [ 1123.061356][T12907] usb 6-1: USB disconnect, device number 50 [ 1123.083347][T12907] cp210x 6-1:0.0: device disconnected 01:16:46 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:46 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, r2) 01:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 01:16:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000340)) 01:16:46 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') fcntl$setpipe(r0, 0x407, 0x0) 01:16:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="800100002400818e031f00000000000000be88ec", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x180}}, 0x0) [ 1123.657258][T26752] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1123.708648][T26754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1123.837312][T26759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:16:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_newroute={0x1c, 0x18, 0xb03}, 0x1c}}, 0x0) 01:16:46 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 01:16:46 executing program 1: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'ip6gretap0\x00', {0x2, 0x4e20, @multicast1}}) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 01:16:46 executing program 0: mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) 01:16:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000180)) [ 1124.223358][ T8695] usb 6-1: new high-speed USB device number 51 using dummy_hcd 01:16:47 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), 0x0) [ 1124.584406][ T8695] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1124.593970][ T8695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.671562][ T8695] usb 6-1: config 0 descriptor?? [ 1124.739632][ T8695] cp210x 6-1:0.0: cp210x converter detected [ 1124.923263][ T8695] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1124.931119][ T8695] cp210x 6-1:0.0: querying part number failed [ 1124.990954][ T8695] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1124.999755][ T8695] cp210x: probe of ttyUSB0 failed with error -71 [ 1125.084574][ T8695] usb 6-1: USB disconnect, device number 51 [ 1125.092912][ T8695] cp210x 6-1:0.0: device disconnected 01:16:48 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 01:16:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001600)=@add_del={0x2, &(0x7f00000015c0)='vlan0\x00'}) 01:16:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in, 0x1000000, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 01:16:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@caif=@rfm={0x25, 0x0, "9c0f23f1c6d8497287bb15f6a6edfc26"}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 01:16:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000000240)=""/243, &(0x7f0000000340)=0xf3) 01:16:48 executing program 4: remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 01:16:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 01:16:48 executing program 1: ioprio_set$uid(0x0, 0x0, 0x4004) 01:16:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) 01:16:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0x158, 0x0, 0xd0, 0x190, 0x98, 0x1f0, 0x228, 0x228, 0x228, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ipvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@private, @empty, 0x0, 0x0, 'vlan1\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) [ 1126.282548][T12907] usb 6-1: new high-speed USB device number 52 using dummy_hcd 01:16:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 01:16:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="20000000250001c49c443da74e895d48d26935c7ece76337338f9aabe6e9240ccf483617167d4d7745b6ea6fb82d9c92b13b18f8d36aa29bbf521705f60b1380202408578905090000009fe91e6e5bce84b3ae5b2817902e0cba5b9abb5b3cce6ec83bebbb6b9199c46e0cb1d088f46ce7cadc6731c6f59bc27dcd1aeefe96b86789ac80e3b5d67a2b97ca9acc23d14efc8a3b1eab8ec756607ab8f654e2063e994fdd000000"], 0x20}], 0x1, 0x0, 0xfffffeeb, 0x10}, 0x4080) [ 1126.697330][T12907] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1126.706965][T12907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.779584][T12907] usb 6-1: config 0 descriptor?? [ 1126.829646][T12907] cp210x 6-1:0.0: cp210x converter detected [ 1127.042544][T12907] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1127.050289][T12907] cp210x 6-1:0.0: querying part number failed [ 1127.082548][T12907] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1127.089844][T12907] cp210x: probe of ttyUSB0 failed with error -71 [ 1127.149166][T12907] usb 6-1: USB disconnect, device number 52 [ 1127.157766][T12907] cp210x 6-1:0.0: device disconnected 01:16:50 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 01:16:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001600)="602daef3d1915edcbd194c22b588ccc8fb395bb669016f4a0b7cf426180ad8046321cec044ca2078c5fdce64015c4da029eaea1eb82d8d820e87015b0235ca14b2c2fd4e25c0e181f1fa66e4fe", 0x4d}, {&(0x7f0000001780)="2007790774877f6a440e4f225010e1291eb6a8ad930fcc5a1ae1fb1322eb70acf949131dabe5118297706319e46ce7ca54d72a360b02e246d9368373ea81d0482873c7aef90a83255564d627c2919d76c87ec405736a13a5066ea718a5bd208a9466e3eacd7d2d5a4b2371a92affa7f7049c8fdaf62e92e11b21", 0x7a}], 0x2}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000200)="a1fb056fd742c4624e2d67c8a7ef43696f3e", 0x12}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0", 0x4a}], 0x2}}], 0x3, 0x0) 01:16:50 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 01:16:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 01:16:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 01:16:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "98d3caab806eab79576839c5656be8410f2802e944af80516b665770173fbd180700000000000000ad08f139a676000000000000100000000000000000702200"}, 0x12) 01:16:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:16:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000200)=@random={'security.', 'netem\x00'}) 01:16:50 executing program 4: rt_sigpending(&(0x7f0000000000), 0xfffffffffffffdd2) 01:16:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) [ 1128.432328][ T8695] usb 6-1: new high-speed USB device number 53 using dummy_hcd 01:16:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) tee(r0, r1, 0x5, 0x0) 01:16:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x6b}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xfffff000, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) [ 1128.792533][ T8695] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1128.802180][ T8695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.833299][ T8695] usb 6-1: config 0 descriptor?? [ 1128.875760][ T8695] cp210x 6-1:0.0: cp210x converter detected [ 1129.082596][ T8695] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1129.090485][ T8695] cp210x 6-1:0.0: querying part number failed [ 1129.136429][ T8695] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1129.144636][ T8695] cp210x: probe of ttyUSB0 failed with error -71 [ 1129.215327][ T8695] usb 6-1: USB disconnect, device number 53 [ 1129.223894][ T8695] cp210x 6-1:0.0: device disconnected 01:16:52 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 01:16:52 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60"], 0x0) 01:16:52 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) listen(r0, 0x4) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040), 0xb) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0), 0x4) recvmmsg(r4, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 01:16:52 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) listen(r0, 0x4) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), 0x4) 01:16:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000080)) 01:16:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 01:16:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000080)) 01:16:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x158}}, 0x0) recvmsg(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001ec0)=""/102400, 0x19000}], 0x1}, 0x0) [ 1130.352128][ T5] usb 6-1: new high-speed USB device number 54 using dummy_hcd 01:16:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r3, r0, 0x0) 01:16:53 executing program 1: 01:16:53 executing program 4: [ 1130.733909][ T5] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1130.743263][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.862455][ T5] usb 6-1: config 0 descriptor?? [ 1130.917353][ T5] cp210x 6-1:0.0: cp210x converter detected [ 1131.123181][ T5] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1131.131116][ T5] cp210x 6-1:0.0: querying part number failed [ 1131.235117][ T5] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1131.243276][ T5] cp210x: probe of ttyUSB0 failed with error -71 [ 1131.338703][ T5] usb 6-1: USB disconnect, device number 54 [ 1131.347224][ T5] cp210x 6-1:0.0: device disconnected 01:16:54 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:54 executing program 0: 01:16:54 executing program 3: 01:16:54 executing program 1: 01:16:54 executing program 2: 01:16:54 executing program 4: 01:16:54 executing program 1: 01:16:54 executing program 3: 01:16:54 executing program 4: 01:16:54 executing program 0: 01:16:54 executing program 2: [ 1132.411687][T18843] usb 6-1: new high-speed USB device number 55 using dummy_hcd 01:16:55 executing program 2: [ 1132.783132][T18843] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1132.792749][T18843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.849554][T18843] usb 6-1: config 0 descriptor?? [ 1132.897072][T18843] cp210x 6-1:0.0: cp210x converter detected [ 1133.113471][T18843] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1133.121318][T18843] cp210x 6-1:0.0: querying part number failed [ 1133.153346][T18843] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1133.160639][T18843] cp210x: probe of ttyUSB0 failed with error -71 [ 1133.192192][T18843] usb 6-1: USB disconnect, device number 55 [ 1133.199972][T18843] cp210x 6-1:0.0: device disconnected 01:16:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:56 executing program 4: 01:16:56 executing program 0: 01:16:56 executing program 3: 01:16:56 executing program 1: 01:16:56 executing program 2: 01:16:56 executing program 3: 01:16:56 executing program 2: 01:16:56 executing program 4: 01:16:56 executing program 0: 01:16:56 executing program 1: [ 1134.395830][ T8695] usb 6-1: new high-speed USB device number 56 using dummy_hcd 01:16:57 executing program 3: [ 1134.762806][ T8695] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1134.772405][ T8695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.822473][ T8695] usb 6-1: config 0 descriptor?? [ 1134.869626][ T8695] cp210x 6-1:0.0: cp210x converter detected [ 1135.071596][ T8695] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1135.079355][ T8695] cp210x 6-1:0.0: querying part number failed [ 1135.102020][ T8695] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1135.109382][ T8695] cp210x: probe of ttyUSB0 failed with error -71 [ 1135.144780][ T8695] usb 6-1: USB disconnect, device number 56 [ 1135.155235][ T8695] cp210x 6-1:0.0: device disconnected 01:16:58 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:16:58 executing program 2: 01:16:58 executing program 4: 01:16:58 executing program 0: 01:16:58 executing program 1: 01:16:58 executing program 3: 01:16:58 executing program 0: 01:16:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bridge_slave_1\x00') 01:16:58 executing program 1: 01:16:58 executing program 3: 01:16:58 executing program 4: [ 1136.431336][ T3364] usb 6-1: new high-speed USB device number 57 using dummy_hcd 01:16:59 executing program 2: [ 1136.793775][ T3364] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1136.803451][ T3364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.861989][ T3364] usb 6-1: config 0 descriptor?? [ 1136.907958][ T3364] cp210x 6-1:0.0: cp210x converter detected [ 1137.114422][ T3364] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1137.122779][ T3364] cp210x 6-1:0.0: querying part number failed [ 1137.141265][ T3364] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1137.148709][ T3364] cp210x: probe of ttyUSB0 failed with error -71 [ 1137.168091][ T3364] usb 6-1: USB disconnect, device number 57 [ 1137.176602][ T3364] cp210x 6-1:0.0: device disconnected 01:17:00 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:17:00 executing program 0: 01:17:00 executing program 3: 01:17:00 executing program 1: 01:17:00 executing program 4: 01:17:00 executing program 2: 01:17:00 executing program 2: 01:17:00 executing program 3: 01:17:00 executing program 1: 01:17:00 executing program 4: 01:17:01 executing program 0: [ 1138.471458][ T8695] usb 6-1: new high-speed USB device number 58 using dummy_hcd 01:17:01 executing program 1: [ 1138.833335][ T8695] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1138.842840][ T8695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.886161][ T8695] usb 6-1: config 0 descriptor?? [ 1138.935230][ T8695] cp210x 6-1:0.0: cp210x converter detected [ 1139.146437][ T8695] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 1139.154287][ T8695] cp210x 6-1:0.0: querying part number failed [ 1139.362085][ T8695] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1139.369753][ T8695] cp210x: probe of ttyUSB0 failed with error -71 [ 1139.411586][ T8695] usb 6-1: USB disconnect, device number 58 [ 1139.419501][ T8695] cp210x 6-1:0.0: device disconnected 01:17:02 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:17:02 executing program 3: 01:17:02 executing program 2: 01:17:02 executing program 4: 01:17:02 executing program 0: 01:17:02 executing program 1: 01:17:03 executing program 4: 01:17:03 executing program 0: 01:17:03 executing program 2: 01:17:03 executing program 3: 01:17:03 executing program 1: [ 1140.640668][T12907] usb 6-1: new high-speed USB device number 59 using dummy_hcd 01:17:03 executing program 3: [ 1141.042055][T12907] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1141.051470][T12907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.139695][T12907] usb 6-1: config 0 descriptor?? [ 1141.184471][T12907] cp210x 6-1:0.0: cp210x converter detected [ 1141.403825][T12907] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 1141.411664][T12907] cp210x 6-1:0.0: querying part number failed [ 1141.630719][T12907] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1141.638033][T12907] cp210x: probe of ttyUSB0 failed with error -71 [ 1141.649709][T12907] usb 6-1: USB disconnect, device number 59 [ 1141.659707][T12907] cp210x 6-1:0.0: device disconnected 01:17:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000054f22240c410f680f238000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:17:04 executing program 4: 01:17:04 executing program 2: 01:17:04 executing program 0: 01:17:04 executing program 1: 01:17:04 executing program 3: 01:17:05 executing program 2: 01:17:05 executing program 4: 01:17:05 executing program 3: 01:17:05 executing program 1: 01:17:05 executing program 0: [ 1142.930682][ T9666] usb 6-1: new high-speed USB device number 60 using dummy_hcd 01:17:05 executing program 3: [ 1143.313784][ T9666] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1143.323128][ T9666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.360772][ T9666] usb 6-1: config 0 descriptor?? [ 1143.404891][ T9666] cp210x 6-1:0.0: cp210x converter detected [ 1143.611186][ T9666] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 1143.618928][ T9666] cp210x 6-1:0.0: querying part number failed [ 1143.833826][ T9666] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1143.841241][ T9666] cp210x: probe of ttyUSB0 failed with error -71 [ 1143.907799][ T9666] usb 6-1: USB disconnect, device number 60 [ 1143.915929][ T9666] cp210x 6-1:0.0: device disconnected 01:17:07 executing program 2: 01:17:07 executing program 1: 01:17:07 executing program 4: 01:17:07 executing program 0: 01:17:07 executing program 3: 01:17:07 executing program 4: 01:17:07 executing program 5: 01:17:07 executing program 1: 01:17:07 executing program 3: 01:17:07 executing program 2: 01:17:08 executing program 0: 01:17:08 executing program 5: 01:17:08 executing program 4: 01:17:08 executing program 1: 01:17:08 executing program 2: 01:17:08 executing program 3: 01:17:08 executing program 0: 01:17:08 executing program 5: 01:17:09 executing program 4: 01:17:09 executing program 2: 01:17:09 executing program 3: 01:17:09 executing program 1: 01:17:09 executing program 0: 01:17:09 executing program 5: 01:17:09 executing program 4: 01:17:09 executing program 3: 01:17:09 executing program 2: 01:17:09 executing program 1: 01:17:10 executing program 5: 01:17:10 executing program 0: 01:17:10 executing program 2: 01:17:10 executing program 1: 01:17:10 executing program 3: 01:17:10 executing program 4: 01:17:10 executing program 0: 01:17:10 executing program 5: 01:17:10 executing program 2: 01:17:11 executing program 1: 01:17:11 executing program 3: 01:17:11 executing program 4: 01:17:11 executing program 0: 01:17:11 executing program 5: 01:17:11 executing program 2: 01:17:11 executing program 1: 01:17:11 executing program 4: 01:17:11 executing program 3: 01:17:11 executing program 0: 01:17:11 executing program 5: 01:17:12 executing program 2: 01:17:12 executing program 1: 01:17:12 executing program 0: 01:17:12 executing program 3: 01:17:12 executing program 4: 01:17:12 executing program 5: 01:17:12 executing program 1: 01:17:12 executing program 2: 01:17:12 executing program 4: 01:17:12 executing program 3: 01:17:12 executing program 5: 01:17:13 executing program 0: 01:17:13 executing program 1: 01:17:13 executing program 2: 01:17:13 executing program 4: 01:17:13 executing program 5: 01:17:13 executing program 3: 01:17:13 executing program 0: 01:17:13 executing program 2: 01:17:13 executing program 1: 01:17:13 executing program 4: 01:17:14 executing program 3: 01:17:14 executing program 5: 01:17:14 executing program 0: 01:17:14 executing program 1: 01:17:14 executing program 2: 01:17:14 executing program 4: 01:17:14 executing program 3: 01:17:14 executing program 5: 01:17:14 executing program 0: 01:17:14 executing program 1: 01:17:14 executing program 2: 01:17:15 executing program 3: 01:17:15 executing program 5: 01:17:15 executing program 4: 01:17:15 executing program 1: 01:17:15 executing program 0: 01:17:15 executing program 2: 01:17:15 executing program 3: 01:17:15 executing program 5: 01:17:15 executing program 4: 01:17:16 executing program 1: 01:17:16 executing program 2: 01:17:16 executing program 0: 01:17:16 executing program 3: 01:17:16 executing program 5: 01:17:16 executing program 4: 01:17:16 executing program 1: 01:17:16 executing program 2: 01:17:16 executing program 0: 01:17:16 executing program 3: 01:17:17 executing program 5: 01:17:17 executing program 4: 01:17:17 executing program 1: 01:17:17 executing program 2: 01:17:17 executing program 0: 01:17:17 executing program 3: 01:17:17 executing program 5: 01:17:17 executing program 4: 01:17:17 executing program 1: 01:17:17 executing program 2: 01:17:17 executing program 0: 01:17:18 executing program 0: 01:17:18 executing program 3: 01:17:18 executing program 4: 01:17:18 executing program 1: 01:17:18 executing program 5: 01:17:18 executing program 2: 01:17:19 executing program 0: 01:17:19 executing program 2: 01:17:19 executing program 3: 01:17:19 executing program 4: 01:17:19 executing program 1: 01:17:19 executing program 5: 01:17:19 executing program 3: 01:17:19 executing program 0: 01:17:19 executing program 2: 01:17:19 executing program 1: 01:17:20 executing program 4: 01:17:20 executing program 5: 01:17:20 executing program 3: 01:17:20 executing program 0: 01:17:20 executing program 2: 01:17:20 executing program 4: 01:17:20 executing program 1: 01:17:20 executing program 5: 01:17:20 executing program 3: 01:17:21 executing program 2: 01:17:21 executing program 0: 01:17:21 executing program 4: 01:17:21 executing program 5: 01:17:21 executing program 1: 01:17:21 executing program 3: 01:17:21 executing program 2: 01:17:21 executing program 0: 01:17:21 executing program 4: 01:17:21 executing program 5: 01:17:21 executing program 1: 01:17:22 executing program 3: 01:17:22 executing program 2: 01:17:22 executing program 0: 01:17:22 executing program 4: 01:17:22 executing program 5: 01:17:22 executing program 1: 01:17:22 executing program 0: 01:17:22 executing program 2: 01:17:22 executing program 3: 01:17:22 executing program 5: 01:17:23 executing program 4: 01:17:23 executing program 1: 01:17:23 executing program 0: 01:17:23 executing program 2: 01:17:23 executing program 3: 01:17:23 executing program 5: 01:17:23 executing program 4: 01:17:23 executing program 1: 01:17:23 executing program 0: 01:17:23 executing program 2: 01:17:24 executing program 3: 01:17:24 executing program 5: 01:17:24 executing program 4: 01:17:24 executing program 0: 01:17:24 executing program 1: 01:17:24 executing program 2: 01:17:24 executing program 3: 01:17:24 executing program 5: 01:17:24 executing program 4: 01:17:25 executing program 1: 01:17:25 executing program 0: 01:17:25 executing program 3: 01:17:25 executing program 2: 01:17:25 executing program 5: 01:17:25 executing program 4: 01:17:25 executing program 1: 01:17:25 executing program 0: 01:17:25 executing program 2: 01:17:25 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c060500000300430008000300fc00fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000300), 0x0) 01:17:25 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000040)={0x0, 0x103, 0x0, 0x0}) 01:17:26 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x914, 0x0) 01:17:26 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x0) socket(0x2, 0xb93cdd5b9fe8fa8c, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={0x0}, 0x10) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) r1 = socket$inet(0x10, 0x0, 0x0) write(r1, &(0x7f0000000040), 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:17:26 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1163.355081][T27357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1163.556679][T27357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1163.567976][T27361] md: could not open device unknown-block(259,0). [ 1163.574516][T27361] md: md_import_device returned -6 01:17:26 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./bus\x00'}, 0x10) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001e005f02", 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:17:26 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000040)={0x0, 0x103, 0x0, 0x0}) 01:17:26 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:27 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000040)={0x0, 0x103, 0x0, 0x0}) 01:17:27 executing program 4: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c060500000300430008000300fc00fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x23, 0x2, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x204, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, [0x4, 0x8, 0x2, 0x101, 0x8, 0xd1, 0x8, 0x81, 0x4, 0x8f8, 0xc2b3, 0x1, 0x1, 0xa2, 0xb86d]}, &(0x7f00000001c0)=0x100) write$9p(0xffffffffffffffff, &(0x7f0000000300)="0ec16099c88e73af5289b4db7087df78d209610679fd066c3f1bfcf6de7a635c786f021bc046372b217dca89c612124b38a8570fc3f1693d3370ee547acadf58d2280d6a8455a9b313e50bce5e286b8b9fa40fef2feda9052786a667fa2c7e8b3fc365650dd9e59d1a90fc9a56d1247f4efd70f0f53ddb96c70670da87ffc7cd7b8c142ec5af3fb5afdc533f09", 0x8d) 01:17:27 executing program 2: timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4027e, 0x0) write$binfmt_elf64(r0, &(0x7f00000007c0)=ANY=[], 0xffffffb7) sendfile(r0, r0, 0x0, 0x808100000002) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 01:17:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x0) socket(0x2, 0xb93cdd5b9fe8fa8c, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={0x0}, 0x10) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) r1 = socket$inet(0x10, 0x0, 0x0) write(r1, &(0x7f0000000040), 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:17:27 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000040)={0x0, 0x103, 0x0, 0x0}) 01:17:27 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r0, &(0x7f00000001c0)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 1165.200845][T27415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:17:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x2, 0x400, 0xc, 0x82}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1081, r0}, 0x38) 01:17:28 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1165.993242][T27415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:17:28 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:29 executing program 5: socket$inet6_sctp(0xa, 0x80000000000001, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x8, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) 01:17:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 01:17:29 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x66100) 01:17:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r0, 0x100000000009) listen(r0, 0x0) listen(r0, 0x5) 01:17:29 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:29 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:29 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg(r0, &(0x7f0000005d80)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) 01:17:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000340), 0x0}, 0x20) 01:17:30 executing program 4: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0xfc49c6dc03b22f18) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x25) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x81, 0x0, 0x9, 0x2, 0x5, 0xc9}) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 01:17:30 executing program 3: pwritev2(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/16, 0x10}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x14e, &(0x7f0000000580)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e165224897ba4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad84c998bd2f7155d302a7be122bb1609f8b0164eb12c07a0200169c864e1d5f8179cba2e43112cfb22fcd74713b3c6de0592538cbaa3815a784395a80adbe3e983622703c353d66482824849f7292e0b07a3ce8e5928ba8a827a26e6536c0f704bcbc0159fc3e30e4bafef10600a07ce3d96f546e65fab4000b66c7d5f9a96b5557d63adcf56296204d29e9a53220551604b78d5d767b860c487f5c8c8e41c2572de801093d6b5cfc1eb7d23dd84be0547827fdfb23a99d1c125beb1736000000000000000000c5dc05dc17acbdb2b7629ed5ef94c307241a5158f109a2d2e7ce444224aa171408b3299b65ca1a"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:17:30 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x66100) [ 1168.127645][T27472] IPVS: ftp: loaded support on port[0] = 21 01:17:31 executing program 3: pwritev2(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) [ 1168.556732][T27474] IPVS: ftp: loaded support on port[0] = 21 01:17:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 01:17:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 01:17:31 executing program 3: pwritev2(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) [ 1169.015031][ T1323] tipc: TX() has been purged, node left! 01:17:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x84, @remote, 0x0, 0x0, 'lblcr\x00'}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:17:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340), 0x0}, 0x20) 01:17:32 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 01:17:32 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:32 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000000)={0x0, 0x1827}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000340)={r2, 0x0, 0x49}, &(0x7f0000000400)={'enc=', 'raw', ' hash=', {'sha224-avx\x00'}}, 0x0, &(0x7f0000000500)=""/73) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$isdn_base(r0, &(0x7f00000001c0)={0x22, 0x7, 0x20, 0x0, 0x9}, 0x6) sendmsg$NL80211_CMD_GET_INTERFACE(r1, 0x0, 0x91) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 01:17:33 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff8070007000503000000000000000008000900e5b60000", 0x24) [ 1170.633564][ T9666] usb 6-1: new high-speed USB device number 61 using dummy_hcd 01:17:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 01:17:33 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) [ 1170.877442][ T9666] usb 6-1: Using ep0 maxpacket: 8 [ 1171.042314][ T9666] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1171.050601][ T9666] usb 6-1: config 0 has no interface number 0 [ 1171.056969][ T9666] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 1171.068598][ T9666] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1171.078807][ T9666] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 1171.088946][ T9666] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 1171.098242][ T9666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:17:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x32706e45, 0x2) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 01:17:34 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1171.421748][ T9666] usb 6-1: config 0 descriptor?? 01:17:34 executing program 4: syz_io_uring_setup(0x604e, &(0x7f00000002c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0000e6, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x58000000}]) [ 1171.461419][T27542] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1171.534096][T27542] raw-gadget gadget: fail, usb_ep_enable returned -22 01:17:34 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x40101283, 0x0) 01:17:36 executing program 5: 01:17:36 executing program 1: 01:17:36 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:36 executing program 2: 01:17:36 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:36 executing program 4: syz_io_uring_setup(0x604e, &(0x7f00000002c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0000e6, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x58000000}]) [ 1173.571561][T18843] usb 6-1: USB disconnect, device number 61 [ 1173.633507][ T1323] tipc: TX() has been purged, node left! 01:17:36 executing program 1: 01:17:36 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:37 executing program 2: 01:17:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:37 executing program 5: 01:17:37 executing program 1: 01:17:37 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x7) 01:17:37 executing program 2: 01:17:37 executing program 5: 01:17:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:38 executing program 1: 01:17:38 executing program 4: syz_io_uring_setup(0x604e, &(0x7f00000002c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0000e6, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x58000000}]) 01:17:38 executing program 2: 01:17:38 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x7) 01:17:38 executing program 5: 01:17:38 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:38 executing program 1: 01:17:39 executing program 4: syz_io_uring_setup(0x604e, &(0x7f00000002c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0000e6, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x58000000}]) 01:17:39 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x7) 01:17:39 executing program 2: 01:17:39 executing program 5: 01:17:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:39 executing program 1: 01:17:39 executing program 2: 01:17:39 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x7) 01:17:39 executing program 5: 01:17:40 executing program 1: 01:17:40 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:40 executing program 2: 01:17:40 executing program 4: 01:17:40 executing program 5: 01:17:40 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640), 0x0, 0x0, 0x0, 0x7) 01:17:40 executing program 1: 01:17:40 executing program 2: 01:17:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:41 executing program 5: 01:17:41 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640), 0x0, 0x0, 0x0, 0x7) 01:17:41 executing program 1: 01:17:41 executing program 4: 01:17:41 executing program 2: 01:17:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:41 executing program 5: 01:17:41 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640), 0x0, 0x0, 0x0, 0x7) 01:17:42 executing program 1: 01:17:42 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 01:17:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 01:17:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec0100002800270d000000110000000000000000", @ANYRES32=r2, @ANYBLOB="04"], 0x1ec}}, 0x0) 01:17:42 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:42 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{0x0}], 0x1, 0x0, 0x0, 0x7) 01:17:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) [ 1179.917134][T27702] fuse: Invalid rootmode 01:17:42 executing program 1: tkill(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc06"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 01:17:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) readahead(r2, 0x0, 0x5) sendfile(r0, r1, 0x0, 0x100f3) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 1180.184027][T27714] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.306820][T27717] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 01:17:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:43 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{0x0}], 0x1, 0x0, 0x0, 0x7) 01:17:43 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201fe0009003c08ff200042ef160000000109021b8c5b7600000009040002010209bd00070581070001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x2}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe8, 0xc0, 0xf1, 0x0, 0x148f, 0x5372, 0x6a4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0xe2, 0xe7}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0xfffffffffffffcf5, &(0x7f0000000300)="893c8aa1eeea37") [ 1180.842038][ T29] audit: type=1804 audit(1596849463.640:127): pid=27726 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir640133253/syzkaller.dX9OOs/833/file0" dev="sda1" ino=16380 res=1 01:17:43 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 01:17:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:17:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:44 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{0x0}], 0x1, 0x0, 0x0, 0x7) [ 1181.566276][ T3364] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1181.729985][T18843] usb 5-1: new high-speed USB device number 8 using dummy_hcd 01:17:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1181.806370][ T3364] usb 6-1: Using ep0 maxpacket: 8 01:17:44 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff0401"], 0x0) [ 1181.928365][ T3364] usb 6-1: config index 0 descriptor too short (expected 35867, got 27) [ 1181.937460][ T3364] usb 6-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 1181.946584][ T3364] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.957124][ T3364] usb 6-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 1181.966556][ T3364] usb 6-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 01:17:44 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)}], 0x1, 0x0, 0x0, 0x7) [ 1181.977850][ T3364] usb 6-1: config 118 interface 0 has no altsetting 0 [ 1181.984836][ T3364] usb 6-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 1181.994159][ T3364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.052533][T18843] usb 5-1: Using ep0 maxpacket: 32 [ 1182.101531][ T3364] hub 6-1:118.0: bad descriptor, ignoring hub [ 1182.108004][ T3364] hub: probe of 6-1:118.0 failed with error -5 [ 1182.163744][ T3364] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 1182.189577][ T9667] usb 3-1: new high-speed USB device number 15 using dummy_hcd 01:17:45 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1182.344846][T18843] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1182.354330][T18843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.362758][T18843] usb 5-1: Product: syz [ 1182.367215][T18843] usb 5-1: Manufacturer: syz [ 1182.371943][T18843] usb 5-1: SerialNumber: syz [ 1182.419944][ T3364] usb 6-1: USB disconnect, device number 62 [ 1182.534024][T18843] usb 5-1: config 0 descriptor?? [ 1182.561160][ T9667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1182.570556][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.647979][ T9667] usb 3-1: config 0 descriptor?? [ 1182.686348][T12907] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1182.692301][ T9667] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:17:45 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)}], 0x1, 0x0, 0x0, 0x7) 01:17:45 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1182.887314][ T3364] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1183.030134][T18843] usb 5-1: MIDIStreaming interface descriptor not found [ 1183.051481][T12907] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.062004][T12907] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 01:17:45 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)}], 0x1, 0x0, 0x0, 0x7) [ 1183.075469][T12907] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1183.084744][T12907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.125868][ T3364] usb 6-1: Using ep0 maxpacket: 8 [ 1183.237744][T18843] usb 5-1: USB disconnect, device number 8 [ 1183.246529][ T3364] usb 6-1: config index 0 descriptor too short (expected 35867, got 27) [ 1183.248298][T12907] usb 2-1: NFC: intf 000000000c93d291 id 00000000bcbcd621 [ 1183.255031][ T3364] usb 6-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 1183.271404][ T3364] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.281934][ T3364] usb 6-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 1183.291545][ T3364] usb 6-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.302930][ T3364] usb 6-1: config 118 interface 0 has no altsetting 0 [ 1183.310008][ T3364] usb 6-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 1183.319315][ T3364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.428428][ T3364] hub 6-1:118.0: bad descriptor, ignoring hub [ 1183.434862][ T3364] hub: probe of 6-1:118.0 failed with error -5 [ 1183.456843][T12907] usb 2-1: USB disconnect, device number 2 [ 1183.488370][ T3364] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 1183.949511][T18843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1184.196624][T18843] usb 5-1: Using ep0 maxpacket: 32 [ 1184.237227][T12907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1184.407996][T27828] udc-core: couldn't find an available UDC or it's busy [ 1184.415208][T27828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1184.457481][ T9667] gspca_stk1135: reg_w 0x200 err -71 [ 1184.464121][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.470857][ T9667] gspca_stk1135: Sensor write failed [ 1184.476782][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.483158][ T9667] gspca_stk1135: Sensor write failed [ 1184.488723][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.495100][ T9667] gspca_stk1135: Sensor read failed [ 1184.501742][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.508200][ T9667] gspca_stk1135: Sensor read failed [ 1184.513454][ T9667] gspca_stk1135: Detected sensor type unknown (0x0) [ 1184.520312][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.526789][ T9667] gspca_stk1135: Sensor read failed [ 1184.532137][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.538623][ T9667] gspca_stk1135: Sensor read failed [ 1184.544061][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.550540][ T9667] gspca_stk1135: Sensor write failed [ 1184.556057][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.562423][ T9667] gspca_stk1135: Sensor write failed [ 1184.568116][ T9667] stk1135: probe of 3-1:0.0 failed with error -71 [ 1184.578802][T18843] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1184.588112][T18843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.596378][T18843] usb 5-1: Product: syz [ 1184.600692][T18843] usb 5-1: Manufacturer: syz [ 1184.605452][T18843] usb 5-1: SerialNumber: syz [ 1184.619025][T27828] udc-core: couldn't find an available UDC or it's busy [ 1184.626469][T27828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1184.634303][T12907] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.644856][T12907] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1184.658385][T12907] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1184.667762][T12907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.681167][T18843] usb 5-1: config 0 descriptor?? [ 1184.708620][T18843] usb 5-1: can't set config #0, error -71 [ 1184.722457][ T9667] usb 3-1: USB disconnect, device number 15 [ 1184.741291][T18843] usb 5-1: USB disconnect, device number 9 [ 1185.000753][T12907] usb 2-1: NFC: intf 0000000019af266a id 00000000bcbcd621 [ 1185.233550][T18849] usb 2-1: USB disconnect, device number 3 [ 1185.396159][ T9667] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1185.776421][ T9667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1185.785915][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.893913][ T9667] usb 3-1: config 0 descriptor?? [ 1185.973179][ T9667] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:17:48 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201fe0009003c08ff200042ef160000000109021b8c5b7600000009040002010209bd00070581070001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x2}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe8, 0xc0, 0xf1, 0x0, 0x148f, 0x5372, 0x6a4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0xe2, 0xe7}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0xfffffffffffffcf5, &(0x7f0000000300)="893c8aa1eeea37") 01:17:48 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1186.136491][T12907] usb 6-1: USB disconnect, device number 63 [ 1186.295976][ T9667] gspca_stk1135: reg_w 0x2 err -71 [ 1186.302310][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.309051][ T9667] gspca_stk1135: Sensor write failed [ 1186.314505][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.321007][ T9667] gspca_stk1135: Sensor write failed [ 1186.326570][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.332946][ T9667] gspca_stk1135: Sensor read failed [ 1186.338527][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.344910][ T9667] gspca_stk1135: Sensor read failed [ 1186.350331][ T9667] gspca_stk1135: Detected sensor type unknown (0x0) [ 1186.357407][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.363895][ T9667] gspca_stk1135: Sensor read failed [ 1186.369403][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.375913][ T9667] gspca_stk1135: Sensor read failed [ 1186.381257][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.387789][ T9667] gspca_stk1135: Sensor write failed 01:17:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:17:49 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x0) 01:17:49 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 01:17:49 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff0401"], 0x0) [ 1186.393251][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1186.399763][ T9667] gspca_stk1135: Sensor write failed [ 1186.405500][ T9667] stk1135: probe of 3-1:0.0 failed with error -71 01:17:49 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:49 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 1186.799229][ T9667] usb 3-1: USB disconnect, device number 16 01:17:49 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000003640)=[{&(0x7f0000002540)="ad", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 1187.075648][ T3364] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1187.085569][T27791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1187.093816][T18843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1187.195737][ T9667] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1187.335856][ T3364] usb 6-1: Using ep0 maxpacket: 8 [ 1187.341602][T18843] usb 5-1: Using ep0 maxpacket: 32 01:17:50 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0xd0e00000]) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xd1, 0x101080) syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x0, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) [ 1187.458893][T27791] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.469869][T27791] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1187.483546][T27791] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1187.492906][T27791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.503574][ T3364] usb 6-1: config index 0 descriptor too short (expected 35867, got 27) [ 1187.512271][ T3364] usb 6-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 1187.521357][ T3364] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.531923][ T3364] usb 6-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 1187.541384][ T3364] usb 6-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.552803][ T3364] usb 6-1: config 118 interface 0 has no altsetting 0 01:17:50 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1187.559893][ T3364] usb 6-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 1187.569279][ T3364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.630473][T27791] usb 2-1: NFC: intf 00000000157f9abc id 00000000bcbcd621 [ 1187.649304][ T3364] hub 6-1:118.0: bad descriptor, ignoring hub [ 1187.656112][ T3364] hub: probe of 6-1:118.0 failed with error -5 [ 1187.677289][ T9667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1187.686750][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.720237][ T3364] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 1187.735045][ T9667] usb 3-1: config 0 descriptor?? [ 1187.790521][ T9667] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1187.799529][T18843] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1187.808913][T18843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.817201][T18843] usb 5-1: Product: syz [ 1187.821524][T18843] usb 5-1: Manufacturer: syz [ 1187.826453][T18843] usb 5-1: SerialNumber: syz [ 1187.904942][T27791] usb 6-1: USB disconnect, device number 64 [ 1187.916369][T18843] usb 5-1: config 0 descriptor?? [ 1187.940046][ T5] usb 2-1: USB disconnect, device number 4 01:17:51 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1188.275744][ T3364] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1188.426703][T18843] usb 5-1: MIDIStreaming interface descriptor not found [ 1188.465661][T27791] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1188.515290][ T3364] usb 4-1: Using ep0 maxpacket: 8 [ 1188.636854][ T3364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1188.648609][ T3364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1188.659734][ T3364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1188.669929][ T3364] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1188.683254][ T3364] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1188.692907][ T3364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.730223][T18843] usb 5-1: USB disconnect, device number 10 [ 1188.745592][T27791] usb 6-1: Using ep0 maxpacket: 8 [ 1188.866822][T27791] usb 6-1: config index 0 descriptor too short (expected 35867, got 27) [ 1188.875729][T27791] usb 6-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 1188.884679][T27791] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.895332][T27791] usb 6-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 1188.904694][T27791] usb 6-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.916289][T27791] usb 6-1: config 118 interface 0 has no altsetting 0 [ 1188.923366][T27791] usb 6-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 1188.933018][T27791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.022019][T27902] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1189.048771][T27902] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1189.096955][ T3364] hub 4-1:1.0: bad descriptor, ignoring hub [ 1189.103134][ T3364] hub: probe of 4-1:1.0 failed with error -5 [ 1189.207323][T27791] hub 6-1:118.0: bad descriptor, ignoring hub [ 1189.213683][T27791] hub: probe of 6-1:118.0 failed with error -5 [ 1189.263669][T27791] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 1189.324059][T27902] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1189.352148][T27902] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1189.615619][ T9667] gspca_stk1135: reg_w 0x200 err -71 [ 1189.622232][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.629164][ T9667] gspca_stk1135: Sensor write failed [ 1189.634730][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.641502][ T9667] gspca_stk1135: Sensor write failed [ 1189.647154][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.653552][ T9667] gspca_stk1135: Sensor read failed [ 1189.659067][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.665572][ T9667] gspca_stk1135: Sensor read failed [ 1189.670847][ T9667] gspca_stk1135: Detected sensor type unknown (0x0) [ 1189.677742][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.684130][ T9667] gspca_stk1135: Sensor read failed [ 1189.689649][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.696210][ T9667] gspca_stk1135: Sensor read failed [ 1189.701662][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.708714][ T9667] gspca_stk1135: Sensor write failed [ 1189.714168][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1189.720774][ T9667] gspca_stk1135: Sensor write failed [ 1189.726486][ T9667] stk1135: probe of 3-1:0.0 failed with error -71 [ 1189.740335][ T3364] usblp 4-1:1.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1189.767684][ T9667] usb 3-1: USB disconnect, device number 17 [ 1189.842276][T27902] udc-core: couldn't find an available UDC or it's busy [ 1189.849745][T27902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1189.998841][ T5] usb 4-1: USB disconnect, device number 2 [ 1190.027169][ T5] usblp1: removed [ 1190.190011][T27973] udc-core: couldn't find an available UDC or it's busy [ 1190.197319][T27973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1190.243326][T27973] udc-core: couldn't find an available UDC or it's busy [ 1190.250710][T27973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1190.685170][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1190.925836][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 1191.066376][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1191.077980][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1191.088352][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1191.098566][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1191.111947][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1191.121396][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:17:54 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201fe0009003c08ff200042ef160000000109021b8c5b7600000009040002010209bd00070581070001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x2}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe8, 0xc0, 0xf1, 0x0, 0x148f, 0x5372, 0x6a4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0xe2, 0xe7}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0xfffffffffffffcf5, &(0x7f0000000300)="893c8aa1eeea37") 01:17:54 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 01:17:54 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff0401"], 0x0) 01:17:54 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 01:17:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:17:54 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0xd0e00000]) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xd1, 0x101080) syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x0, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) [ 1191.619845][ T5] usb 4-1: can't set config #1, error -71 [ 1191.671420][ T5] usb 4-1: USB disconnect, device number 3 [ 1191.785347][T12907] usb 6-1: USB disconnect, device number 65 01:17:54 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1191.985032][ T3364] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1192.046442][ T9667] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1192.068194][T26726] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1192.185866][T18843] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1192.205162][ T9666] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1192.335564][T26726] usb 5-1: Using ep0 maxpacket: 32 [ 1192.352093][ T3364] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.362756][ T3364] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1192.376475][ T3364] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c 01:17:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1192.385816][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.436456][ T9667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1192.445995][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.455603][T18843] usb 6-1: Using ep0 maxpacket: 8 [ 1192.465704][ T9666] usb 4-1: Using ep0 maxpacket: 8 [ 1192.507637][ T9667] usb 3-1: config 0 descriptor?? [ 1192.552560][ T9667] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1192.576711][T18843] usb 6-1: config index 0 descriptor too short (expected 35867, got 27) [ 1192.586000][T18843] usb 6-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 1192.595151][T18843] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.597561][ T9666] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1192.605677][T18843] usb 6-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 1192.605855][T18843] usb 6-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.617072][ T9666] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1192.617220][ T9666] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1192.626654][T18843] usb 6-1: config 118 interface 0 has no altsetting 0 [ 1192.637738][ T9666] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1192.637891][ T9666] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1192.647977][T18843] usb 6-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 1192.657908][ T9666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.704742][T18843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.707427][T26726] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1192.715789][ T3364] usb 2-1: NFC: intf 0000000060c0ca81 id 00000000bcbcd621 [ 1192.722025][T26726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.737255][T26726] usb 5-1: Product: syz [ 1192.741595][T26726] usb 5-1: Manufacturer: syz [ 1192.746662][T26726] usb 5-1: SerialNumber: syz [ 1192.906812][T26726] usb 5-1: config 0 descriptor?? 01:17:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1192.967640][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1192.995485][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1193.029640][ T9666] hub 4-1:1.0: bad descriptor, ignoring hub [ 1193.036012][ T9666] hub: probe of 4-1:1.0 failed with error -5 [ 1193.043756][ T3364] usb 2-1: USB disconnect, device number 5 [ 1193.256128][T18843] hub 6-1:118.0: bad descriptor, ignoring hub [ 1193.262478][T18843] hub: probe of 6-1:118.0 failed with error -5 [ 1193.316686][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1193.325653][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1193.359345][T18843] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 1193.416767][T26726] usb 5-1: MIDIStreaming interface descriptor not found [ 1193.487596][T18843] usb 6-1: USB disconnect, device number 66 01:17:56 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1193.568860][ T9666] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1193.591102][T26726] usb 5-1: USB disconnect, device number 11 01:17:56 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff0401"], 0x0) [ 1193.918374][T28006] udc-core: couldn't find an available UDC or it's busy [ 1193.925909][T28006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1194.089236][ T9666] usb 4-1: USB disconnect, device number 4 [ 1194.114897][T18843] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1194.143137][ T9666] usblp0: removed 01:17:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1194.325896][ T9667] gspca_stk1135: reg_w 0x200 err -71 [ 1194.332415][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.339317][ T9667] gspca_stk1135: Sensor write failed [ 1194.344946][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.351342][ T9667] gspca_stk1135: Sensor write failed [ 1194.357188][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.363719][ T9667] gspca_stk1135: Sensor read failed [ 1194.369294][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.375894][ T9667] gspca_stk1135: Sensor read failed [ 1194.381175][ T9667] gspca_stk1135: Detected sensor type unknown (0x0) [ 1194.388056][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.394722][ T9667] gspca_stk1135: Sensor read failed [ 1194.400169][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.406708][ T9667] gspca_stk1135: Sensor read failed [ 1194.412077][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.418724][ T9667] gspca_stk1135: Sensor write failed [ 1194.424760][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1194.431217][ T9667] gspca_stk1135: Sensor write failed [ 1194.436928][ T9667] stk1135: probe of 3-1:0.0 failed with error -71 [ 1194.475562][T18843] usb 6-1: Using ep0 maxpacket: 8 [ 1194.596017][T18843] usb 6-1: config index 0 descriptor too short (expected 35867, got 27) [ 1194.604840][T18843] usb 6-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 1194.613798][T18843] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.625448][T18843] usb 6-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 1194.635109][T18843] usb 6-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.646491][T18843] usb 6-1: config 118 interface 0 has no altsetting 0 [ 1194.653615][T18843] usb 6-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 1194.663052][T18843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.890712][ T9667] usb 3-1: USB disconnect, device number 18 01:17:57 executing program 5: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/194) 01:17:57 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 01:17:57 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0xd0e00000]) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xd1, 0x101080) syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x0, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) 01:17:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1194.984984][T18843] usb 6-1: can't set config #118, error -71 [ 1195.039881][T18843] usb 6-1: USB disconnect, device number 67 01:17:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1195.184938][ T3364] usb 2-1: new high-speed USB device number 6 using dummy_hcd 01:17:58 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1195.384973][T27882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1195.385069][T26726] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1195.547809][ T3364] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.558418][ T3364] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1195.572115][ T3364] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1195.581497][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.655328][T26726] usb 5-1: Using ep0 maxpacket: 32 [ 1195.696708][ T3364] usb 2-1: NFC: intf 0000000016b3729b id 00000000bcbcd621 [ 1195.714596][T27882] usb 4-1: Using ep0 maxpacket: 8 01:17:58 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1195.749608][ T9666] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1195.836016][T27882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1195.847664][T27882] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1195.858085][T27882] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1195.868555][T27882] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1195.881854][T27882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1195.891195][T27882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.971751][T26726] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1195.973400][T18843] usb 2-1: USB disconnect, device number 6 [ 1195.981219][T26726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.981333][T26726] usb 5-1: Product: syz [ 1195.999669][T26726] usb 5-1: Manufacturer: syz [ 1196.004538][T26726] usb 5-1: SerialNumber: syz 01:17:58 executing program 5: [ 1196.068116][T26726] usb 5-1: config 0 descriptor?? [ 1196.204906][ T9666] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1196.207918][T28099] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1196.214324][ T9666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.271867][T28099] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1196.314865][ T9666] usb 3-1: config 0 descriptor?? [ 1196.326350][T27882] hub 4-1:1.0: bad descriptor, ignoring hub [ 1196.332524][T27882] hub: probe of 4-1:1.0 failed with error -5 [ 1196.384299][ T9666] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:17:59 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 01:17:59 executing program 5: [ 1196.605497][T26726] usb 5-1: MIDIStreaming interface descriptor not found [ 1196.634805][T28099] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1196.642826][T28099] raw-gadget gadget: fail, usb_ep_enable returned -22 01:17:59 executing program 1: [ 1196.731663][T26726] usb 5-1: USB disconnect, device number 12 [ 1196.960643][T27882] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 01:17:59 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 01:17:59 executing program 5: [ 1197.218718][T28099] udc-core: couldn't find an available UDC or it's busy [ 1197.226307][T28099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 01:18:00 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) [ 1197.395082][T27882] usb 4-1: USB disconnect, device number 5 [ 1197.418078][T27882] usblp0: removed 01:18:00 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0xd0e00000]) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xd1, 0x101080) syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x0, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) 01:18:00 executing program 1: [ 1197.965778][T26726] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1198.145953][ T9666] gspca_stk1135: reg_w 0x200 err -71 [ 1198.152451][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.159228][ T9666] gspca_stk1135: Sensor write failed [ 1198.165294][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.171698][ T9666] gspca_stk1135: Sensor write failed [ 1198.177450][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.183860][ T9666] gspca_stk1135: Sensor read failed [ 1198.189469][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.196166][ T9666] gspca_stk1135: Sensor read failed [ 1198.201433][ T9666] gspca_stk1135: Detected sensor type unknown (0x0) [ 1198.208425][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.214985][ T9666] gspca_stk1135: Sensor read failed [ 1198.220437][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.226950][ T9666] gspca_stk1135: Sensor read failed [ 1198.232315][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.238881][ T9666] gspca_stk1135: Sensor write failed [ 1198.244444][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.250820][ T9666] gspca_stk1135: Sensor write failed [ 1198.256611][ T9666] stk1135: probe of 3-1:0.0 failed with error -71 [ 1198.300490][ T9666] usb 3-1: USB disconnect, device number 19 [ 1198.316155][T26726] usb 5-1: Using ep0 maxpacket: 32 [ 1198.464767][T12907] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1198.635739][T26726] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1198.645132][T26726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.653290][T26726] usb 5-1: Product: syz [ 1198.657860][T26726] usb 5-1: Manufacturer: syz [ 1198.662616][T26726] usb 5-1: SerialNumber: syz [ 1198.734449][T12907] usb 4-1: Using ep0 maxpacket: 8 [ 1198.742238][T26726] usb 5-1: config 0 descriptor?? 01:18:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 01:18:01 executing program 5: 01:18:01 executing program 1: [ 1198.855882][T12907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1198.867532][T12907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1198.877779][T12907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1198.887915][T12907] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1198.901223][T12907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1198.910575][T12907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:18:02 executing program 1: syz_usb_connect(0x0, 0x36, 0x0, 0x0) [ 1199.224916][T26726] usb 5-1: MIDIStreaming interface descriptor not found 01:18:02 executing program 0: 01:18:02 executing program 5: [ 1199.337622][T28180] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1199.373739][T26726] usb 5-1: USB disconnect, device number 13 [ 1199.387251][T28180] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1199.446952][T12907] hub 4-1:1.0: bad descriptor, ignoring hub [ 1199.453145][T12907] hub: probe of 4-1:1.0 failed with error -5 [ 1199.584365][T27882] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1199.676556][T28180] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1199.684685][T28180] raw-gadget gadget: fail, usb_ep_enable returned -22 01:18:02 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) 01:18:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000600)=ANY=[], &(0x7f0000000580)=0x94) 01:18:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, 0x0, 0x0) [ 1199.946140][T27882] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1199.955595][T27882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.978685][T12907] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1200.014970][T27882] usb 3-1: config 0 descriptor?? [ 1200.061956][T27882] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1200.251936][T28180] udc-core: couldn't find an available UDC or it's busy [ 1200.259648][T28180] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1200.406296][ T3364] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1200.474948][T12907] usb 4-1: USB disconnect, device number 6 [ 1200.505372][T12907] usblp0: removed [ 1200.654107][ T3364] usb 5-1: Using ep0 maxpacket: 32 01:18:03 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0xd0e00000]) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xd1, 0x101080) 01:18:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000a00), 0x14) [ 1200.937934][ T3364] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1200.947591][ T3364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.955981][ T3364] usb 5-1: Product: syz [ 1200.960304][ T3364] usb 5-1: Manufacturer: syz [ 1200.965249][ T3364] usb 5-1: SerialNumber: syz [ 1201.064507][ T3364] usb 5-1: config 0 descriptor?? [ 1201.384880][ T3364] usb 5-1: MIDIStreaming interface descriptor not found [ 1201.438417][T18843] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1201.470510][ T3364] usb 5-1: USB disconnect, device number 14 [ 1201.597690][T27882] gspca_stk1135: reg_w 0xf err -71 [ 1201.604028][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.610422][T27882] gspca_stk1135: Sensor write failed [ 1201.616196][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.622588][T27882] gspca_stk1135: Sensor write failed [ 1201.628276][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.634934][T27882] gspca_stk1135: Sensor read failed [ 1201.640307][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.646899][T27882] gspca_stk1135: Sensor read failed [ 1201.652283][T27882] gspca_stk1135: Detected sensor type unknown (0x0) [ 1201.659319][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.665879][T27882] gspca_stk1135: Sensor read failed [ 1201.671250][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.677826][T27882] gspca_stk1135: Sensor read failed [ 1201.683189][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.689840][T27882] gspca_stk1135: Sensor write failed [ 1201.695723][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.702126][T27882] gspca_stk1135: Sensor write failed [ 1201.709044][T27882] stk1135: probe of 3-1:0.0 failed with error -71 [ 1201.736649][T27882] usb 3-1: USB disconnect, device number 20 [ 1201.764731][T18843] usb 4-1: Using ep0 maxpacket: 8 [ 1201.885526][T18843] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1201.897052][T18843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1201.907679][T18843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1201.917847][T18843] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1201.931171][T18843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1201.940564][T18843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.057022][T28261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1202.078602][T28261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1202.115741][T18843] hub 4-1:1.0: bad descriptor, ignoring hub [ 1202.121937][T18843] hub: probe of 4-1:1.0 failed with error -5 01:18:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000280)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:18:05 executing program 1: syz_usb_connect(0x0, 0x36, 0x0, 0x0) 01:18:05 executing program 0: r0 = socket(0x2, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000000), 0x10) 01:18:05 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) [ 1202.338093][T28261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1202.384629][T28261] raw-gadget gadget: fail, usb_ep_enable returned -22 01:18:05 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x7a, 0x1c, 0xffffffffffffffff}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:18:05 executing program 0: r0 = socket(0x2, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) dup2(r0, r1) [ 1202.649944][T18843] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1202.674160][T12907] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1202.844468][T27882] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1202.925440][T12907] usb 5-1: Using ep0 maxpacket: 32 01:18:05 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket(0x2, 0x5, 0x0) dup2(r1, r0) [ 1202.995032][T18843] usb 4-1: USB disconnect, device number 7 [ 1203.040477][T18843] usblp0: removed 01:18:05 executing program 1: syz_usb_connect(0x0, 0x36, 0x0, 0x0) 01:18:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000000c0), 0x10) [ 1203.207402][T27882] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1203.216910][T27882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.235232][T12907] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1203.244733][T12907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.252883][T12907] usb 5-1: Product: syz [ 1203.257355][T12907] usb 5-1: Manufacturer: syz [ 1203.262230][T12907] usb 5-1: SerialNumber: syz [ 1203.282564][T27882] usb 3-1: config 0 descriptor?? [ 1203.342053][T27882] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1203.414585][T12907] usb 5-1: config 0 descriptor?? 01:18:06 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0xd0e00000]) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) [ 1203.744209][T12907] usb 5-1: MIDIStreaming interface descriptor not found 01:18:06 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@prinfo={0x14}], 0x14}, 0x0) [ 1203.913825][T12907] usb 5-1: USB disconnect, device number 15 [ 1204.273987][T18843] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1204.523876][T18843] usb 4-1: Using ep0 maxpacket: 8 [ 1204.644970][T18843] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1204.656351][T18843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1204.666913][T18843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1204.677248][T18843] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1204.690806][T18843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1204.700239][T18843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.776373][T28365] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1204.794514][T28365] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1204.816141][T18843] hub 4-1:1.0: bad descriptor, ignoring hub [ 1204.822310][T18843] hub: probe of 4-1:1.0 failed with error -5 [ 1204.864379][T27882] gspca_stk1135: reg_w 0xf err -71 [ 1204.870647][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.877366][T27882] gspca_stk1135: Sensor write failed [ 1204.882816][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.889520][T27882] gspca_stk1135: Sensor write failed [ 1204.895234][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.901600][T27882] gspca_stk1135: Sensor read failed [ 1204.907194][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.913748][T27882] gspca_stk1135: Sensor read failed [ 1204.919011][T27882] gspca_stk1135: Detected sensor type unknown (0x0) [ 1204.925980][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.932376][T27882] gspca_stk1135: Sensor read failed [ 1204.937842][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.944460][T27882] gspca_stk1135: Sensor read failed [ 1204.949878][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.956461][T27882] gspca_stk1135: Sensor write failed [ 1204.961861][T27882] gspca_stk1135: serial bus timeout: status=0x00 [ 1204.968639][T27882] gspca_stk1135: Sensor write failed [ 1204.974448][T27882] stk1135: probe of 3-1:0.0 failed with error -71 [ 1204.995315][T27882] usb 3-1: USB disconnect, device number 21 [ 1205.041051][T28365] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1205.057524][T28365] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1205.307542][T18843] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 01:18:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 01:18:08 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=""/223, 0xdf}, 0x40041) 01:18:08 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) 01:18:08 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) [ 1205.636924][ T3364] usb 4-1: USB disconnect, device number 8 [ 1205.661061][ T3364] usblp0: removed 01:18:08 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)=0x8) 01:18:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x110}, 0xa0) [ 1205.864496][T12907] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1205.873806][T18843] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1206.026721][T26726] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1206.110783][T12907] usb 5-1: Using ep0 maxpacket: 32 01:18:09 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0xd0e00000]) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) [ 1206.143985][T18843] usb 2-1: device descriptor read/64, error 18 01:18:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x102, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000140)=0xa1) 01:18:09 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) [ 1206.414962][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1206.424292][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.443719][T12907] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1206.452935][T12907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.461231][T12907] usb 5-1: Product: syz [ 1206.466408][T12907] usb 5-1: Manufacturer: syz [ 1206.471150][T12907] usb 5-1: SerialNumber: syz [ 1206.513935][T26726] usb 3-1: config 0 descriptor?? [ 1206.535201][T18843] usb 2-1: device descriptor read/64, error 18 [ 1206.550044][T12907] usb 5-1: config 0 descriptor?? [ 1206.567752][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1206.674265][ T9666] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1206.803728][T18843] usb 2-1: new high-speed USB device number 8 using dummy_hcd 01:18:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0xfc12}, 0x8) [ 1206.888893][T12907] usb 5-1: MIDIStreaming interface descriptor not found [ 1206.923490][ T9666] usb 4-1: Using ep0 maxpacket: 8 [ 1207.038974][T12907] usb 5-1: USB disconnect, device number 16 [ 1207.056180][ T9666] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1207.067641][ T9666] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1207.074270][T18843] usb 2-1: device descriptor read/64, error 18 01:18:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000000), 0x1) [ 1207.077853][ T9666] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1207.093942][ T9666] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1207.107267][ T9666] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1207.116600][ T9666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.386703][T28424] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1207.443757][T28424] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1207.467278][ T9666] hub 4-1:1.0: bad descriptor, ignoring hub [ 1207.473563][ T9666] hub: probe of 4-1:1.0 failed with error -5 [ 1207.473644][T18843] usb 2-1: device descriptor read/64, error 18 [ 1207.594203][T18843] usb usb2-port1: attempt power cycle [ 1207.700326][T28424] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1207.718578][T28424] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1207.987759][ T9666] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1208.053255][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1208.059747][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.066359][T26726] gspca_stk1135: Sensor write failed [ 1208.071826][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.078437][T26726] gspca_stk1135: Sensor write failed [ 1208.084148][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.090526][T26726] gspca_stk1135: Sensor read failed [ 1208.096065][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.102441][T26726] gspca_stk1135: Sensor read failed [ 1208.107905][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1208.114854][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.121358][T26726] gspca_stk1135: Sensor read failed [ 1208.126948][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.133550][T26726] gspca_stk1135: Sensor read failed [ 1208.138911][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.145422][T26726] gspca_stk1135: Sensor write failed [ 1208.150861][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1208.157381][T26726] gspca_stk1135: Sensor write failed [ 1208.163140][T26726] stk1135: probe of 3-1:0.0 failed with error -71 [ 1208.182500][T26726] usb 3-1: USB disconnect, device number 22 [ 1208.303515][T18843] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1208.323738][ T9666] usb 4-1: USB disconnect, device number 9 [ 1208.363178][ T9666] usblp0: removed [ 1208.474852][T18843] usb 2-1: device descriptor read/8, error -61 01:18:11 executing program 0: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000400)=ANY=[], 0x10) 01:18:11 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="8202cde917"], 0x10) 01:18:11 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) 01:18:11 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) [ 1208.642938][ C1] raw-gadget gadget: ignoring, device is not running 01:18:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1208.694918][T18843] usb 2-1: device descriptor read/8, error -71 01:18:11 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:11 executing program 5: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4107, 0x100b}, {0x0}, {0x0}], 0x3}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r1, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="090200bc0f"], 0x10) shutdown(r2, 0x0) 01:18:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@prinfo={0x14}], 0x14}, 0x0) [ 1209.277016][ T3364] usb 3-1: new high-speed USB device number 23 using dummy_hcd 01:18:12 executing program 0: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4107, 0x100b}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/167, 0xa7}, {0x0}], 0x2}, 0x0) shutdown(r2, 0x0) 01:18:12 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) [ 1209.483392][T18843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1209.513500][T26726] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1209.644785][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1209.654352][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.666124][T18843] usb 2-1: device descriptor read/8, error -61 [ 1209.722633][ T3364] usb 3-1: config 0 descriptor?? [ 1209.764134][T26726] usb 4-1: Using ep0 maxpacket: 8 [ 1209.770120][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1209.893451][T26726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1209.904985][T26726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1209.915271][T26726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1209.925422][T26726] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1209.934341][T18843] usb 2-1: device descriptor read/8, error -61 [ 1209.938646][T26726] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1209.953901][T26726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.064504][T18843] usb usb2-port1: unable to enumerate USB device [ 1210.126821][T28509] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1210.145220][T28509] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1210.167710][T26726] hub 4-1:1.0: bad descriptor, ignoring hub [ 1210.174471][T26726] hub: probe of 4-1:1.0 failed with error -5 01:18:13 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)='Y', 0x1}], 0x1}, 0x0) 01:18:13 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) [ 1210.405008][T28509] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1210.413398][T28509] raw-gadget gadget: fail, usb_ep_enable returned -22 01:18:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000610071111900000000008510000002000000850000001800000095004c00000000009500041200000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1210.667831][T26726] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 01:18:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xbcba3526408cfb77) [ 1210.983438][T26726] usb 4-1: USB disconnect, device number 10 [ 1211.021992][T26726] usblp0: removed 01:18:13 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x1bdd307, 0x0) [ 1211.293578][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1211.300109][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.306794][ T3364] gspca_stk1135: Sensor write failed [ 1211.312235][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.319068][ T3364] gspca_stk1135: Sensor write failed [ 1211.324715][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.331094][ T3364] gspca_stk1135: Sensor read failed [ 1211.336688][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.343288][ T3364] gspca_stk1135: Sensor read failed [ 1211.348561][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1211.355728][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.362125][ T3364] gspca_stk1135: Sensor read failed [ 1211.367768][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.374361][ T3364] gspca_stk1135: Sensor read failed [ 1211.379722][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.386791][ T3364] gspca_stk1135: Sensor write failed [ 1211.392241][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1211.398870][ T3364] gspca_stk1135: Sensor write failed [ 1211.404647][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1211.418481][ T3364] usb 3-1: USB disconnect, device number 23 01:18:14 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) 01:18:14 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) 01:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 01:18:14 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000000702000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffd404000040000000b704000010000020720700fe00000000850000008d000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837"], &(0x7f0000000280)='GPL\x00'}, 0x48) 01:18:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='J'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc, 0x2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 01:18:15 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) [ 1212.463580][T10867] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1212.496501][ T3364] usb 4-1: new high-speed USB device number 11 using dummy_hcd 01:18:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x65}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 01:18:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='J'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 1212.672942][ T9666] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1212.743862][ T3364] usb 4-1: Using ep0 maxpacket: 8 01:18:15 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) [ 1212.854990][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1212.864345][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.864461][ T3364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1212.864602][ T3364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1212.894088][ T3364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1212.904265][ T3364] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1212.917616][ T3364] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1212.926996][ T3364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.935023][T10867] usb 3-1: config 0 descriptor?? [ 1212.968906][ T9666] usb 2-1: device descriptor read/64, error 18 [ 1213.000356][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:18:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f00000003c0)="a02acca26fed46c0ba5207f4f181fb471a77c3ccbc0815e007f3ae98c70fcbcd9cc06772bd685be52b51a72d0311d3554c7c155b08efc6265182f6e4ecbb248a0b28bf65bbdc10d5113ea47d25e4e5fef882c6aa315a4a10084acd8895c8364304b0631c9e20e818c8d318b3131676364270a2688278af2385b3f5679603a4fe6fade8e92d95cf0ede26a5966e7c960d86c6c01ddec28bdc56be1569360f5351a128d8b6", 0xa4, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @loopback}, 0x1c) [ 1213.275742][T28581] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1213.312729][T28581] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1213.334324][ T3364] hub 4-1:1.0: bad descriptor, ignoring hub [ 1213.340481][ T3364] hub: probe of 4-1:1.0 failed with error -5 [ 1213.393765][ T9666] usb 2-1: device descriptor read/64, error 18 [ 1213.558812][T28581] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1213.593112][T28581] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1213.662555][ T9666] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1213.848492][ T3364] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1213.973961][ T9666] usb 2-1: device descriptor read/64, error 18 [ 1214.163853][ T3364] usb 4-1: USB disconnect, device number 11 [ 1214.185784][ T3364] usblp0: removed [ 1214.382654][ T9666] usb 2-1: device descriptor read/64, error 18 [ 1214.516541][ T9666] usb usb2-port1: attempt power cycle [ 1214.532993][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1214.539247][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.545804][T10867] gspca_stk1135: Sensor write failed [ 1214.551544][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.558168][T10867] gspca_stk1135: Sensor write failed [ 1214.563766][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.570148][T10867] gspca_stk1135: Sensor read failed [ 1214.575634][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.582013][T10867] gspca_stk1135: Sensor read failed [ 1214.587433][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1214.594350][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.600731][T10867] gspca_stk1135: Sensor read failed [ 1214.606247][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.613022][T10867] gspca_stk1135: Sensor read failed [ 1214.618393][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.624898][T10867] gspca_stk1135: Sensor write failed [ 1214.630384][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1214.636888][T10867] gspca_stk1135: Sensor write failed [ 1214.642615][T10867] stk1135: probe of 3-1:0.0 failed with error -71 [ 1214.789069][T10867] usb 3-1: USB disconnect, device number 24 [ 1215.263139][ T9666] usb 2-1: new high-speed USB device number 13 using dummy_hcd 01:18:18 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) 01:18:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x60}, {0x0, 0xffff}}}, 0x24}}, 0x0) 01:18:18 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) 01:18:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, 0x2, 0x6, 0x5, 0xf000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x34}}, 0x0) 01:18:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:18 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/101) [ 1215.433214][ T9666] usb 2-1: device descriptor read/8, error -71 [ 1215.642823][ T9666] usb 2-1: device descriptor read/8, error -71 01:18:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f0000000040)={0x0, 0x0}, 0x10) 01:18:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000900000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028"], 0x1) [ 1215.842466][T10867] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1215.864684][ T3364] usb 4-1: new high-speed USB device number 12 using dummy_hcd 01:18:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 01:18:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'ipvlan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 1216.113073][ T3364] usb 4-1: Using ep0 maxpacket: 8 [ 1216.134355][ T9666] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1216.223915][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1216.233247][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.234806][ T3364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1216.253012][ T3364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1216.263207][ T3364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1216.273458][ T3364] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1216.286771][ T3364] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1216.296104][ T3364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:18:19 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x0, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) [ 1216.330200][T10867] usb 3-1: config 0 descriptor?? [ 1216.355852][ T9666] usb 2-1: device descriptor read/8, error -61 [ 1216.435994][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1216.447109][T28646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1216.467216][T28646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1216.526765][ T3364] hub 4-1:1.0: bad descriptor, ignoring hub [ 1216.533051][ T3364] hub: probe of 4-1:1.0 failed with error -5 [ 1216.643789][ T9666] usb 2-1: device descriptor read/8, error -61 01:18:19 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=ANY=[], 0x1) [ 1216.738028][T28646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1216.762865][ T9666] usb usb2-port1: unable to enumerate USB device [ 1216.793504][T28646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1216.894091][T18843] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1217.036591][ T3364] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1217.172515][T18843] usb 5-1: device descriptor read/64, error 18 [ 1217.353193][ T9666] usb 4-1: USB disconnect, device number 12 [ 1217.374562][ T9666] usblp0: removed [ 1217.562545][T18843] usb 5-1: device descriptor read/64, error 18 [ 1217.832218][T18843] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1217.913389][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1217.919738][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1217.926446][T10867] gspca_stk1135: Sensor write failed [ 1217.932064][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1217.938453][T10867] gspca_stk1135: Sensor write failed [ 1217.944620][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1217.951012][T10867] gspca_stk1135: Sensor read failed [ 1217.956555][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1217.963143][T10867] gspca_stk1135: Sensor read failed [ 1217.968419][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1217.975336][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1217.981730][T10867] gspca_stk1135: Sensor read failed [ 1217.987271][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1217.993811][T10867] gspca_stk1135: Sensor read failed [ 1217.999274][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1218.006419][T10867] gspca_stk1135: Sensor write failed [ 1218.014270][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1218.020677][T10867] gspca_stk1135: Sensor write failed [ 1218.026451][T10867] stk1135: probe of 3-1:0.0 failed with error -71 [ 1218.102251][T18843] usb 5-1: device descriptor read/64, error 18 [ 1218.178866][T10867] usb 3-1: USB disconnect, device number 25 [ 1218.494072][T18843] usb 5-1: device descriptor read/64, error 18 [ 1218.612593][T18843] usb usb5-port1: attempt power cycle 01:18:21 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) 01:18:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 01:18:21 executing program 0: 01:18:21 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:21 executing program 0: [ 1219.272575][ T3364] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1219.322217][ T9667] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1219.336100][T18843] usb 5-1: new high-speed USB device number 19 using dummy_hcd 01:18:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) [ 1219.433358][T18843] usb 5-1: Invalid ep0 maxpacket: 0 [ 1219.522372][T10867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1219.592435][ T9667] usb 4-1: Using ep0 maxpacket: 8 [ 1219.597885][T18843] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1219.653453][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1219.663065][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.712623][ T9667] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1219.724079][ T9667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1219.734576][ T9667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1219.744826][ T9667] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1219.758145][ T9667] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1219.767504][ T9667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.802240][T10867] usb 2-1: device descriptor read/64, error 18 01:18:22 executing program 0: [ 1219.865652][ T3364] usb 3-1: config 0 descriptor?? 01:18:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x0, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) [ 1219.926824][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1220.002502][T18843] usb 5-1: device descriptor read/8, error -71 [ 1220.125548][T28709] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1220.174438][T28709] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1220.202299][T10867] usb 2-1: device descriptor read/64, error 18 [ 1220.203379][ T9667] hub 4-1:1.0: bad descriptor, ignoring hub [ 1220.215024][ T9667] hub: probe of 4-1:1.0 failed with error -5 01:18:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) [ 1220.223782][T18843] usb 5-1: device descriptor read/8, error -71 01:18:23 executing program 0: [ 1220.344899][T18843] usb usb5-port1: unable to enumerate USB device [ 1220.456848][T28709] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1220.475376][T10867] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1220.493676][T28709] raw-gadget gadget: fail, usb_ep_enable returned -22 01:18:23 executing program 0: [ 1220.745959][ T9667] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1220.782059][T18843] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1220.787144][T10867] usb 2-1: device descriptor read/64, error 18 [ 1221.053149][T18843] usb 5-1: device descriptor read/64, error 18 [ 1221.073749][ T9666] usb 4-1: USB disconnect, device number 13 [ 1221.102705][ T9666] usblp0: removed [ 1221.183543][T10867] usb 2-1: device descriptor read/64, error 18 [ 1221.303373][T10867] usb usb2-port1: attempt power cycle [ 1221.432118][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1221.438440][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.445090][ T3364] gspca_stk1135: Sensor write failed [ 1221.450525][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.457410][ T3364] gspca_stk1135: Sensor write failed [ 1221.463049][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.469423][ T3364] gspca_stk1135: Sensor read failed [ 1221.474975][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.482024][ T3364] gspca_stk1135: Sensor read failed [ 1221.487306][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1221.494269][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.500647][ T3364] gspca_stk1135: Sensor read failed [ 1221.506519][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.513079][ T3364] gspca_stk1135: Sensor read failed [ 1221.518454][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.525018][ T3364] gspca_stk1135: Sensor write failed [ 1221.530464][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1221.537061][ T3364] gspca_stk1135: Sensor write failed [ 1221.542807][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1221.552312][T18843] usb 5-1: device descriptor read/64, error 18 [ 1221.686385][ T3364] usb 3-1: USB disconnect, device number 26 [ 1221.822338][T18843] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1222.041932][T10867] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1222.102643][T18843] usb 5-1: device descriptor read/64, error 18 01:18:25 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) 01:18:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 01:18:25 executing program 0: 01:18:25 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1222.375041][T10867] usb 2-1: device descriptor read/8, error -71 01:18:25 executing program 0: [ 1222.501712][T18843] usb 5-1: device descriptor read/64, error 18 [ 1222.582294][T10867] usb 2-1: device descriptor read/8, error -71 01:18:25 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1222.623108][T18843] usb usb5-port1: attempt power cycle [ 1222.721842][ T3364] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1222.743271][T27791] usb 4-1: new high-speed USB device number 14 using dummy_hcd 01:18:25 executing program 0: [ 1222.983964][T27791] usb 4-1: Using ep0 maxpacket: 8 [ 1223.076097][T10867] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1223.084096][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1223.084234][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.113064][T27791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1223.124375][T27791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1223.134651][T27791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1223.144834][T27791] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1223.158122][T27791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1223.167450][T27791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.204079][ T3364] usb 3-1: config 0 descriptor?? [ 1223.248805][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1223.258442][T28763] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1223.290276][T28763] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1223.302554][T10867] usb 2-1: device descriptor read/8, error -61 [ 1223.343825][T27791] hub 4-1:1.0: bad descriptor, ignoring hub [ 1223.350087][T27791] hub: probe of 4-1:1.0 failed with error -5 [ 1223.358567][T18843] usb 5-1: new high-speed USB device number 23 using dummy_hcd 01:18:26 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x0, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) 01:18:26 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:18:26 executing program 0: [ 1223.547802][T28763] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1223.555584][T18843] usb 5-1: device descriptor read/8, error -71 [ 1223.588254][T28763] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1223.607406][T10867] usb 2-1: device descriptor read/8, error -61 01:18:26 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1223.745157][T10867] usb usb2-port1: unable to enumerate USB device [ 1223.771771][T18843] usb 5-1: device descriptor read/8, error -71 [ 1223.897307][T27791] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1224.222041][T27791] usb 4-1: USB disconnect, device number 14 [ 1224.240827][T27791] usblp0: removed [ 1224.261872][T18843] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1224.351943][T18843] usb 5-1: Invalid ep0 maxpacket: 0 [ 1224.358092][T18843] usb usb5-port1: unable to enumerate USB device [ 1224.772296][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1224.778768][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.785898][ T3364] gspca_stk1135: Sensor write failed [ 1224.791713][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.798128][ T3364] gspca_stk1135: Sensor write failed [ 1224.803738][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.810119][ T3364] gspca_stk1135: Sensor read failed [ 1224.815633][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.822156][ T3364] gspca_stk1135: Sensor read failed [ 1224.827425][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1224.834316][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.840710][ T3364] gspca_stk1135: Sensor read failed [ 1224.846211][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.852738][ T3364] gspca_stk1135: Sensor read failed [ 1224.858187][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.864727][ T3364] gspca_stk1135: Sensor write failed [ 1224.870177][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1224.876697][ T3364] gspca_stk1135: Sensor write failed [ 1224.882435][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1224.987507][ T3364] usb 3-1: USB disconnect, device number 27 01:18:28 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca300000001"], 0x0) 01:18:28 executing program 0: 01:18:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837"], &(0x7f0000000280)='GPL\x00'}, 0x48) 01:18:28 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:28 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:28 executing program 0: 01:18:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) [ 1226.072467][ T3364] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1226.151441][T26726] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1226.301613][T27882] usb 2-1: new high-speed USB device number 19 using dummy_hcd 01:18:29 executing program 0: [ 1226.431369][T26726] usb 4-1: Using ep0 maxpacket: 8 [ 1226.432840][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1226.445892][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.529675][ T3364] usb 3-1: config 0 descriptor?? [ 1226.582252][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1226.589870][T26726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1226.601594][T26726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1226.611769][T26726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1226.621852][T26726] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1226.635078][T26726] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1226.644354][T26726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.703416][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1226.711202][T27882] usb 2-1: can't read configurations, error -61 [ 1226.725050][T28822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1226.734588][T28822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1226.773072][T26726] hub 4-1:1.0: bad descriptor, ignoring hub [ 1226.779236][T26726] hub: probe of 4-1:1.0 failed with error -5 01:18:29 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) 01:18:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 01:18:29 executing program 0: [ 1226.915577][T27882] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1227.002913][T28822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1227.010691][T28822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1227.276253][T26726] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1227.322324][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1227.330110][T27882] usb 2-1: can't read configurations, error -61 [ 1227.383248][T27882] usb usb2-port1: attempt power cycle [ 1227.433244][T26726] usb 4-1: USB disconnect, device number 15 [ 1227.480182][T26726] usblp0: removed 01:18:30 executing program 0: [ 1227.702217][T27791] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1227.941361][T27791] usb 5-1: Using ep0 maxpacket: 32 [ 1228.104494][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1228.111241][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.117633][ T3364] gspca_stk1135: Sensor write failed [ 1228.123391][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.129765][ T3364] gspca_stk1135: Sensor write failed [ 1228.135512][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.142086][ T3364] gspca_stk1135: Sensor read failed [ 1228.147443][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.154040][ T3364] gspca_stk1135: Sensor read failed [ 1228.159295][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1228.166250][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.174124][ T3364] gspca_stk1135: Sensor read failed [ 1228.179498][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.186127][ T3364] gspca_stk1135: Sensor read failed [ 1228.191670][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.198045][ T3364] gspca_stk1135: Sensor write failed [ 1228.203670][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1228.210079][ T3364] gspca_stk1135: Sensor write failed [ 1228.215883][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1228.225590][T27882] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1228.240103][ T3364] usb 3-1: USB disconnect, device number 28 [ 1228.343155][T27791] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1228.352631][T27791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.360779][T27791] usb 5-1: Product: syz [ 1228.365715][T27791] usb 5-1: Manufacturer: syz [ 1228.370503][T27791] usb 5-1: SerialNumber: syz [ 1228.434532][T27791] usb 5-1: config 0 descriptor?? [ 1228.502006][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1228.509779][T27882] usb 2-1: can't read configurations, error -61 [ 1228.683090][T27882] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1228.761682][T27791] usb 5-1: MIDIStreaming interface descriptor not found [ 1228.883545][T27791] usb 5-1: USB disconnect, device number 25 [ 1228.953329][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1228.961152][T27882] usb 2-1: can't read configurations, error -61 [ 1228.969427][T27882] usb usb2-port1: unable to enumerate USB device 01:18:31 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca300000001"], 0x0) 01:18:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:31 executing program 0: 01:18:31 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:32 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) 01:18:32 executing program 0: [ 1229.442078][T27791] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1229.497162][T26726] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1229.654852][T27882] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1229.685333][T27791] usb 4-1: Using ep0 maxpacket: 8 01:18:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1229.802843][T27791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1229.814230][T27791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1229.824664][T27791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1229.834856][T27791] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1229.848128][T27791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1229.857860][T27791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.913454][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1229.923037][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.013181][ T3216] usb 5-1: new high-speed USB device number 26 using dummy_hcd 01:18:32 executing program 0: [ 1230.054506][T26726] usb 3-1: config 0 descriptor?? [ 1230.092605][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1230.100361][T27882] usb 2-1: can't read configurations, error -61 [ 1230.110925][T28898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1230.118204][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1230.120525][T28898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1230.153921][T27791] hub 4-1:1.0: bad descriptor, ignoring hub [ 1230.160093][T27791] hub: probe of 4-1:1.0 failed with error -5 01:18:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1230.281007][T27882] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1230.291039][ T3216] usb 5-1: Using ep0 maxpacket: 32 [ 1230.381245][T27791] usblp: can't set desired altsetting 0 on interface 0 [ 1230.453660][T27791] usb 4-1: USB disconnect, device number 16 01:18:33 executing program 0: [ 1230.585389][ T3216] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1230.594815][ T3216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.603210][ T3216] usb 5-1: Product: syz [ 1230.607520][ T3216] usb 5-1: Manufacturer: syz [ 1230.612392][ T3216] usb 5-1: SerialNumber: syz [ 1230.682451][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1230.690223][T27882] usb 2-1: can't read configurations, error -61 [ 1230.715953][ T3216] usb 5-1: config 0 descriptor?? [ 1230.734421][T27882] usb usb2-port1: attempt power cycle [ 1231.031506][ T3216] usb 5-1: MIDIStreaming interface descriptor not found [ 1231.157039][ T3216] usb 5-1: USB disconnect, device number 26 [ 1231.480978][T27882] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1231.641757][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1231.648216][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.654815][T26726] gspca_stk1135: Sensor write failed [ 1231.660256][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.667554][T26726] gspca_stk1135: Sensor write failed [ 1231.673169][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.679542][T26726] gspca_stk1135: Sensor read failed [ 1231.685034][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.692001][T26726] gspca_stk1135: Sensor read failed [ 1231.697258][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1231.704154][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.710692][T26726] gspca_stk1135: Sensor read failed [ 1231.716043][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.722539][T26726] gspca_stk1135: Sensor read failed [ 1231.727970][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.734499][T26726] gspca_stk1135: Sensor write failed [ 1231.739082][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1231.739917][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.747594][T27882] usb 2-1: can't read configurations, error -61 [ 1231.753889][T26726] gspca_stk1135: Sensor write failed [ 1231.754168][T26726] stk1135: probe of 3-1:0.0 failed with error -71 [ 1231.902246][T26726] usb 3-1: USB disconnect, device number 29 [ 1231.951267][T27882] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1232.202458][T27882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1232.210225][T27882] usb 2-1: can't read configurations, error -61 [ 1232.240856][T27882] usb usb2-port1: unable to enumerate USB device 01:18:35 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca300000001"], 0x0) 01:18:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:35 executing program 0: 01:18:35 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:35 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023cb4"}}, 0x0, 0x0, 0x0}, 0x0) 01:18:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:35 executing program 0: 01:18:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1232.721598][T26726] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1232.841517][ T3216] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1232.921989][T10867] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1232.978635][T26726] usb 5-1: Using ep0 maxpacket: 32 01:18:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:35 executing program 0: 01:18:36 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) [ 1233.234916][ T3216] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1233.244361][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.273719][T26726] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1233.283122][T26726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.291899][T26726] usb 5-1: Product: syz [ 1233.296243][T26726] usb 5-1: Manufacturer: syz [ 1233.301086][T26726] usb 5-1: SerialNumber: syz [ 1233.362524][T10867] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1233.370317][T10867] usb 2-1: can't read configurations, error -61 [ 1233.382501][ T3216] usb 3-1: config 0 descriptor?? [ 1233.427789][ T3216] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1233.448031][T26726] usb 5-1: config 0 descriptor?? 01:18:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1233.590924][T10867] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1233.814195][T26726] usb 5-1: MIDIStreaming interface descriptor not found [ 1233.946669][T26726] usb 5-1: USB disconnect, device number 27 [ 1234.019757][T10867] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1234.027828][T10867] usb 2-1: can't read configurations, error -61 [ 1234.061888][T10867] usb usb2-port1: attempt power cycle [ 1234.800836][T10867] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1234.951315][ T3216] gspca_stk1135: reg_w 0xf err -71 [ 1234.957921][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1234.964568][ T3216] gspca_stk1135: Sensor write failed [ 1234.970013][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1234.977011][ T3216] gspca_stk1135: Sensor write failed [ 1234.982606][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1234.988994][ T3216] gspca_stk1135: Sensor read failed [ 1234.994470][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1235.001001][ T3216] gspca_stk1135: Sensor read failed [ 1235.006262][ T3216] gspca_stk1135: Detected sensor type unknown (0x0) [ 1235.013214][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1235.019622][ T3216] gspca_stk1135: Sensor read failed [ 1235.025144][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1235.031710][ T3216] gspca_stk1135: Sensor read failed [ 1235.037083][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1235.043597][ T3216] gspca_stk1135: Sensor write failed [ 1235.049031][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1235.055571][ T3216] gspca_stk1135: Sensor write failed [ 1235.061276][ T3216] stk1135: probe of 3-1:0.0 failed with error -71 [ 1235.202000][T10867] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1235.209769][T10867] usb 2-1: can't read configurations, error -61 [ 1235.430385][T10867] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1235.502510][ T3216] usb 3-1: USB disconnect, device number 30 01:18:38 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca300000001090224000124000000"], 0x0) 01:18:38 executing program 0: 01:18:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:38 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1235.870963][T10867] usb 2-1: device descriptor read/all, error -71 [ 1235.889265][T10867] usb usb2-port1: unable to enumerate USB device 01:18:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:39 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x3ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:39 executing program 0: [ 1236.360694][ T9667] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1236.600476][ T9667] usb 5-1: Using ep0 maxpacket: 32 [ 1236.610643][ T3216] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1236.641638][T10867] usb 3-1: new high-speed USB device number 31 using dummy_hcd 01:18:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:39 executing program 0: 01:18:39 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x3ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) [ 1236.892340][ T9667] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1236.901922][ T9667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.910282][ T9667] usb 5-1: Product: syz [ 1236.914566][ T9667] usb 5-1: Manufacturer: syz [ 1236.919301][ T9667] usb 5-1: SerialNumber: syz [ 1237.022431][ T3216] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.028806][ T9667] usb 5-1: config 0 descriptor?? [ 1237.032946][ T3216] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 1237.047128][ T3216] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1237.056448][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.067168][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1237.076508][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.141368][T10867] usb 3-1: config 0 descriptor?? [ 1237.187221][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1237.351217][ T9667] usb 5-1: MIDIStreaming interface descriptor not found [ 1237.475824][ T9667] usb 5-1: USB disconnect, device number 28 [ 1237.527713][ T9666] usb 2-1: USB disconnect, device number 31 01:18:40 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca300000001090224000124000000"], 0x0) 01:18:40 executing program 0: 01:18:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:40 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x3ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:40 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1238.543431][ T9666] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1238.680388][ T9667] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1238.721310][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1238.727635][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.734294][T10867] gspca_stk1135: Sensor write failed [ 1238.739916][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.746294][T10867] gspca_stk1135: Sensor write failed [ 1238.751881][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.758258][T10867] gspca_stk1135: Sensor read failed [ 1238.763708][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.770207][T10867] gspca_stk1135: Sensor read failed [ 1238.775564][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1238.782460][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.788830][T10867] gspca_stk1135: Sensor read failed [ 1238.794314][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.800942][T10867] gspca_stk1135: Sensor read failed [ 1238.806318][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.815138][T10867] gspca_stk1135: Sensor write failed [ 1238.820658][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1238.827049][T10867] gspca_stk1135: Sensor write failed [ 1238.832824][T10867] stk1135: probe of 3-1:0.0 failed with error -71 [ 1238.889388][T10867] usb 3-1: USB disconnect, device number 31 [ 1238.910897][ T9666] usb 5-1: Using ep0 maxpacket: 32 [ 1239.061271][ T9667] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.072060][ T9667] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 1239.081506][ T9667] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1239.091947][ T9667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.263602][ T9666] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1239.273529][ T9666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.282054][ T9666] usb 5-1: Product: syz [ 1239.286456][ T9666] usb 5-1: Manufacturer: syz [ 1239.291384][ T9666] usb 5-1: SerialNumber: syz 01:18:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:42 executing program 0: 01:18:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/101) [ 1239.385472][ T9667] usb 2-1: USB disconnect, device number 32 [ 1239.462991][ T9666] usb 5-1: config 0 descriptor?? 01:18:42 executing program 0: 01:18:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:42 executing program 3: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/101) [ 1239.790308][ T9666] usb 5-1: MIDIStreaming interface descriptor not found [ 1239.900113][ T9666] usb 5-1: USB disconnect, device number 29 [ 1239.919949][ T3364] usb 3-1: new high-speed USB device number 32 using dummy_hcd 01:18:42 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca300000001090224000124000000"], 0x0) 01:18:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1240.281467][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1240.290941][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:18:43 executing program 0: [ 1240.380588][ T3364] usb 3-1: config 0 descriptor?? 01:18:43 executing program 3: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/101) [ 1240.471620][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:18:43 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1240.910366][T10867] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1241.071384][T27791] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1241.306769][T10867] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.315680][T27791] usb 5-1: Using ep0 maxpacket: 32 [ 1241.317178][T10867] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 1241.331573][T10867] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1241.340850][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.630388][T27791] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1241.640103][T27791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.648377][T27791] usb 5-1: Product: syz [ 1241.653280][T27791] usb 5-1: Manufacturer: syz [ 1241.658047][T27791] usb 5-1: SerialNumber: syz [ 1241.674858][T27791] usb 5-1: config 0 descriptor?? [ 1241.738482][T27882] usb 2-1: USB disconnect, device number 33 [ 1241.940082][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1241.946629][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1241.953460][ T3364] gspca_stk1135: Sensor write failed [ 1241.958905][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1241.965526][ T3364] gspca_stk1135: Sensor write failed [ 1241.971165][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1241.977547][ T3364] gspca_stk1135: Sensor read failed [ 1241.983144][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1241.989899][ T3364] gspca_stk1135: Sensor read failed [ 1241.995168][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1242.002068][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1242.008553][ T3364] gspca_stk1135: Sensor read failed [ 1242.014196][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1242.020716][ T3364] gspca_stk1135: Sensor read failed [ 1242.026290][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1242.032972][ T3364] gspca_stk1135: Sensor write failed [ 1242.038419][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1242.045008][ T3364] gspca_stk1135: Sensor write failed [ 1242.050720][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1242.067519][ T3364] usb 3-1: USB disconnect, device number 32 [ 1242.101046][T27791] usb 5-1: MIDIStreaming interface descriptor not found [ 1242.152358][T27791] usb 5-1: USB disconnect, device number 30 01:18:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:45 executing program 0: 01:18:45 executing program 3: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/101) 01:18:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:45 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca30000000109022400012400000009040000"], 0x0) 01:18:45 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 01:18:45 executing program 0: 01:18:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) 01:18:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1243.148951][ T9666] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1243.246527][T10867] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1243.359799][T12907] usb 5-1: new high-speed USB device number 31 using dummy_hcd 01:18:46 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 'client1\x00', 0x0, "c0318064883e12c3", "815c6f8ac86f96bd895ee8683be15ba90f90fcd070ea63534eeb79f7990241a0"}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 1243.585851][ T9666] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.596396][ T9666] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1243.606043][ T9666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.615578][T12907] usb 5-1: Using ep0 maxpacket: 32 01:18:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) [ 1243.695145][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1243.704538][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.760858][T10867] usb 3-1: config 0 descriptor?? 01:18:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1243.830028][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1243.960790][T12907] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1243.970523][T12907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.978700][T12907] usb 5-1: Product: syz [ 1243.983337][T12907] usb 5-1: Manufacturer: syz [ 1243.988199][T12907] usb 5-1: SerialNumber: syz [ 1244.005648][T27791] usb 2-1: USB disconnect, device number 34 [ 1244.047339][T12907] usb 5-1: config 0 descriptor?? [ 1244.390309][T12907] usb 5-1: MIDIStreaming interface descriptor not found [ 1244.462773][T12907] usb 5-1: USB disconnect, device number 31 [ 1245.302654][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1245.308972][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.316075][T10867] gspca_stk1135: Sensor write failed [ 1245.321799][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.328310][T10867] gspca_stk1135: Sensor write failed [ 1245.333934][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.340525][T10867] gspca_stk1135: Sensor read failed [ 1245.345892][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.352441][T10867] gspca_stk1135: Sensor read failed [ 1245.357738][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1245.364638][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.371157][T10867] gspca_stk1135: Sensor read failed [ 1245.376521][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.383166][T10867] gspca_stk1135: Sensor read failed [ 1245.388548][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.395167][T10867] gspca_stk1135: Sensor write failed [ 1245.400712][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1245.407085][T10867] gspca_stk1135: Sensor write failed [ 1245.412804][T10867] stk1135: probe of 3-1:0.0 failed with error -71 [ 1245.446307][T10867] usb 3-1: USB disconnect, device number 33 01:18:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) 01:18:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:48 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca30000000109022400012400000009040000"], 0x0) 01:18:48 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') 01:18:48 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 01:18:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:49 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4, 0x0, 0x0, 0x2) [ 1246.259392][ T3364] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1246.329743][T10867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1246.441208][T27791] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1246.579476][T10867] usb 5-1: Using ep0 maxpacket: 32 [ 1246.619814][ T3364] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.630411][ T3364] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1246.640009][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.831875][T27791] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1246.841367][T27791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.882471][T27791] usb 3-1: config 0 descriptor?? [ 1246.900482][T10867] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1246.909814][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.918062][T10867] usb 5-1: Product: syz [ 1246.922537][T10867] usb 5-1: Manufacturer: syz [ 1246.927280][T10867] usb 5-1: SerialNumber: syz 01:18:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1246.929077][T27791] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1247.010370][ T9666] usb 2-1: USB disconnect, device number 35 [ 1247.086485][T10867] usb 5-1: config 0 descriptor?? [ 1247.410028][T10867] usb 5-1: MIDIStreaming interface descriptor not found [ 1247.569782][T10867] usb 5-1: USB disconnect, device number 32 01:18:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:50 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca30000000109022400012400000009040000"], 0x0) 01:18:50 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1248.451014][T27791] gspca_stk1135: reg_w 0xf err -71 [ 1248.457350][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.464240][T27791] gspca_stk1135: Sensor write failed [ 1248.469857][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.476236][T27791] gspca_stk1135: Sensor write failed [ 1248.481871][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.488277][T27791] gspca_stk1135: Sensor read failed [ 1248.493862][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.500464][T27791] gspca_stk1135: Sensor read failed [ 1248.505730][T27791] gspca_stk1135: Detected sensor type unknown (0x0) [ 1248.512740][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.519315][T27791] gspca_stk1135: Sensor read failed [ 1248.524694][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.531290][T27791] gspca_stk1135: Sensor read failed [ 1248.536724][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.543271][T27791] gspca_stk1135: Sensor write failed [ 1248.548735][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1248.555254][T27791] gspca_stk1135: Sensor write failed [ 1248.561161][T27791] stk1135: probe of 3-1:0.0 failed with error -71 [ 1248.579299][ T3364] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1248.843881][T27791] usb 3-1: USB disconnect, device number 34 [ 1248.950783][ T3364] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.961379][ T3364] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1248.971802][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.990241][ T9667] usb 5-1: new high-speed USB device number 33 using dummy_hcd 01:18:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1249.229172][ T9667] usb 5-1: Using ep0 maxpacket: 32 [ 1249.357385][T12907] usb 2-1: USB disconnect, device number 36 01:18:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1249.511879][ T9667] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1249.521345][ T9667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.530017][ T9667] usb 5-1: Product: syz [ 1249.534465][ T9667] usb 5-1: Manufacturer: syz [ 1249.539422][ T9667] usb 5-1: SerialNumber: syz [ 1249.612739][ T9667] usb 5-1: config 0 descriptor?? [ 1249.771786][ T9666] usb 3-1: new high-speed USB device number 35 using dummy_hcd 01:18:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1249.929470][ T9667] usb 5-1: MIDIStreaming interface descriptor not found [ 1250.048093][ T9667] usb 5-1: USB disconnect, device number 33 [ 1250.200278][ T9666] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1250.209872][ T9666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.265355][ T9666] usb 3-1: config 0 descriptor?? [ 1250.317865][ T9666] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:18:53 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff"], 0x0) 01:18:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:53 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 01:18:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x40) chdir(&(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/n\xcb2\x88\x1d\xf9\xff\xe7\xdc[\x17\x8b\xb2\xf7W\xf0\x06\x00\x00@\xc8k\xc0\xa5veli', 0x0) ftruncate(r1, 0x40003) sendfile(r0, r1, 0x0, 0x2008000ffff0010) 01:18:53 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 01:18:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d5315"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1251.019834][ T9667] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1251.165165][ T29] audit: type=1326 audit(1596849533.978:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29426 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f2e549 code=0x0 [ 1251.193064][ T3364] usb 5-1: new high-speed USB device number 34 using dummy_hcd 01:18:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1251.380301][ T9667] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.390993][ T9667] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1251.404354][ T9667] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1251.413712][ T9667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.469170][ T3364] usb 5-1: Using ep0 maxpacket: 32 [ 1251.514622][ T29] audit: type=1800 audit(1596849534.328:129): pid=29434 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16056 res=0 [ 1251.734877][ T29] audit: type=1800 audit(1596849534.538:130): pid=29435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16056 res=0 [ 1251.811278][ T3364] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1251.820705][ T3364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.828996][ T3364] usb 5-1: Product: syz [ 1251.833309][ T3364] usb 5-1: Manufacturer: syz [ 1251.838047][ T3364] usb 5-1: SerialNumber: syz [ 1251.889275][ T9666] gspca_stk1135: reg_w 0xf err -71 [ 1251.895983][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.902578][ T9666] gspca_stk1135: Sensor write failed [ 1251.908017][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.914555][ T9666] gspca_stk1135: Sensor write failed [ 1251.920156][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.926535][ T9666] gspca_stk1135: Sensor read failed [ 1251.932095][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.938640][ T9666] gspca_stk1135: Sensor read failed [ 1251.943899][ T9666] gspca_stk1135: Detected sensor type unknown (0x0) [ 1251.950774][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.957163][ T9666] gspca_stk1135: Sensor read failed [ 1251.962706][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.969216][ T9666] gspca_stk1135: Sensor read failed [ 1251.974562][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.981137][ T9666] gspca_stk1135: Sensor write failed [ 1251.987661][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1251.994313][ T9666] gspca_stk1135: Sensor write failed [ 1252.000067][ T9666] stk1135: probe of 3-1:0.0 failed with error -71 [ 1252.035835][ T3364] usb 5-1: config 0 descriptor?? 01:18:54 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x40020, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x36ee, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x1, {{0xa, 0x4e21, 0x6, @loopback}}, 0x1, 0x1, [{{0xa, 0x4e22, 0xffffd0bd, @loopback, 0xdb6d}}]}, 0x110) socketpair$unix(0x1, 0x5, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0xa2, 0x9}, {0x1, 0x400}]}, 0x14, 0x1) [ 1252.143890][T27791] usb 2-1: USB disconnect, device number 37 [ 1252.542692][ T3364] usb 5-1: MIDIStreaming interface descriptor not found [ 1252.613262][ T9666] usb 3-1: USB disconnect, device number 35 01:18:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:55 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000140)) [ 1252.753205][ T3364] usb 5-1: USB disconnect, device number 34 01:18:55 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff"], 0x0) [ 1252.909337][T26726] usb 4-1: new high-speed USB device number 17 using dummy_hcd 01:18:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a0380"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1253.148713][T26726] usb 4-1: Using ep0 maxpacket: 8 01:18:56 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) [ 1253.279622][T26726] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1253.287835][T26726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.298269][T26726] usb 4-1: config 0 has no interface number 0 [ 1253.304683][T26726] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 1253.315941][T26726] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 01:18:56 executing program 0: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0xfc49c6dc03b22f18) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x25) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x81, 0x0, 0x9, 0x2, 0x5, 0xc9}) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 1253.326122][T26726] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.339172][T26726] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 1253.339262][ T9667] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1253.356139][T26726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:18:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1253.611877][ T3364] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1253.702902][ T9667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1253.712466][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.733094][ T9667] usb 3-1: config 0 descriptor?? [ 1253.754024][T26726] usb 4-1: config 0 descriptor?? [ 1253.787878][ T9667] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1253.797339][T29457] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1253.798983][T29499] IPVS: ftp: loaded support on port[0] = 21 [ 1253.910331][T26726] usb 4-1: invalid MIDI in EP 0 [ 1253.918118][T26726] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 1253.949523][T27882] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1253.980253][ T3364] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.990982][ T3364] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1254.004420][ T3364] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1254.013787][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.124768][T26726] usb 4-1: USB disconnect, device number 17 [ 1254.248660][T27882] usb 5-1: Using ep0 maxpacket: 32 [ 1254.446086][T29503] IPVS: ftp: loaded support on port[0] = 21 [ 1254.530039][T27882] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1254.539491][T27882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.547636][T27882] usb 5-1: Product: syz [ 1254.552133][T27882] usb 5-1: Manufacturer: syz [ 1254.556892][T27882] usb 5-1: SerialNumber: syz 01:18:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac2862"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1254.631670][T27791] usb 2-1: USB disconnect, device number 38 [ 1254.759482][T27882] usb 5-1: config 0 descriptor?? [ 1254.996900][ T7] tipc: TX() has been purged, node left! 01:18:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa597}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x24, 0x8, &(0x7f00002d5000/0x2000)=nil) [ 1255.109991][ T3364] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1255.296697][T27882] usb 5-1: MIDIStreaming interface descriptor not found 01:18:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1255.349917][ T3364] usb 4-1: Using ep0 maxpacket: 8 [ 1255.425149][T27882] usb 5-1: USB disconnect, device number 35 [ 1255.433124][ T9667] gspca_stk1135: reg_w 0xf err -71 [ 1255.440628][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.447039][ T9667] gspca_stk1135: Sensor write failed [ 1255.452589][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.459105][ T9667] gspca_stk1135: Sensor write failed [ 1255.464540][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.471007][ T9667] gspca_stk1135: Sensor read failed [ 1255.476399][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.482878][ T9667] gspca_stk1135: Sensor read failed [ 1255.488392][ T9667] gspca_stk1135: Detected sensor type unknown (0x0) [ 1255.495152][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.501670][ T9667] gspca_stk1135: Sensor read failed [ 1255.507043][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.513519][ T9667] gspca_stk1135: Sensor read failed [ 1255.519010][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.525396][ T9667] gspca_stk1135: Sensor write failed [ 1255.531064][ T9667] gspca_stk1135: serial bus timeout: status=0x00 [ 1255.537460][ T9667] gspca_stk1135: Sensor write failed [ 1255.543185][ T9667] stk1135: probe of 3-1:0.0 failed with error -71 01:18:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000080)="b805000000b94a0000000f01c10f00d4b93c0200000f320f068ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c2466b891000f00d8b9090b00000f32660f3881530f", 0x56}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) syz_mount_image$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{0x0}], 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[&(0x7f0000000380)="fc"]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1255.828541][ T3364] usb 4-1: unable to read config index 0 descriptor/all [ 1255.835824][ T3364] usb 4-1: can't read configurations, error -71 [ 1256.003976][ T9667] usb 3-1: USB disconnect, device number 36 01:18:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:18:59 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff"], 0x0) 01:18:59 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) setuid(0x0) keyctl$setperm(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) close(r0) 01:18:59 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 01:18:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec8"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:18:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1256.738351][T27882] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1256.819250][ T9666] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1256.849890][T26726] usb 5-1: new high-speed USB device number 36 using dummy_hcd 01:18:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1257.099873][T27882] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.100784][T26726] usb 5-1: Using ep0 maxpacket: 32 [ 1257.110566][T27882] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1257.128885][T27882] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1257.138206][T27882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.217114][ T9666] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1257.226879][ T9666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.384225][ T9666] usb 3-1: config 0 descriptor?? [ 1257.462620][ T9666] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1257.470172][T26726] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1257.479547][T26726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.486655][ T3364] usb 2-1: USB disconnect, device number 39 [ 1257.487688][T26726] usb 5-1: Product: syz [ 1257.487803][T26726] usb 5-1: Manufacturer: syz [ 1257.488032][T26726] usb 5-1: SerialNumber: syz 01:19:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) 01:19:00 executing program 0: [ 1257.678406][T26726] usb 5-1: config 0 descriptor?? 01:19:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:19:00 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000007c0)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) 01:19:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000080)="b805000000b94a0000000f01c10f00d4b93c0200000f320f068ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c2466b891000f00d8b9090b00000f32660f3881530f", 0x56}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1258.211772][T26726] usb 5-1: MIDIStreaming interface descriptor not found [ 1258.391306][T26726] usb 5-1: USB disconnect, device number 36 [ 1258.939478][ T9666] gspca_stk1135: reg_w 0xf err -71 [ 1258.945927][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1258.952569][ T9666] gspca_stk1135: Sensor write failed [ 1258.958103][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1258.964483][ T9666] gspca_stk1135: Sensor write failed [ 1258.970082][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1258.976451][ T9666] gspca_stk1135: Sensor read failed [ 1258.981967][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1258.988480][ T9666] gspca_stk1135: Sensor read failed [ 1258.993834][ T9666] gspca_stk1135: Detected sensor type unknown (0x0) [ 1259.000683][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1259.007055][ T9666] gspca_stk1135: Sensor read failed [ 1259.012512][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1259.018974][ T9666] gspca_stk1135: Sensor read failed [ 1259.024415][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1259.030892][ T9666] gspca_stk1135: Sensor write failed [ 1259.036334][ T9666] gspca_stk1135: serial bus timeout: status=0x00 [ 1259.042873][ T9666] gspca_stk1135: Sensor write failed [ 1259.048746][ T9666] stk1135: probe of 3-1:0.0 failed with error -71 [ 1259.258124][ T7] tipc: TX() has been purged, node left! [ 1259.341750][ T9666] usb 3-1: USB disconnect, device number 37 01:19:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:02 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff04"], 0x0) 01:19:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 01:19:02 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xf, @string={0xf, 0x3, "bad34203e5fb32faacc8c6c5af"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000080)="b805000000b94a0000000f01c10f00d4b93c0200000f320f068ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c2466b891000f00d8b9090b00000f32660f3881530f", 0x56}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:19:02 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pipe(0x0) close(0xffffffffffffffff) write$P9_RREADLINK(r2, &(0x7f00000007c0)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) [ 1259.998134][ T9666] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1260.041781][T10867] usb 5-1: new high-speed USB device number 37 using dummy_hcd 01:19:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1260.328239][T10867] usb 5-1: Using ep0 maxpacket: 32 [ 1260.366789][ T29] audit: type=1800 audit(1596849543.179:131): pid=29707 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="ramfs" ino=92342 res=0 [ 1260.421255][ T9666] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.431747][ T9666] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1260.445208][ T9666] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1260.454538][ T9666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.465164][T12907] usb 3-1: new high-speed USB device number 38 using dummy_hcd 01:19:03 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pipe(0x0) close(0xffffffffffffffff) write$P9_RREADLINK(r2, &(0x7f00000007c0)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) [ 1260.673191][T10867] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1260.682615][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.691012][T10867] usb 5-1: Product: syz [ 1260.695328][T10867] usb 5-1: Manufacturer: syz [ 1260.700162][T10867] usb 5-1: SerialNumber: syz 01:19:03 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x1}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) setuid(0x0) keyctl$setperm(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) close(r0) 01:19:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1260.909832][T12907] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1260.919157][T12907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.973417][T10867] usb 5-1: config 0 descriptor?? [ 1261.001637][ T9666] usb 2-1: USB disconnect, device number 40 [ 1261.034604][T12907] usb 3-1: config 0 descriptor?? [ 1261.097256][T12907] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1261.468827][T10867] usb 5-1: MIDIStreaming interface descriptor not found 01:19:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1261.706947][T10867] usb 5-1: USB disconnect, device number 37 01:19:04 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff04"], 0x0) [ 1262.629878][T12907] gspca_stk1135: reg_w 0xf err -71 [ 1262.636204][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.642823][T12907] gspca_stk1135: Sensor write failed [ 1262.648378][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.654754][T12907] gspca_stk1135: Sensor write failed [ 1262.660419][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.666789][T12907] gspca_stk1135: Sensor read failed [ 1262.672313][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.678789][T12907] gspca_stk1135: Sensor read failed [ 1262.684049][T12907] gspca_stk1135: Detected sensor type unknown (0x0) [ 1262.690867][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.697263][T12907] gspca_stk1135: Sensor read failed [ 1262.702750][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.709197][T12907] gspca_stk1135: Sensor read failed [ 1262.714547][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.720997][T12907] gspca_stk1135: Sensor write failed [ 1262.726447][T12907] gspca_stk1135: serial bus timeout: status=0x00 [ 1262.732928][T12907] gspca_stk1135: Sensor write failed [ 1262.738617][T12907] stk1135: probe of 3-1:0.0 failed with error -71 [ 1262.771777][T12907] usb 3-1: USB disconnect, device number 38 [ 1262.831359][T10867] usb 2-1: new high-speed USB device number 41 using dummy_hcd 01:19:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xf, @string={0xf, 0x3, "bad34203e5fb32faacc8c6c5af"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:06 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x1}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) setuid(0x0) keyctl$setperm(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) close(r0) 01:19:06 executing program 0: 01:19:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 1263.239515][T10867] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.250101][T10867] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1263.263442][T10867] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1263.272829][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:19:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) 01:19:06 executing program 0: [ 1263.720949][T27882] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1263.758069][ T9667] usb 2-1: USB disconnect, device number 41 [ 1263.817950][T27791] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1263.971096][T27882] usb 5-1: Using ep0 maxpacket: 32 01:19:06 executing program 0: 01:19:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) [ 1264.179754][T27791] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1264.189302][T27791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.249888][T27882] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1264.259515][T27882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.268292][T27882] usb 5-1: Product: syz [ 1264.272752][T27882] usb 5-1: Manufacturer: syz [ 1264.277630][T27882] usb 5-1: SerialNumber: syz [ 1264.291130][T27791] usb 3-1: config 0 descriptor?? 01:19:07 executing program 3: [ 1264.335698][T27791] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:19:07 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000033c9c640861246206ca3000000010902240001240000000904000002ff04"], 0x0) [ 1264.458771][T27882] usb 5-1: config 0 descriptor?? 01:19:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003602000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600001218d1fe7e640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af540430000000044631ac2622cdcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975f551558055dc2dc2739c2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000ec4c16737d5fe959870ef6e9f2f84e1750d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f8799d0e1a19b6ecc7de09a2257e908cd96e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38115b9d836395e9ee160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d11e3f56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df5745700000000000000000000000000ad2516510b29804b3cc034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0777824f210a69f8e5227fd32e7d5a2c66cf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae07f7c5b91de7bfe232d872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de4408652412de35040f86f1b5cf2e2f1cef915eba31255d173f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd147a5cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c294fe9b23ce9725285fc50f1dd3f5e264023082eed752704c1f598151aa7d29a747542e9b5353453d05382d694977d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7dcd2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) [ 1264.948455][T27882] usb 5-1: MIDIStreaming interface descriptor not found [ 1265.090507][T27882] usb 5-1: USB disconnect, device number 38 [ 1265.144113][ T9667] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1265.508194][ T9667] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.519055][ T9667] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1265.532636][ T9667] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=a3.6c [ 1265.542032][ T9667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.803733][T10867] usb 2-1: USB disconnect, device number 42 [ 1265.867691][T27791] gspca_stk1135: reg_w 0xf err -71 [ 1265.874018][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.881493][T27791] gspca_stk1135: Sensor write failed [ 1265.886957][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.893443][T27791] gspca_stk1135: Sensor write failed [ 1265.898966][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.905419][T27791] gspca_stk1135: Sensor read failed [ 1265.911071][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.917529][T27791] gspca_stk1135: Sensor read failed [ 1265.922793][T27791] gspca_stk1135: Detected sensor type unknown (0x0) [ 1265.929647][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.936118][T27791] gspca_stk1135: Sensor read failed [ 1265.941607][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.948088][T27791] gspca_stk1135: Sensor read failed [ 1265.953529][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.960009][T27791] gspca_stk1135: Sensor write failed [ 1265.965447][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1265.971933][T27791] gspca_stk1135: Sensor write failed [ 1265.977613][T27791] stk1135: probe of 3-1:0.0 failed with error -71 [ 1266.027443][T27791] usb 3-1: USB disconnect, device number 39 01:19:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:09 executing program 0: 01:19:09 executing program 3: 01:19:09 executing program 5: 01:19:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xf, @string={0xf, 0x3, "bad34203e5fb32faacc8c6c5af"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:09 executing program 5: 01:19:09 executing program 1: 01:19:09 executing program 3: 01:19:09 executing program 0: [ 1266.857265][T10867] usb 5-1: new high-speed USB device number 39 using dummy_hcd 01:19:09 executing program 1: [ 1267.104146][T10867] usb 5-1: Using ep0 maxpacket: 32 01:19:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000100)) [ 1267.147509][T27791] usb 3-1: new high-speed USB device number 40 using dummy_hcd 01:19:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) [ 1267.411343][T10867] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1267.420755][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.429357][T10867] usb 5-1: Product: syz [ 1267.433871][T10867] usb 5-1: Manufacturer: syz [ 1267.438734][T10867] usb 5-1: SerialNumber: syz [ 1267.509493][T27791] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1267.518887][T27791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.556228][T10867] usb 5-1: config 0 descriptor?? [ 1267.649393][T27791] usb 3-1: config 0 descriptor?? [ 1267.695201][T27791] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1268.067705][T10867] usb 5-1: MIDIStreaming interface descriptor not found [ 1268.134478][T10867] usb 5-1: USB disconnect, device number 39 [ 1269.217118][T27791] gspca_stk1135: reg_w 0xf err -71 [ 1269.223444][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.230590][T27791] gspca_stk1135: Sensor write failed [ 1269.236040][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.242626][T27791] gspca_stk1135: Sensor write failed [ 1269.248227][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.254613][T27791] gspca_stk1135: Sensor read failed [ 1269.260144][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.266650][T27791] gspca_stk1135: Sensor read failed [ 1269.272043][T27791] gspca_stk1135: Detected sensor type unknown (0x0) [ 1269.278881][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.285258][T27791] gspca_stk1135: Sensor read failed [ 1269.290738][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.297285][T27791] gspca_stk1135: Sensor read failed [ 1269.302645][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.309172][T27791] gspca_stk1135: Sensor write failed [ 1269.314723][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1269.321295][T27791] gspca_stk1135: Sensor write failed [ 1269.327172][T27791] stk1135: probe of 3-1:0.0 failed with error -71 [ 1269.375643][T27791] usb 3-1: USB disconnect, device number 40 01:19:12 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 01:19:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)=""/242, 0xf2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r3, 0x0) 01:19:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)=0x8) 01:19:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000000)=""/92, 0x5c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) select(0x40, &(0x7f0000000880)={0x7240, 0xffffffffffffffff, 0x72a, 0x2, 0x8f, 0xffffffffffff0000, 0x0, 0x80000000}, &(0x7f00000008c0)={0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}, &(0x7f0000000900)={0xb9, 0x4, 0x0, 0x2, 0x7ff, 0x20, 0x10000, 0x1}, &(0x7f0000000940)={0x3, 0x5}) r4 = dup(r3) shutdown(r4, 0x0) 01:19:12 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000000)={0x3, [0x3, 0x1, 0x1]}, 0xa) 01:19:12 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x16, @string={0x16, 0x3, "bad34203e5fb32faacc8c6c5af216789e3844992"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:13 executing program 3: 01:19:13 executing program 1: [ 1270.247441][ T9667] usb 5-1: new high-speed USB device number 40 using dummy_hcd 01:19:13 executing program 1: [ 1270.488301][ T9667] usb 5-1: Using ep0 maxpacket: 32 01:19:13 executing program 3: 01:19:13 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1270.771132][ T9667] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1270.780626][ T9667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.789376][ T9667] usb 5-1: Product: syz [ 1270.793726][ T9667] usb 5-1: Manufacturer: syz [ 1270.798617][ T9667] usb 5-1: SerialNumber: syz 01:19:13 executing program 0: 01:19:13 executing program 5: [ 1271.053046][ T9667] usb 5-1: config 0 descriptor?? 01:19:13 executing program 1: 01:19:14 executing program 3: 01:19:14 executing program 1: 01:19:14 executing program 0: [ 1271.548221][ T9667] usb 5-1: MIDIStreaming interface descriptor not found [ 1271.709578][ T9667] usb 5-1: USB disconnect, device number 40 01:19:14 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x16, @string={0x16, 0x3, "bad34203e5fb32faacc8c6c5af216789e3844992"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:14 executing program 5: 01:19:14 executing program 3: 01:19:14 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 01:19:14 executing program 0: 01:19:14 executing program 1: 01:19:15 executing program 3: 01:19:15 executing program 0: 01:19:15 executing program 5: 01:19:15 executing program 1: 01:19:15 executing program 3: [ 1272.807526][ T9667] usb 5-1: new high-speed USB device number 41 using dummy_hcd 01:19:15 executing program 1: [ 1273.046902][ T9667] usb 5-1: Using ep0 maxpacket: 32 [ 1273.327833][ T9667] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1273.337364][ T9667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.345510][ T9667] usb 5-1: Product: syz [ 1273.350111][ T9667] usb 5-1: Manufacturer: syz [ 1273.354859][ T9667] usb 5-1: SerialNumber: syz [ 1273.437952][ T9667] usb 5-1: config 0 descriptor?? [ 1273.927960][ T9667] usb 5-1: MIDIStreaming interface descriptor not found [ 1273.987903][ T9667] usb 5-1: USB disconnect, device number 41 01:19:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:17 executing program 0: 01:19:17 executing program 5: 01:19:17 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x16, @string={0x16, 0x3, "bad34203e5fb32faacc8c6c5af216789e3844992"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:17 executing program 3: 01:19:17 executing program 1: 01:19:17 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf2000000, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40080c0) 01:19:17 executing program 1: 01:19:17 executing program 0: 01:19:17 executing program 3: [ 1275.146757][T27791] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1275.387404][T27791] usb 5-1: Using ep0 maxpacket: 32 01:19:18 executing program 5: 01:19:18 executing program 3: [ 1275.668248][T27791] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1275.678184][T27791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.686668][T27791] usb 5-1: Product: syz [ 1275.690977][T27791] usb 5-1: Manufacturer: syz [ 1275.695713][T27791] usb 5-1: SerialNumber: syz 01:19:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x8008743f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:19:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b0b, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x1000, &(0x7f0000000b80)=""/4096, 0x0, 0x0, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x10001}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) [ 1275.906888][T27791] usb 5-1: config 0 descriptor?? [ 1276.407349][T27791] usb 5-1: MIDIStreaming interface descriptor not found [ 1276.591273][T27791] usb 5-1: USB disconnect, device number 42 01:19:19 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x19, @string={0x19, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:19 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=[{0x18, 0x84, 0x7, "7f"}], 0x18}, 0xfc) 01:19:19 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) 01:19:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x8008743f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:19:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b0b, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x1000, &(0x7f0000000b80)=""/4096, 0x0, 0x0, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x10001}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 01:19:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x8008743f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:19:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6) 01:19:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) [ 1277.645819][T10867] usb 5-1: new high-speed USB device number 43 using dummy_hcd 01:19:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:20 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80802, 0x0) write(r2, &(0x7f0000001940)="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", 0xfc) [ 1277.896569][T10867] usb 5-1: Using ep0 maxpacket: 32 01:19:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) [ 1278.197571][T10867] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1278.207291][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.215550][T10867] usb 5-1: Product: syz [ 1278.220131][T10867] usb 5-1: Manufacturer: syz [ 1278.224881][T10867] usb 5-1: SerialNumber: syz [ 1278.370299][T30151] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1278.436704][T27791] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1278.456477][T10867] usb 5-1: config 0 descriptor?? [ 1278.526715][T30151] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1278.707864][T27791] usb 3-1: device descriptor read/64, error 18 [ 1278.987449][T10867] usb 5-1: MIDIStreaming interface descriptor not found [ 1279.061972][T10867] usb 5-1: USB disconnect, device number 43 [ 1279.096895][T27791] usb 3-1: device descriptor read/64, error 18 [ 1279.366235][T27791] usb 3-1: new high-speed USB device number 42 using dummy_hcd 01:19:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x19, @string={0x19, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x2c3400, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:19:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x8008743f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:19:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:19:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x50}}, 0x0) [ 1279.636118][T27791] usb 3-1: device descriptor read/64, error 18 [ 1280.026168][T27791] usb 3-1: device descriptor read/64, error 18 01:19:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) [ 1280.149050][T27791] usb usb3-port1: attempt power cycle 01:19:23 executing program 3: [ 1280.366055][ T9667] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1280.606511][ T9667] usb 5-1: Using ep0 maxpacket: 32 01:19:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x8008743f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:19:23 executing program 3: [ 1280.876072][T27791] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1280.891660][ T9667] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1280.901209][ T9667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.910041][ T9667] usb 5-1: Product: syz [ 1280.914668][ T9667] usb 5-1: Manufacturer: syz [ 1280.919856][ T9667] usb 5-1: SerialNumber: syz [ 1281.141891][ T9667] usb 5-1: config 0 descriptor?? 01:19:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:24 executing program 1: 01:19:24 executing program 0: [ 1281.316862][T27791] usb 3-1: device descriptor read/8, error -71 [ 1281.526140][T27791] usb 3-1: device descriptor read/8, error -71 [ 1281.647430][ T9667] usb 5-1: MIDIStreaming interface descriptor not found [ 1281.818201][ T9667] usb 5-1: USB disconnect, device number 44 [ 1282.027386][T27791] usb 3-1: new high-speed USB device number 44 using dummy_hcd 01:19:25 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x19, @string={0x19, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:25 executing program 1: 01:19:25 executing program 3: 01:19:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x8008743f, 0x0) 01:19:25 executing program 0: [ 1282.197628][T27791] usb 3-1: device descriptor read/8, error -61 [ 1282.467517][T27791] usb 3-1: device descriptor read/8, error -61 01:19:25 executing program 0: [ 1282.586271][T27791] usb usb3-port1: unable to enumerate USB device 01:19:25 executing program 3: 01:19:25 executing program 1: 01:19:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) [ 1283.035693][T12907] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1283.296818][T12907] usb 5-1: Using ep0 maxpacket: 32 [ 1283.617352][T12907] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1283.626677][T12907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.634821][T12907] usb 5-1: Product: syz [ 1283.639316][T12907] usb 5-1: Manufacturer: syz [ 1283.644054][T12907] usb 5-1: SerialNumber: syz [ 1283.654713][T12907] usb 5-1: config 0 descriptor?? [ 1284.156155][T12907] usb 5-1: MIDIStreaming interface descriptor not found [ 1284.264634][T12907] usb 5-1: USB disconnect, device number 45 01:19:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:27 executing program 0: 01:19:27 executing program 3: 01:19:27 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef023c"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:27 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 01:19:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) 01:19:28 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=@in={0x10, 0x2}, 0x10) 01:19:28 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) socket$inet6_sctp(0x1c, 0x0, 0x84) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0xa) 01:19:28 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x14) [ 1285.467340][T12907] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1285.535834][T27882] usb 5-1: new high-speed USB device number 46 using dummy_hcd 01:19:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) [ 1285.777739][T27882] usb 5-1: Using ep0 maxpacket: 32 [ 1285.778813][T12907] usb 3-1: device descriptor read/64, error 18 01:19:28 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r1) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 1286.056552][T27882] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1286.065989][T27882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.074141][T27882] usb 5-1: Product: syz [ 1286.078766][T27882] usb 5-1: Manufacturer: syz [ 1286.083527][T27882] usb 5-1: SerialNumber: syz [ 1286.205977][T12907] usb 3-1: device descriptor read/64, error 18 01:19:29 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1101, &(0x7f0000000340), &(0x7f0000000380)=0x1e0) [ 1286.286327][T27882] usb 5-1: config 0 descriptor?? [ 1286.484565][T12907] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1286.775781][T27882] usb 5-1: MIDIStreaming interface descriptor not found [ 1286.795542][T12907] usb 3-1: device descriptor read/64, error 18 [ 1286.911521][T27882] usb 5-1: USB disconnect, device number 46 [ 1287.209467][T12907] usb 3-1: device descriptor read/64, error 18 [ 1287.341042][T12907] usb usb3-port1: attempt power cycle [ 1288.075844][T12907] usb 3-1: new high-speed USB device number 47 using dummy_hcd 01:19:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:31 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @private, {[@rr={0x7, 0x3}]}}}}}) 01:19:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:19:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:31 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 01:19:31 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef02"}}, 0x0, 0x0, 0x0}, 0x0) [ 1288.248370][T12907] usb 3-1: device descriptor read/8, error -71 [ 1288.475638][T12907] usb 3-1: device descriptor read/8, error -71 01:19:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1288.655883][T10867] usb 5-1: new high-speed USB device number 47 using dummy_hcd 01:19:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x81785501, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1288.897293][T10867] usb 5-1: Using ep0 maxpacket: 32 01:19:31 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x359b) lsetxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0401"], 0x2, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) [ 1288.995926][T12907] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1289.179421][T12907] usb 3-1: device descriptor read/8, error -61 [ 1289.203097][T10867] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1289.212568][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.220978][T10867] usb 5-1: Product: syz 01:19:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 01:19:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1289.225344][T10867] usb 5-1: Manufacturer: syz [ 1289.230074][T10867] usb 5-1: SerialNumber: syz 01:19:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1289.257308][ T29] audit: type=1804 audit(1596849572.081:132): pid=30417 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir762364535/syzkaller.xu26lO/995/bus" dev="sda1" ino=15804 res=1 [ 1289.282977][T10867] usb 5-1: config 0 descriptor?? [ 1289.475315][T12907] usb 3-1: device descriptor read/8, error -61 [ 1289.600293][T12907] usb usb3-port1: unable to enumerate USB device [ 1289.776480][T10867] usb 5-1: MIDIStreaming interface descriptor not found [ 1289.851570][T10867] usb 5-1: USB disconnect, device number 47 [ 1289.878428][T26726] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1290.279742][T26726] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1290.289236][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.346562][T26726] usb 2-1: config 0 descriptor?? [ 1290.390821][T26726] ch341 2-1:0.0: ch341-uart converter detected [ 1291.265277][T26726] usb 2-1: failed to send control message: -71 [ 1291.271943][T26726] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1291.416994][T26726] usb 2-1: USB disconnect, device number 43 [ 1291.425384][T26726] ch341 2-1:0.0: device disconnected 01:19:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x7fffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) 01:19:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 01:19:34 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x19, @string={0x19, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef"}}, 0x0, 0x0, 0x0}, 0x0) [ 1292.125099][T26726] usb 2-1: new high-speed USB device number 44 using dummy_hcd 01:19:35 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1292.425010][T27882] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1292.506102][T26726] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1292.515486][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.664809][T27882] usb 5-1: Using ep0 maxpacket: 32 [ 1292.732648][T26726] usb 2-1: config 0 descriptor?? [ 1292.775597][T10867] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1292.946131][T27882] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1292.955548][T27882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.963703][T27882] usb 5-1: Product: syz [ 1292.968216][T27882] usb 5-1: Manufacturer: syz [ 1292.972978][T27882] usb 5-1: SerialNumber: syz 01:19:35 executing program 0: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) msync(&(0x7f0000154000/0x3000)=nil, 0x3000, 0x4) [ 1293.018051][T27882] usb 5-1: config 0 descriptor?? 01:19:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1293.064905][T10867] usb 3-1: device descriptor read/64, error 18 [ 1293.085422][T26726] usb 2-1: can't set config #0, error -71 [ 1293.104245][T26726] usb 2-1: USB disconnect, device number 44 01:19:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) [ 1293.514902][T10867] usb 3-1: device descriptor read/64, error 18 [ 1293.533133][T27882] usb 5-1: MIDIStreaming interface descriptor not found 01:19:36 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1293.661055][T27882] usb 5-1: USB disconnect, device number 48 [ 1293.785114][T10867] usb 3-1: new high-speed USB device number 50 using dummy_hcd 01:19:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) open(0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) poll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1293.974777][T26726] usb 2-1: new high-speed USB device number 45 using dummy_hcd 01:19:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 1294.079273][T10867] usb 3-1: device descriptor read/64, error 18 [ 1294.351762][T26726] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1294.361141][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.367288][ T29] audit: type=1800 audit(1596849577.192:133): pid=30535 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16365 res=0 [ 1294.504191][T26726] usb 2-1: config 0 descriptor?? [ 1294.528568][T10867] usb 3-1: device descriptor read/64, error 18 [ 1294.615233][T26726] ch341 2-1:0.0: ch341-uart converter detected [ 1294.655069][T10867] usb usb3-port1: attempt power cycle 01:19:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:38 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:38 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x19, @string={0x19, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 01:19:38 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) open(0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) poll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1295.417431][T26726] usb 2-1: failed to send control message: -71 [ 1295.424077][T26726] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1295.509560][T26726] usb 2-1: USB disconnect, device number 45 [ 1295.517678][T26726] ch341 2-1:0.0: device disconnected 01:19:38 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1295.871681][ T29] audit: type=1800 audit(1596849578.692:134): pid=30567 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15828 res=0 [ 1295.965200][T27882] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1296.204537][T27882] usb 5-1: Using ep0 maxpacket: 32 01:19:39 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1296.264543][T10867] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1296.446010][T10867] usb 3-1: device descriptor read/8, error -61 [ 1296.485691][T27882] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1296.495089][T27882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.503231][T27882] usb 5-1: Product: syz [ 1296.507786][T27882] usb 5-1: Manufacturer: syz [ 1296.512521][T27882] usb 5-1: SerialNumber: syz [ 1296.629189][T27882] usb 5-1: config 0 descriptor?? 01:19:39 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1296.734976][T10867] usb 3-1: device descriptor read/8, error -61 [ 1297.005292][T10867] usb 3-1: new high-speed USB device number 52 using dummy_hcd 01:19:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1297.134834][T27882] usb 5-1: MIDIStreaming interface descriptor not found [ 1297.144937][ T9667] usb 2-1: new high-speed USB device number 46 using dummy_hcd 01:19:40 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) open(0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) poll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1297.176118][T10867] usb 3-1: device descriptor read/8, error -61 [ 1297.248408][T27882] usb 5-1: USB disconnect, device number 49 [ 1297.456381][T10867] usb 3-1: device descriptor read/8, error -61 01:19:40 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1297.508266][ T9667] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1297.517747][ T9667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.577442][ T29] audit: type=1800 audit(1596849580.402:135): pid=30607 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16050 res=0 [ 1297.578572][T10867] usb usb3-port1: unable to enumerate USB device [ 1297.712498][ T9667] usb 2-1: config 0 descriptor?? [ 1297.815899][ T9667] ch341 2-1:0.0: ch341-uart converter detected [ 1298.635560][ T9667] usb 2-1: failed to send control message: -71 [ 1298.642104][ T9667] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1298.677150][ T9667] usb 2-1: USB disconnect, device number 46 [ 1298.685736][ T9667] ch341 2-1:0.0: device disconnected 01:19:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad600"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:41 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x19, @string={0x19, 0x3, "bad34203e5fb32faacc8c6c5af216789e38449923df0ef"}}, 0x0, 0x0, 0x0}, 0x0) 01:19:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:41 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 01:19:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1299.214359][T10867] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1299.414425][T12907] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1299.474269][T10867] usb 5-1: Using ep0 maxpacket: 32 01:19:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:42 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1299.715842][T12907] usb 3-1: no configurations [ 1299.720631][T12907] usb 3-1: can't read configurations, error -22 [ 1299.808328][T10867] usb 5-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5 [ 1299.817807][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.826149][T10867] usb 5-1: Product: syz [ 1299.830566][T10867] usb 5-1: Manufacturer: syz [ 1299.835673][T10867] usb 5-1: SerialNumber: syz 01:19:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1300.054353][T12907] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1300.077472][T10867] usb 5-1: config 0 descriptor?? 01:19:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1300.354507][T12907] usb 3-1: no configurations [ 1300.359478][T12907] usb 3-1: can't read configurations, error -22 [ 1300.388892][T12907] usb usb3-port1: attempt power cycle 01:19:43 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1300.455602][ T9667] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1300.574998][T10867] usb 5-1: MIDIStreaming interface descriptor not found [ 1300.743475][T10867] usb 5-1: USB disconnect, device number 50 [ 1300.820925][ T9667] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1300.830439][ T9667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.846018][ T9667] usb 2-1: config 0 descriptor?? [ 1300.887945][ T9667] ch341 2-1:0.0: ch341-uart converter detected [ 1301.135162][T12907] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1301.294366][T12907] usb 3-1: no configurations [ 1301.299184][T12907] usb 3-1: can't read configurations, error -22 [ 1301.534883][T12907] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1301.675591][T12907] usb 3-1: no configurations [ 1301.680511][T12907] usb 3-1: can't read configurations, error -22 [ 1301.715040][T12907] usb usb3-port1: unable to enumerate USB device [ 1301.755060][ T9667] usb 2-1: failed to send control message: -71 [ 1301.761434][ T9667] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1301.796270][ T9667] usb 2-1: USB disconnect, device number 47 [ 1301.804206][ T9667] ch341 2-1:0.0: device disconnected 01:19:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad600"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:44 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@ipv4={[], [], @multicast1}, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x1, 0x0) 01:19:44 executing program 4: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008"], 0x18}}], 0x2, 0x0) 01:19:45 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 01:19:45 executing program 4: execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(0x0, &(0x7f0000000200)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)='{\x00', 0x0) 01:19:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 01:19:45 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x16, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 1302.498993][T12907] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1302.806335][T12907] usb 3-1: no configurations [ 1302.811268][T12907] usb 3-1: can't read configurations, error -22 [ 1302.840335][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:19:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, 0x0) [ 1302.934974][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:19:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1303.024199][T12907] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1303.147991][T26726] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1303.335662][T12907] usb 3-1: no configurations [ 1303.340470][T12907] usb 3-1: can't read configurations, error -22 [ 1303.394178][T12907] usb usb3-port1: attempt power cycle [ 1303.555906][T26726] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1303.565412][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.606722][T26726] usb 2-1: config 0 descriptor?? [ 1303.647818][T26726] ch341 2-1:0.0: ch341-uart converter detected [ 1304.147888][T12907] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1304.297199][T26726] usb 2-1: failed to send control message: -71 [ 1304.304005][T26726] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1304.315019][T12907] usb 3-1: no configurations [ 1304.319802][T12907] usb 3-1: can't read configurations, error -22 [ 1304.357696][T26726] usb 2-1: USB disconnect, device number 48 [ 1304.366194][T26726] ch341 2-1:0.0: device disconnected [ 1304.494074][T12907] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1304.638331][T12907] usb 3-1: no configurations [ 1304.643137][T12907] usb 3-1: can't read configurations, error -22 [ 1304.657222][T12907] usb usb3-port1: unable to enumerate USB device 01:19:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad600"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x1003, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 01:19:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 01:19:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, 0x0) 01:19:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1306.213756][ T9667] usb 2-1: new high-speed USB device number 49 using dummy_hcd 01:19:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) sendto$inet(r0, &(0x7f0000000140)="11", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x14) recvfrom$inet(r0, &(0x7f0000000200)=""/4084, 0xff4, 0x62, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:19:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, 0x0) 01:19:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1306.454784][T27791] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1306.575146][ T9667] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1306.584612][ T9667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.779163][ T9667] usb 2-1: config 0 descriptor?? [ 1306.786397][T27791] usb 3-1: no configurations [ 1306.791152][T27791] usb 3-1: can't read configurations, error -22 [ 1306.860444][ T9667] ch341 2-1:0.0: ch341-uart converter detected [ 1307.003822][T27791] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1307.283557][T30785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1307.305720][T27791] usb 3-1: no configurations [ 1307.310652][T27791] usb 3-1: can't read configurations, error -22 01:19:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1307.399785][T27791] usb usb3-port1: attempt power cycle [ 1307.503949][ T9667] usb 2-1: failed to send control message: -71 [ 1307.510490][ T9667] ch341-uart: probe of ttyUSB0 failed with error -71 01:19:50 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000140)=""/149, 0x32, 0x95, 0x8}, 0x20) [ 1307.612757][ T9667] usb 2-1: USB disconnect, device number 49 [ 1307.621331][ T9667] ch341 2-1:0.0: device disconnected [ 1308.185767][T27791] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1308.277183][T30799] BPF: (anon) type_id=4 bits_offset=0 [ 1308.282904][T30799] BPF: [ 1308.286141][T30799] BPF:Invalid member [ 1308.290095][T30799] BPF: [ 1308.290095][T30799] [ 1308.322177][T30800] BPF: (anon) type_id=4 bits_offset=0 [ 1308.327741][T30800] BPF: [ 1308.330565][T30800] BPF:Invalid member [ 1308.334849][T30800] BPF: [ 1308.334849][T30800] [ 1308.354846][T27791] usb 3-1: no configurations [ 1308.359632][T27791] usb 3-1: can't read configurations, error -22 [ 1308.563957][T27791] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1308.694856][T27791] usb 3-1: no configurations [ 1308.699659][T27791] usb 3-1: can't read configurations, error -22 [ 1308.722584][T27791] usb usb3-port1: unable to enumerate USB device 01:19:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad60000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:52 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:19:52 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = memfd_create(&(0x7f0000000000)='\vem1\xc1\xf8\xa6\x8dL\xc4J\x80\x89K\xf6w\xf3\x97\xac#*\x7f{\x16\xe1\v\xbb\x91gu\x88_[)i\xe1MK_S#%\xba\x82h\xe2\x1f\xd4\xd6\x80!\xcb`\xbc\xaa%\xed*\xc4\x9fU\"\xa7\xe5SK8\xe5b\xaf\xa9\x02\xb8-Hr\x13\b7\x80\xe0\xb2\xaf\xb6\x98\x02J\xed\x1d\x9cO\x15m\'\xd2\xa2AI\xdb \xc8\x85\xf9\x93\xe0^A{\x8av\xbb{\t\xd3\xf1b\x83\xb4\xa9\x894\xb9m\x8f\x8e:2L\x06J\xf8\xde\xd0\x03\x00\x00\x00\x8c\xf9\x1cT\x10\x94\x9a\x90\xc6\x87*zBX\xca\x00\xdc\x1b}\xfe\x97\x1al\xdd\xa9 \x18\xcf\xc7\r\xae\xc8 \xb2\x81\xb4\xf6\xa6\xd7$\xda\xc3\x1fN\x8d\x85-%M\xed\xff\x13\x9e\x02\x1e\x9a', 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffffffffffc84) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1000003, 0x4046811, r0, 0x0) 01:19:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:52 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 01:19:52 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fcdbdf256b0000000c00990002000000040000000c009900feffffff010000", @ANYRES32=0x0, @ANYBLOB="ebe1388dbda1fbe963531e9f64fcd13df632ee2c6bbf339cd01de4b3ca9f7552ee78acd4a8226ef95c4a2e7ad22152a4f5949a9cec6a984d8a8776fa13a9461575dfef30f6f1fbdf6743b7c169d5d8be7a81f1e17a545cf9380c335ef899a3d2c304d5933a5b6eabd671f55e338e0c"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x60000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xf) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r4+30000000}}, 0x0) r5 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000300)={0xf}) sendmsg$TIPC_NL_MON_PEER_GET(r5, 0x0, 0x98dd2c31f741db1b) fcntl$setstatus(r0, 0x4, 0x42000) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6020a2110014060020000000000000800000000000070022fe800800"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000d63c86f6c826e20a907800fe"], 0x0) sysinfo(&(0x7f00000003c0)=""/155) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='iso9660\x00', 0x0, 0x0) [ 1309.683504][ T29] audit: type=1400 audit(1596849592.503:136): avc: denied { block_suspend } for pid=30809 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 1309.923492][T27791] usb 2-1: new high-speed USB device number 50 using dummy_hcd 01:19:53 executing program 0: getpgid(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000001080), &(0x7f0000048000), 0x0) exit(0x0) [ 1310.295288][T27791] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1310.304876][T27791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:19:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:53 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x11d, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x40000}]) [ 1310.483564][ T9667] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1310.509932][T27791] usb 2-1: config 0 descriptor?? [ 1310.579663][T27791] ch341 2-1:0.0: ch341-uart converter detected 01:19:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x430040, 0x0) accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x7d, r3}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x45) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="259ffaa542a7e4bc394182b49ad07015ccae00000000000000000000f48fc31b1e058d7111f999803cfb35994262fd6491dea1a7df67ad37e3727445fadaf11984135fdc2fb1e540b5a92e427d"], 0x4c}}, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req3={0x4, 0x80, 0x2, 0x0, 0x4, 0x8, 0x4}, 0x1c) ioctl$CHAR_RAW_SECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @empty}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2, 0x0, 0x0, 0x400, 0x5, 0x4060200, r7}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x4, 0x80, 0x2, 0x0, 0x4, 0x8, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0xff, @dev={0xac, 0x14, 0x14, 0x28}, 0x4e22, 0x2, 'lblc\x00', 0x0, 0x7, 0x7b}, 0x2c) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc05812fe, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x0, 0x40000, [0x8048004, 0x8048000, 0x1000000000000000, 0x4f00, 0x355, 0x5000000], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x32c145bbeb, 0x1000000000000000, 0xc000000000000000]}]}) [ 1310.846399][ T9667] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.857037][ T9667] usb 3-1: config 0 has no interfaces? [ 1310.862713][ T9667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1310.872115][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:19:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1310.964138][ T9667] usb 3-1: config 0 descriptor?? [ 1311.213784][T27791] usb 2-1: failed to send control message: -71 [ 1311.220385][T27791] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1311.316413][T27791] usb 2-1: USB disconnect, device number 50 [ 1311.321508][T30865] device bond0 entered promiscuous mode [ 1311.324563][T27791] ch341 2-1:0.0: device disconnected [ 1311.329187][T30865] device bond_slave_0 entered promiscuous mode [ 1311.340301][T30865] device bond_slave_1 entered promiscuous mode [ 1311.349370][T30865] 8021q: adding VLAN 0 to HW filter on device macvlan2 01:19:54 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x50042, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0x4000000000010044) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) mkdir(0x0, 0x0) [ 1311.596965][T30865] device bond0 left promiscuous mode [ 1311.602543][T30865] device bond_slave_0 left promiscuous mode [ 1311.609802][T30865] device bond_slave_1 left promiscuous mode [ 1312.084282][T30871] device bond0 entered promiscuous mode [ 1312.089936][T30871] device bond_slave_0 entered promiscuous mode [ 1312.097958][T30871] device bond_slave_1 entered promiscuous mode [ 1312.106536][T30871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1312.137031][T30871] device bond0 left promiscuous mode [ 1312.142499][T30871] device bond_slave_0 left promiscuous mode [ 1312.149226][T30871] device bond_slave_1 left promiscuous mode 01:19:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad60000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:55 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x50042, 0x0) dup(0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendfile(r0, r1, 0x0, 0x4000000000010044) mkdir(0x0, 0x0) 01:19:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:19:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x8, 0x9, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x40, 0xb482, 0x7ff, 0x5, 0xcfec}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x40, 0xa5, 0x7, 0x3, 0x0, 0x0, 0xe08, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) setxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 01:19:55 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1312.938390][T12907] usb 3-1: USB disconnect, device number 65 01:19:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1313.444188][ T3364] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1313.673082][ T9666] usb 3-1: new high-speed USB device number 66 using dummy_hcd 01:19:56 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000001c0)='net/icmp6\x00') [ 1313.813565][ T3364] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1313.822945][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:19:56 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x50042, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) mkdir(0x0, 0x0) [ 1313.937829][ T3364] usb 2-1: config 0 descriptor?? [ 1313.992397][ T3364] ch341 2-1:0.0: ch341-uart converter detected [ 1314.094430][ T9666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.104859][ T9666] usb 3-1: config 0 has no interfaces? [ 1314.110641][ T9666] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1314.120222][ T9666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.395609][ T9666] usb 3-1: config 0 descriptor?? 01:19:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:57 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x8, 0x9, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x40, 0xb482, 0x7ff, 0x5, 0xcfec}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 1314.646211][ T3364] usb 2-1: failed to send control message: -71 [ 1314.653568][ T3364] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1314.822193][ T3364] usb 2-1: USB disconnect, device number 51 [ 1314.893768][ T3364] ch341 2-1:0.0: device disconnected 01:19:57 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x50042, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{}]}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) 01:19:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad60000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:19:59 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:19:59 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000340)={'trans=rdma,', {'port'}, 0x2c, {[{@common=@access_client='access=client'}]}}) 01:19:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:19:59 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000340)={'trans=rdma,', {'port'}, 0x2c, {[{@common=@access_client='access=client'}, {@sq={'sq'}}, {@common=@version_L='version=9p2000.L'}]}}) [ 1316.344874][ T9666] usb 3-1: USB disconnect, device number 66 01:19:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x8, 0x9, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x40, 0xb482, 0x7ff, 0x5, 0xcfec}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x40, 0xa5, 0x7, 0x3, 0x0, 0x0, 0xe08, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x9, 0x40}, 0x4023, 0x0, 0x0, 0x5, 0x1}, 0xffffffffffffffff, 0xf, r0, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000140)=""/149, 0x52, 0x95, 0x8}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = getgid() lchown(&(0x7f0000000140)='./file0\x00', r1, r2) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x3}, [{0x2, 0x2}, {0x2, 0x1}, {}, {}, {0x2, 0x1}, {}, {}], {0x4, 0x1}, [{0x8, 0x1}, {}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x4}}, 0x74, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x3000000, [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00}, {0x0, 0x800000}]}) creat(0x0, 0x0) 01:19:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000100)=[r1]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:19:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1316.973286][ T9666] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1317.093030][ T9667] usb 3-1: new high-speed USB device number 67 using dummy_hcd 01:20:00 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) [ 1317.433320][ T9666] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1317.443098][ T9666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.454655][ T9667] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.465232][ T9667] usb 3-1: config 0 has no interfaces? [ 1317.470909][ T9667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a 01:20:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1317.480279][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:20:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = epoll_create(0xfff) fremovexattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00') [ 1317.598808][ T9666] usb 2-1: config 0 descriptor?? [ 1317.683267][ T9666] ch341 2-1:0.0: ch341-uart converter detected [ 1317.730811][ T9667] usb 3-1: config 0 descriptor?? [ 1318.146428][T31012] BPF: (anon) type_id=2 bits_offset=0 [ 1318.152035][T31012] BPF: [ 1318.155103][T31012] BPF:Member exceeds struct_size [ 1318.160120][T31012] BPF: [ 1318.160120][T31012] [ 1318.209517][T31006] kvm: pic: non byte read [ 1318.271415][T31006] kvm: pic: non byte read [ 1318.303122][ T9666] usb 2-1: failed to send control message: -71 [ 1318.309693][ T9666] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1318.313525][T31006] kvm: pic: non byte read [ 1318.377068][T31006] kvm: pic: non byte read [ 1318.404559][ T9666] usb 2-1: USB disconnect, device number 52 [ 1318.416950][T31006] kvm: pic: non byte read [ 1318.453703][ T9666] ch341 2-1:0.0: device disconnected [ 1318.456860][T31006] kvm: pic: non byte read 01:20:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1318.503327][T31012] BPF: (anon) type_id=2 bits_offset=0 [ 1318.508806][T31012] BPF: [ 1318.511650][T31012] BPF:Member exceeds struct_size [ 1318.517543][T31012] BPF: [ 1318.517543][T31012] [ 1318.519335][T31006] kvm: pic: non byte read [ 1318.579281][T31006] kvm: pic: non byte read [ 1318.615560][T31006] kvm: pic: non byte read [ 1318.690969][T31006] kvm: pic: non byte read 01:20:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 01:20:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:20:02 executing program 3: 01:20:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1319.848782][ T9666] usb 3-1: USB disconnect, device number 67 01:20:03 executing program 3: 01:20:03 executing program 4: 01:20:03 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1320.354408][T26726] usb 2-1: new high-speed USB device number 53 using dummy_hcd 01:20:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1320.584069][T12907] usb 3-1: new high-speed USB device number 68 using dummy_hcd 01:20:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x50042, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{0x0, 0x0, 0x8, 0x0, 0x7}, {0x80000001, 0x1, 0x5, 0xc8, 0x1}, {}]}) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1320.732537][T26726] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1320.741890][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:20:03 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2007fff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000700)=ANY=[@ANYBLOB='3'], 0x1) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8482) [ 1320.773620][T26726] usb 2-1: config 0 descriptor?? [ 1320.825830][T26726] ch341 2-1:0.0: ch341-uart converter detected [ 1320.984920][T12907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.995337][T12907] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1321.004783][T12907] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1321.014195][T12907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.162425][ T29] audit: type=1804 audit(1596849603.984:137): pid=31089 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir544972963/syzkaller.tor3o8/806/bus" dev="sda1" ino=16380 res=1 [ 1321.233723][T12907] usb 3-1: config 0 descriptor?? [ 1321.339419][ T29] audit: type=1804 audit(1596849604.144:138): pid=31095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir544972963/syzkaller.tor3o8/806/bus" dev="sda1" ino=16380 res=1 [ 1321.437755][ T29] audit: type=1800 audit(1596849604.194:139): pid=31089 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16380 res=0 [ 1321.458130][ T29] audit: type=1800 audit(1596849604.194:140): pid=31093 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16380 res=0 [ 1321.478033][ T29] audit: type=1800 audit(1596849604.194:141): pid=31095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16380 res=0 [ 1321.483458][T26726] usb 2-1: failed to send control message: -71 [ 1321.504215][T26726] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1321.603604][T26726] usb 2-1: USB disconnect, device number 53 [ 1321.611016][T26726] ch341 2-1:0.0: device disconnected [ 1321.925986][ T0] NOHZ: local_softirq_pending 08 [ 1323.440880][T27791] usb 3-1: USB disconnect, device number 68 01:20:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:06 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:20:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = open(0x0, 0x40c5, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x44c) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x16, &(0x7f0000000000)) ptrace$getregset(0x4, 0x0, 0x8048000, 0x0) sched_rr_get_interval(r3, &(0x7f0000000040)) 01:20:06 executing program 4: 01:20:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1323.929918][T31131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1323.985116][T31131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1323.994569][T31131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1324.034911][T31131] device bridge_slave_0 left promiscuous mode [ 1324.043719][T31131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.181409][T31131] device bridge_slave_1 left promiscuous mode [ 1324.189568][T31131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.258434][T31131] bond0: (slave bond_slave_0): Releasing backup interface 01:20:07 executing program 4: [ 1324.322896][T12907] usb 2-1: new high-speed USB device number 54 using dummy_hcd 01:20:07 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1324.422259][T27882] usb 3-1: new high-speed USB device number 69 using dummy_hcd 01:20:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1324.695344][T12907] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1324.704909][T12907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.790605][T27882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.801070][T27882] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1324.810531][T27882] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1324.816969][T12907] usb 2-1: config 0 descriptor?? [ 1324.820206][T27882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.856798][T31131] bond0: (slave bond_slave_1): Releasing backup interface [ 1325.015637][T12907] ch341 2-1:0.0: ch341-uart converter detected [ 1325.103346][T27882] usb 3-1: config 0 descriptor?? [ 1325.139140][T12907] usb 2-1: failed to receive control message: -32 [ 1325.146118][T12907] ch341-uart: probe of ttyUSB0 failed with error -32 01:20:08 executing program 4: 01:20:08 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 01:20:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1326.137000][T31131] team0: Port device team_slave_0 removed [ 1326.479551][T31131] team0: Port device team_slave_1 removed [ 1326.489140][T31131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.497097][T31131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.786542][ T9667] usb 2-1: USB disconnect, device number 54 [ 1326.802448][T31131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.810069][T31131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.846309][ T9667] ch341 2-1:0.0: device disconnected [ 1326.986266][T31138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1327.007013][T31138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1327.016587][T31138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:20:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:10 executing program 4: 01:20:10 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 1327.240366][ T3364] usb 3-1: USB disconnect, device number 69 01:20:10 executing program 3: 01:20:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:20:10 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 01:20:10 executing program 4: [ 1327.851617][T12907] usb 3-1: new high-speed USB device number 70 using dummy_hcd 01:20:10 executing program 4: 01:20:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:11 executing program 5: [ 1328.122825][T10867] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1328.257043][T12907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.267496][T12907] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1328.277001][T12907] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1328.286347][T12907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:20:11 executing program 3: [ 1328.400629][T12907] usb 3-1: config 0 descriptor?? [ 1328.507115][T10867] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1328.516557][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.558543][T10867] usb 2-1: config 0 descriptor?? [ 1328.625705][T10867] ch341 2-1:0.0: ch341-uart converter detected [ 1328.832058][T10867] usb 2-1: failed to receive control message: -32 [ 1328.838872][T10867] ch341-uart: probe of ttyUSB0 failed with error -32 01:20:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad60000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:13 executing program 4: 01:20:13 executing program 5: 01:20:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:13 executing program 3: [ 1330.781949][T26726] usb 3-1: USB disconnect, device number 70 01:20:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1331.105646][ T3364] usb 2-1: USB disconnect, device number 55 [ 1331.114067][ T3364] ch341 2-1:0.0: device disconnected 01:20:14 executing program 4: 01:20:14 executing program 3: 01:20:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:14 executing program 5: [ 1331.581493][T27882] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1331.943984][T27882] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1331.953692][T27882] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1331.963527][T27882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.104328][T27882] usb 3-1: config 0 descriptor?? 01:20:15 executing program 5: 01:20:15 executing program 3: [ 1332.581974][T26726] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1333.012327][T26726] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1333.024134][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.063160][T26726] usb 2-1: config 0 descriptor?? [ 1333.105200][T26726] ch341 2-1:0.0: ch341-uart converter detected [ 1333.321700][T26726] usb 2-1: failed to receive control message: -32 [ 1333.328539][T26726] ch341-uart: probe of ttyUSB0 failed with error -32 01:20:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad60000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:17 executing program 4: 01:20:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:17 executing program 5: 01:20:17 executing program 3: [ 1334.513223][ T9667] usb 3-1: USB disconnect, device number 71 [ 1335.561291][ T3364] usb 3-1: new high-speed USB device number 72 using dummy_hcd 01:20:18 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 01:20:18 executing program 4: 01:20:18 executing program 3: 01:20:18 executing program 5: 01:20:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1335.606579][T12907] usb 2-1: USB disconnect, device number 56 [ 1335.615346][T12907] ch341 2-1:0.0: device disconnected 01:20:18 executing program 3: 01:20:18 executing program 4: [ 1335.921264][ T3364] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1335.930573][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1335.940310][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.106501][ T3364] usb 3-1: config 0 descriptor?? 01:20:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad60000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:21 executing program 5: 01:20:21 executing program 4: 01:20:21 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:21 executing program 3: 01:20:21 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) [ 1338.429794][T12907] usb 3-1: USB disconnect, device number 72 01:20:21 executing program 5: 01:20:21 executing program 4: 01:20:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xf401, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:20:21 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1339.244298][T26726] usb 3-1: new high-speed USB device number 73 using dummy_hcd 01:20:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) sendmsg$inet(r0, &(0x7f0000002c40)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}], 0x30}, 0x0) 01:20:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"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"}) [ 1339.621104][T26726] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1339.630869][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1339.643521][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.856983][T26726] usb 3-1: config 0 descriptor?? [ 1340.119602][T31360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1709507596 (109408486144 ns) > initial count (27961052416 ns). Using initial count to start timer. [ 1342.091721][ T3364] usb 3-1: USB disconnect, device number 73 01:20:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) utime(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 01:20:24 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 01:20:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sched_setaffinity(0x0, 0x0, 0x0) 01:20:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:20:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x2000000088) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000000), 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 01:20:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x500, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) 01:20:25 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1343.030372][ T3364] usb 3-1: new high-speed USB device number 74 using dummy_hcd 01:20:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:20:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}, 0x10) [ 1343.421711][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1343.431215][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.532447][ T3364] usb 3-1: config 0 descriptor?? [ 1343.577816][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1345.140138][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1345.146570][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.153282][ T3364] gspca_stk1135: Sensor write failed [ 1345.160316][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.166711][ T3364] gspca_stk1135: Sensor write failed [ 1345.172320][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.178716][ T3364] gspca_stk1135: Sensor read failed [ 1345.184335][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.192948][ T3364] gspca_stk1135: Sensor read failed [ 1345.198225][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1345.205463][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.213510][ T3364] gspca_stk1135: Sensor read failed [ 1345.219259][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.225809][ T3364] gspca_stk1135: Sensor read failed [ 1345.231296][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.237696][ T3364] gspca_stk1135: Sensor write failed [ 1345.243347][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1345.250210][ T3364] gspca_stk1135: Sensor write failed [ 1345.255898][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1345.341334][ T3364] usb 3-1: USB disconnect, device number 74 01:20:28 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc018ae85, &(0x7f0000000180)={"d3c40df9e250ae5dd536c9389d4a71c6e698d5918fccb5214d0b182d8429c59d449894e7dfb83c7dd2396a3e3f69b1387361a82e1e06de9b6af5abf800b3d0ed6158cf956f2c2a56c34ed79201865f02369c065cd15ee97be87d5b7720c2b1e8bdaaf544ec58e6a494ef633e4b942f6799d4217df9495f34be810d4e498b31589e79a96b9032cced18ec8116533bd087e1e92dafbba4accc1ff7d773264c255f33defb1146e4e2d06228a1bc5d93aa30eae1f1409aec76895a1ddd00ddb595910f780c9fd7336b23d2996b34fffbbec9474abd19f857b5f04eda2d19b1d7db494037aebed2de1f8828d987f122706897661cb2c1dced0334f4e88562327473c570f7232623452eeda87e0139263a275562db1a435b145deca09c3ab915367de85ec0c01ca5f69ef383183de36cf6e00075a23aa9b12d365a166ddce0a3d2b394fc4cd634cf68152941a466d66bc835ccff90947c969287dd1d9fa5de75c48c1718e24ad85c5286b2c39e778675312431a8cce50a5627982c66f9c35afbab5a524bd6dcd9195edf6f9463caa0dea38cddf8a9a2f77a3fe7c12458f9f43ab92cfee75215aba9817337e4dd3a52c694d97b9eb88ce74aac4d280d58227da3fdf88761ab8e884050703991f5dbb10e1d4215f4fe1ae291bb46d4e528920b1cb7415d11117f316caa33711cc55b3d911623ba81c98f45971cb0539d6f96849749113490e35578bdf9c652204730cd690985a180cfc557e477ea637ea284f25aafd3bcfd1d9dc9e2e5596000b6835a423a1f36ef16327d053f6d39b96655cf8e234d2427ae1ad607c89f54f893d0b27cce3d3afecb38126e1ad37e1bbb66abf4ad1e08900d8a77cc44f05d13e7d74228e78a73afee74d9a41173d4bddccbfcb03acf69c93cb4c4c392a46a66d03702c4ade3ceb4f305fadff8fa49643f5ccb54af91ee35c73f1224a595ab10fceafb7b9abc639aeeaee70992fd5cb540545a15787d962593fd783f3051e21771966d12d265925b822887d29f842ebb9f44253d3f76e18f9d6aab145da85fc0663fe547ed3e23463ec13bd619775368f338818ab77657987cdbd5297aec137b3e2bf417427afb158124f06534832070fd470e83fe9a941a8d6e9c8b509bbcfcead683ee18791a06bb36962198d6a83b2ed034321d835f6d9ed5045c24c7951241577840f6bab341da70f7c40afc943c7ef60227f093ad3121f15b579c087cfc1cf58ce51c0380e4ab50e58b2a3190f94da0ec78a5cfe8346f0a1ad04204f6ecfbc038f2903b440c04e565f1f9edbbd843b0dbd57741e01a8b28d563f5213ceecb16c793897b917fca44d6a4ac82b34ab5da60bf07b1d446e4c60a399044c1fa2cc6c98c39aa25630a9d53a0d75db7dbdbcc91186c25b069385b42e6b10f1992854022c9ca1c6e8a3295e4eafc1ecdb7b95a799f73eb25"}) 01:20:28 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x0, 0x0) 01:20:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}, 0x10) 01:20:28 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:20:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents64(r0, 0x0, 0x0) 01:20:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd93}]}, 0x2c}, 0x1, 0x6c}, 0x0) 01:20:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1346.574785][T10867] usb 3-1: new high-speed USB device number 75 using dummy_hcd 01:20:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents64(r0, 0x0, 0x0) 01:20:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1346.951044][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1346.964638][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.086648][T10867] usb 3-1: config 0 descriptor?? [ 1347.150710][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1348.669864][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1348.676215][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.683406][T10867] gspca_stk1135: Sensor write failed [ 1348.688890][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.695508][T10867] gspca_stk1135: Sensor write failed [ 1348.701048][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.707438][T10867] gspca_stk1135: Sensor read failed [ 1348.712944][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.719347][T10867] gspca_stk1135: Sensor read failed [ 1348.724737][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1348.731600][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.738001][T10867] gspca_stk1135: Sensor read failed [ 1348.743740][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.750297][T10867] gspca_stk1135: Sensor read failed [ 1348.756311][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.762893][T10867] gspca_stk1135: Sensor write failed [ 1348.768493][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.775168][T10867] gspca_stk1135: Sensor write failed [ 1348.780878][T10867] stk1135: probe of 3-1:0.0 failed with error -71 [ 1348.825217][T10867] usb 3-1: USB disconnect, device number 75 01:20:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x31]}}}, 0xa}]}) 01:20:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents64(r0, 0x0, 0x0) 01:20:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1349.798396][T31490] tmpfs: Bad value for 'mpol' 01:20:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1349.989915][ T3364] usb 2-1: new high-speed USB device number 57 using dummy_hcd 01:20:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r1, 0x264}, {r0}], 0x2, 0x0) 01:20:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getpeername$ax25(r1, 0x0, 0x0) [ 1350.259858][ T3364] usb 2-1: device descriptor read/64, error 18 [ 1350.380578][T26726] usb 3-1: new high-speed USB device number 76 using dummy_hcd 01:20:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1350.650655][ T3364] usb 2-1: device descriptor read/64, error 18 [ 1350.781165][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1350.790749][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:20:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) [ 1350.894462][T26726] usb 3-1: config 0 descriptor?? [ 1350.919771][ T3364] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1350.947311][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1351.192761][ T3364] usb 2-1: device descriptor read/64, error 18 [ 1351.593501][ T3364] usb 2-1: device descriptor read/64, error 18 [ 1351.719914][ T3364] usb usb2-port1: attempt power cycle [ 1352.431425][ T3364] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1352.457347][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1352.464004][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.471024][T26726] gspca_stk1135: Sensor write failed [ 1352.476503][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.483506][T26726] gspca_stk1135: Sensor write failed [ 1352.488980][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.496090][T26726] gspca_stk1135: Sensor read failed [ 1352.501643][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.508143][T26726] gspca_stk1135: Sensor read failed [ 1352.513982][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1352.520900][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.527450][T26726] gspca_stk1135: Sensor read failed [ 1352.532913][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.540141][T26726] gspca_stk1135: Sensor read failed [ 1352.546503][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.553251][T26726] gspca_stk1135: Sensor write failed [ 1352.559209][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1352.565921][T26726] gspca_stk1135: Sensor write failed [ 1352.571849][T26726] stk1135: probe of 3-1:0.0 failed with error -71 [ 1352.620429][ T3364] usb 2-1: device descriptor read/8, error -61 [ 1352.970258][ T3364] usb 2-1: device descriptor read/8, error -71 01:20:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r1, 0x264}, {r0}], 0x2, 0x0) 01:20:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000340)=[@flags={0x3, 0x244252}], 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:20:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1353.594257][T26726] usb 3-1: USB disconnect, device number 76 [ 1353.769459][ T3364] usb 2-1: new high-speed USB device number 60 using dummy_hcd 01:20:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r1, 0x264}, {r0}], 0x2, 0x0) [ 1353.980669][ T3364] usb 2-1: device descriptor read/8, error -61 01:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:37 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0x8004ae98) [ 1354.251137][ T3364] usb 2-1: device descriptor read/8, error -61 [ 1354.259324][ T3216] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1354.369987][ T3364] usb usb2-port1: unable to enumerate USB device 01:20:37 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) [ 1354.631057][ T3216] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1354.640551][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.704738][ T3216] usb 3-1: config 0 descriptor?? [ 1354.826996][ T3216] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:20:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r1, 0x264}, {r0}], 0x2, 0x0) [ 1356.329301][ T3216] gspca_stk1135: reg_w 0xf err -71 [ 1356.336069][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.344057][ T3216] gspca_stk1135: Sensor write failed [ 1356.350020][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.356409][ T3216] gspca_stk1135: Sensor write failed [ 1356.362208][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.370504][ T3216] gspca_stk1135: Sensor read failed [ 1356.376340][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.382980][ T3216] gspca_stk1135: Sensor read failed [ 1356.388253][ T3216] gspca_stk1135: Detected sensor type unknown (0x0) [ 1356.395118][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.401606][ T3216] gspca_stk1135: Sensor read failed [ 1356.415361][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.421891][ T3216] gspca_stk1135: Sensor read failed [ 1356.427948][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.437398][ T3216] gspca_stk1135: Sensor write failed [ 1356.442984][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.449540][ T3216] gspca_stk1135: Sensor write failed [ 1356.456808][ T3216] stk1135: probe of 3-1:0.0 failed with error -71 01:20:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0x41a0ae8d) 01:20:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {r0}], 0x2, 0x0) 01:20:39 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:39 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1357.017896][ T3216] usb 3-1: USB disconnect, device number 77 01:20:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1357.329084][ T9667] usb 2-1: new high-speed USB device number 61 using dummy_hcd 01:20:40 executing program 5: poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {}], 0x2, 0x0) 01:20:40 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) [ 1357.629167][ T9667] usb 2-1: device descriptor read/64, error 18 [ 1357.778910][ T3364] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1358.019477][ T9667] usb 2-1: device descriptor read/64, error 18 01:20:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) 01:20:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1358.140982][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1358.150360][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.319232][ T9667] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1358.345919][ T3364] usb 3-1: config 0 descriptor?? [ 1358.429967][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1358.599520][ T9667] usb 2-1: device descriptor read/64, error 18 [ 1358.990280][ T9667] usb 2-1: device descriptor read/64, error 18 [ 1359.113101][ T9667] usb usb2-port1: attempt power cycle [ 1359.828949][ T9667] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1359.930338][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1359.936788][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1359.943552][ T3364] gspca_stk1135: Sensor write failed [ 1359.949850][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1359.956316][ T3364] gspca_stk1135: Sensor write failed [ 1359.961982][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1359.970753][ T3364] gspca_stk1135: Sensor read failed [ 1359.978130][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1359.984870][ T3364] gspca_stk1135: Sensor read failed [ 1359.991175][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1359.998986][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.006164][ T3364] gspca_stk1135: Sensor read failed [ 1360.013517][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.021573][ T3364] gspca_stk1135: Sensor read failed [ 1360.026953][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.033736][ T3364] gspca_stk1135: Sensor write failed [ 1360.039637][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.046778][ T3364] gspca_stk1135: Sensor write failed [ 1360.052568][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1360.289356][ T9667] usb 2-1: device descriptor read/8, error -71 [ 1360.434284][ T3364] usb 3-1: USB disconnect, device number 78 01:20:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:43 executing program 5: poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {}], 0x2, 0x0) 01:20:43 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 01:20:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 01:20:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1360.499880][ T9667] usb 2-1: device descriptor read/8, error -71 01:20:43 executing program 5: poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {}], 0x2, 0x0) 01:20:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 01:20:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 1361.078762][ T9667] usb 2-1: new high-speed USB device number 64 using dummy_hcd 01:20:43 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) [ 1361.189888][T26726] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1361.270515][ T9667] usb 2-1: device descriptor read/8, error -61 01:20:44 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {r0}], 0x2, 0x0) [ 1361.542836][ T9667] usb 2-1: device descriptor read/8, error -61 [ 1361.601113][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1361.613442][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:20:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 1361.651727][T26726] usb 3-1: config 0 descriptor?? [ 1361.668904][ T9667] usb usb2-port1: unable to enumerate USB device [ 1361.709180][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1363.238623][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1363.245921][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.253907][T26726] gspca_stk1135: Sensor write failed [ 1363.259914][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.266824][T26726] gspca_stk1135: Sensor write failed [ 1363.273228][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.280787][T26726] gspca_stk1135: Sensor read failed [ 1363.287382][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.294204][T26726] gspca_stk1135: Sensor read failed [ 1363.301316][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1363.309051][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.316554][T26726] gspca_stk1135: Sensor read failed [ 1363.322423][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.328907][T26726] gspca_stk1135: Sensor read failed [ 1363.335586][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.343144][T26726] gspca_stk1135: Sensor write failed [ 1363.348802][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1363.355280][T26726] gspca_stk1135: Sensor write failed [ 1363.361035][T26726] stk1135: probe of 3-1:0.0 failed with error -71 01:20:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:46 executing program 3: ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 01:20:46 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:46 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {r0}], 0x2, 0x0) 01:20:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)) 01:20:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1364.337272][T26726] usb 3-1: USB disconnect, device number 79 01:20:47 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {r0}], 0x2, 0x0) 01:20:47 executing program 3: ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 01:20:47 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)) [ 1364.908252][T12907] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1365.025594][T26726] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1365.208494][T12907] usb 2-1: device descriptor read/64, error 18 01:20:48 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) [ 1365.431172][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1365.444019][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:20:48 executing program 3: ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) [ 1365.568822][T26726] usb 3-1: config 0 descriptor?? [ 1365.630090][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1365.639981][T12907] usb 2-1: device descriptor read/64, error 18 [ 1365.911617][T12907] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1366.208791][T12907] usb 2-1: device descriptor read/64, error 18 [ 1366.598290][T12907] usb 2-1: device descriptor read/64, error 18 [ 1366.718439][T12907] usb usb2-port1: attempt power cycle [ 1367.198509][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1367.206345][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.214969][T26726] gspca_stk1135: Sensor write failed [ 1367.221368][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.227911][T26726] gspca_stk1135: Sensor write failed [ 1367.233479][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.240119][T26726] gspca_stk1135: Sensor read failed [ 1367.245806][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.252430][T26726] gspca_stk1135: Sensor read failed [ 1367.257912][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1367.267314][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.274083][T26726] gspca_stk1135: Sensor read failed [ 1367.281034][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.287715][T26726] gspca_stk1135: Sensor read failed [ 1367.293183][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.299753][T26726] gspca_stk1135: Sensor write failed [ 1367.305579][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.312067][T26726] gspca_stk1135: Sensor write failed [ 1367.318657][T26726] stk1135: probe of 3-1:0.0 failed with error -71 [ 1367.468395][T12907] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1367.641522][T12907] usb 2-1: device descriptor read/8, error -71 [ 1367.859052][T12907] usb 2-1: device descriptor read/8, error -71 01:20:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:50 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x1f00, 0x0, 0x0}) 01:20:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)) 01:20:50 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) 01:20:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 01:20:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1367.958388][T26726] usb 3-1: USB disconnect, device number 80 01:20:51 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) 01:20:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) 01:20:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 01:20:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) [ 1368.609626][T26726] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1368.679266][T12907] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1368.898362][T12907] usb 2-1: device descriptor read/8, error -61 01:20:51 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}], 0x1, 0x0) [ 1369.080862][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1369.090204][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:20:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1369.189801][T12907] usb 2-1: device descriptor read/8, error -61 [ 1369.199113][T26726] usb 3-1: config 0 descriptor?? [ 1369.250228][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1369.309630][T12907] usb usb2-port1: unable to enumerate USB device [ 1370.739612][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1370.746148][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.753711][T26726] gspca_stk1135: Sensor write failed [ 1370.762249][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.769708][T26726] gspca_stk1135: Sensor write failed [ 1370.775205][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.781795][T26726] gspca_stk1135: Sensor read failed [ 1370.789205][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.796917][T26726] gspca_stk1135: Sensor read failed [ 1370.804902][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1370.813024][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.819668][T26726] gspca_stk1135: Sensor read failed [ 1370.825131][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.833180][T26726] gspca_stk1135: Sensor read failed [ 1370.839159][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.845985][T26726] gspca_stk1135: Sensor write failed [ 1370.853442][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1370.859895][T26726] gspca_stk1135: Sensor write failed [ 1370.865522][T26726] stk1135: probe of 3-1:0.0 failed with error -71 01:20:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x5000) 01:20:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 01:20:54 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 01:20:54 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}], 0x1, 0x0) 01:20:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1371.668312][T26726] usb 3-1: USB disconnect, device number 81 01:20:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = dup2(r0, r1) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xd10a) 01:20:54 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 01:20:55 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}], 0x1, 0x0) 01:20:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) [ 1372.261711][ T3364] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1372.297932][T27791] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1372.559599][ T3364] usb 2-1: no configurations [ 1372.564958][ T3364] usb 2-1: can't read configurations, error -22 [ 1372.698708][T27791] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1372.712183][T27791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.797889][ T3364] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1372.869091][T27791] usb 3-1: config 0 descriptor?? [ 1372.915468][T27791] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:20:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0xe403, 0x98, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 01:20:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0}) [ 1373.079879][ T3364] usb 2-1: no configurations [ 1373.084861][ T3364] usb 2-1: can't read configurations, error -22 [ 1373.157635][ T3364] usb usb2-port1: attempt power cycle [ 1373.910223][ T3364] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1374.049068][ T3364] usb 2-1: no configurations [ 1374.054387][ T3364] usb 2-1: can't read configurations, error -22 [ 1374.267801][ T3364] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1374.399039][ T3364] usb 2-1: no configurations [ 1374.406125][ T3364] usb 2-1: can't read configurations, error -22 [ 1374.498676][T27791] gspca_stk1135: reg_w 0xf err -71 [ 1374.505663][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.512740][T27791] gspca_stk1135: Sensor write failed [ 1374.518781][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.525897][T27791] gspca_stk1135: Sensor write failed [ 1374.532111][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.538730][T27791] gspca_stk1135: Sensor read failed [ 1374.544284][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.551035][T27791] gspca_stk1135: Sensor read failed [ 1374.557294][T27791] gspca_stk1135: Detected sensor type unknown (0x0) [ 1374.564183][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.571678][T27791] gspca_stk1135: Sensor read failed [ 1374.577267][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.585403][T27791] gspca_stk1135: Sensor read failed [ 1374.591250][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.597794][T27791] gspca_stk1135: Sensor write failed [ 1374.603246][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1374.609848][T27791] gspca_stk1135: Sensor write failed [ 1374.615503][T27791] stk1135: probe of 3-1:0.0 failed with error -71 [ 1374.643818][ T3364] usb usb2-port1: unable to enumerate USB device [ 1374.861166][T27791] usb 3-1: USB disconnect, device number 82 01:20:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:20:58 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {}], 0x2, 0x0) 01:20:58 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 01:20:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_procfs(0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getgid() ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f00000004c0)) 01:20:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0}) 01:20:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:20:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0}) [ 1375.727357][T12907] usb 2-1: new high-speed USB device number 73 using dummy_hcd 01:20:58 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {}], 0x2, 0x0) 01:20:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) [ 1375.887381][ T3364] usb 3-1: new high-speed USB device number 83 using dummy_hcd 01:20:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2203, &(0x7f0000000040)) [ 1376.029103][T12907] usb 2-1: no configurations [ 1376.033915][T12907] usb 2-1: can't read configurations, error -22 [ 1376.249237][ T3364] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1376.260202][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.268123][T12907] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1376.365721][ T3364] usb 3-1: config 0 descriptor?? 01:20:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000), 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080), 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1376.474455][ T3364] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:20:59 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x264}, {}], 0x2, 0x0) [ 1376.668707][T12907] usb 2-1: no configurations [ 1376.673516][T12907] usb 2-1: can't read configurations, error -22 [ 1376.702447][T12907] usb usb2-port1: attempt power cycle [ 1377.447690][T12907] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1377.587544][T12907] usb 2-1: no configurations [ 1377.592357][T12907] usb 2-1: can't read configurations, error -22 [ 1377.757351][T12907] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1377.909475][T12907] usb 2-1: no configurations [ 1377.914295][T12907] usb 2-1: can't read configurations, error -22 [ 1377.947768][ T3364] gspca_stk1135: reg_w 0xf err -71 [ 1377.954341][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.960880][T12907] usb usb2-port1: unable to enumerate USB device [ 1377.967630][ T3364] gspca_stk1135: Sensor write failed [ 1377.973074][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.979621][ T3364] gspca_stk1135: Sensor write failed [ 1377.985202][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.991852][ T3364] gspca_stk1135: Sensor read failed [ 1377.997369][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1378.003748][ T3364] gspca_stk1135: Sensor read failed [ 1378.009178][ T3364] gspca_stk1135: Detected sensor type unknown (0x0) [ 1378.015933][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1378.022485][ T3364] gspca_stk1135: Sensor read failed [ 1378.027986][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1378.034520][ T3364] gspca_stk1135: Sensor read failed [ 1378.040040][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1378.046442][ T3364] gspca_stk1135: Sensor write failed [ 1378.052038][ T3364] gspca_stk1135: serial bus timeout: status=0x00 [ 1378.058526][ T3364] gspca_stk1135: Sensor write failed [ 1378.064180][ T3364] stk1135: probe of 3-1:0.0 failed with error -71 [ 1378.132968][ T3364] usb 3-1: USB disconnect, device number 83 01:21:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:21:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 01:21:01 executing program 4: 01:21:01 executing program 0: 01:21:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 01:21:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:02 executing program 4: 01:21:02 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x0) 01:21:02 executing program 0: 01:21:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) [ 1379.459490][T12907] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1379.617451][T27791] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1379.758354][T12907] usb 2-1: no configurations [ 1379.763177][T12907] usb 2-1: can't read configurations, error -22 01:21:02 executing program 4: [ 1379.978399][T27791] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1379.987951][T27791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.007257][T12907] usb 2-1: new high-speed USB device number 78 using dummy_hcd 01:21:02 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x0) [ 1380.109198][T27791] usb 3-1: config 0 descriptor?? [ 1380.193813][T27791] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1380.302317][T12907] usb 2-1: no configurations [ 1380.307488][T12907] usb 2-1: can't read configurations, error -22 [ 1380.314608][T12907] usb usb2-port1: attempt power cycle [ 1381.077009][T12907] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1381.219924][T12907] usb 2-1: no configurations [ 1381.224874][T12907] usb 2-1: can't read configurations, error -22 [ 1381.397232][T12907] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1381.599476][T12907] usb 2-1: no configurations [ 1381.604296][T12907] usb 2-1: can't read configurations, error -22 [ 1381.667276][T12907] usb usb2-port1: unable to enumerate USB device [ 1381.757008][T27791] gspca_stk1135: reg_w 0xf err -71 [ 1381.763352][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.770564][T27791] gspca_stk1135: Sensor write failed [ 1381.776039][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.782654][T27791] gspca_stk1135: Sensor write failed [ 1381.788225][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.794638][T27791] gspca_stk1135: Sensor read failed [ 1381.800166][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.806653][T27791] gspca_stk1135: Sensor read failed [ 1381.811950][T27791] gspca_stk1135: Detected sensor type unknown (0x0) [ 1381.818830][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.825226][T27791] gspca_stk1135: Sensor read failed [ 1381.830705][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.837293][T27791] gspca_stk1135: Sensor read failed [ 1381.842770][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.849280][T27791] gspca_stk1135: Sensor write failed [ 1381.854880][T27791] gspca_stk1135: serial bus timeout: status=0x00 [ 1381.861412][T27791] gspca_stk1135: Sensor write failed [ 1381.867113][T27791] stk1135: probe of 3-1:0.0 failed with error -71 [ 1381.893560][T27791] usb 3-1: USB disconnect, device number 84 01:21:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:21:05 executing program 3: 01:21:05 executing program 0: 01:21:05 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x0) 01:21:05 executing program 4: 01:21:05 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc0000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:05 executing program 3: 01:21:05 executing program 5: 01:21:06 executing program 0: 01:21:06 executing program 4: [ 1383.363336][T12907] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1383.509051][T26726] usb 3-1: new high-speed USB device number 85 using dummy_hcd 01:21:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x7, &(0x7f0000000e40)="91000087d9c09a"}) 01:21:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @const, @array, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x9, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}], 'u'}]}, {0x0, [0x0]}}, 0x0, 0x147}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1383.860623][T12907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.871013][T12907] usb 2-1: config 0 has no interfaces? [ 1383.877060][T12907] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1383.886293][T12907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.914628][T12907] usb 2-1: config 0 descriptor?? [ 1383.957309][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1383.966671][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.007939][T26726] usb 3-1: config 0 descriptor?? [ 1384.073374][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1385.567851][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1385.574204][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.581307][T26726] gspca_stk1135: Sensor write failed [ 1385.586848][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.593233][T26726] gspca_stk1135: Sensor write failed [ 1385.598790][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.605186][T26726] gspca_stk1135: Sensor read failed [ 1385.610635][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.617126][T26726] gspca_stk1135: Sensor read failed [ 1385.622403][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1385.629259][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.635648][T26726] gspca_stk1135: Sensor read failed [ 1385.641104][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.647581][T26726] gspca_stk1135: Sensor read failed [ 1385.652949][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.659415][T26726] gspca_stk1135: Sensor write failed [ 1385.664967][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1385.671424][T26726] gspca_stk1135: Sensor write failed [ 1385.677136][T26726] stk1135: probe of 3-1:0.0 failed with error -71 01:21:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:21:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x20031ec0}], 0x1, 0x0, 0x0) 01:21:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts_2292={{0x18}}, @hopopts={{0x18}}], 0x30}}], 0x1, 0x0) 01:21:09 executing program 3: 01:21:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc0000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1386.708795][T12907] usb 2-1: USB disconnect, device number 81 [ 1386.715689][T26726] usb 3-1: USB disconnect, device number 85 01:21:09 executing program 4: 01:21:09 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\a\xe86') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x148242, 0x0) io_setup(0x8, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000380)='m', 0x1}]) [ 1387.326395][T26726] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1387.334463][T12907] usb 2-1: new high-speed USB device number 82 using dummy_hcd 01:21:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x131}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:21:10 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906038108deffec87d64ae8fe000e0105000100060000fd100008800c0007800800094077ca99830900020073797a3000000000080009"], 0x1}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 1387.848007][T12907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.858561][T12907] usb 2-1: config 0 has no interfaces? [ 1387.864285][T12907] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1387.873674][T12907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.883658][T26726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1387.893063][T26726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:21:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) [ 1388.018824][T26726] usb 3-1: config 0 descriptor?? [ 1388.068373][T26726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1388.150530][T12907] usb 2-1: config 0 descriptor?? 01:21:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @const, @array, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}]}, {0x0, [0x5f]}}, 0x0, 0xdb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1388.374557][T31996] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 01:21:11 executing program 0: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c74657200000000000061da9af000000000000000150d000000000000000e000000040000009002000000000000c800000060010000c8000000c8000000e8010000f8010000f8010000f8010000f801000504000000118000000000ffff00000000000075e500f4ffffff00000000000000000000000000000000003e7ef2a0a2080000ff000000000000000000000020000027000000849db535fd3542290000000000000000000000000000fff700000000440000a000c800f8ff7f00000000fdff000000000000000000000030006164647274797065000007000000d2590000000000000000000000000000000040c601000f6c0000000000000000280052454a4543540000800000000000020000000000000000000000000000000000000068a30000e09ebca7f181683a9c000400040000006772653000000007000000ddffffff000000fffffffffffffff70093ae4afb000000000000000000000100000f000b0b00000006000000ef0000b8942a9082d4cf0000001d00001370009800ef00000000000000000067c2137b650096ae0000280052454a45435400001bead0de0000000000000000000000000000003f000000000b000000000000000000000000000000020000000000000000000000008000000000000000000000000000000000000a02000000000000000000000000000000000002000000008100000000000000000000000000000000000000b9bf007000980000000000000000000000000002000000800000002800534554000000000000000000000000030000020000000000000000000001000004000000050f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00007000980000020000000000000000000000000000000100002800000002000000000000000000000097a3eb8d13ab7daa1c00000000000000feffffff"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 1389.596433][T26726] gspca_stk1135: reg_w 0xf err -71 [ 1389.602903][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.609859][T26726] gspca_stk1135: Sensor write failed [ 1389.615351][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.621859][T26726] gspca_stk1135: Sensor write failed [ 1389.627437][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.633821][T26726] gspca_stk1135: Sensor read failed [ 1389.639409][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.645909][T26726] gspca_stk1135: Sensor read failed [ 1389.651190][T26726] gspca_stk1135: Detected sensor type unknown (0x0) [ 1389.658197][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.664594][T26726] gspca_stk1135: Sensor read failed [ 1389.670124][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.676763][T26726] gspca_stk1135: Sensor read failed [ 1389.682277][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.688824][T26726] gspca_stk1135: Sensor write failed [ 1389.694310][T26726] gspca_stk1135: serial bus timeout: status=0x00 [ 1389.700854][T26726] gspca_stk1135: Sensor write failed [ 1389.706567][T26726] stk1135: probe of 3-1:0.0 failed with error -71 [ 1389.912814][T26726] usb 3-1: USB disconnect, device number 86 [ 1389.939233][T10867] usb 2-1: USB disconnect, device number 82 01:21:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:21:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76305fe1fcf8c0813d97f42f19414eaedd9d2ae5a27c579b20b4796bf296a9c169caa8e7414097844aa0933a898858a6a8ba7f1f6f911b1e0debe2fd4c2be9d187fad0bc1bbedc3a19f51dcd4415a08fd2df4dba41b9cce6e1e903908de11c0c9a6ebd3b117d35c54d3ab735d6e975ecce7aa94bcb571963", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:21:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76305fe1fcf8c0813d97f42f19414eaedd9d2ae5a27c579b20b4796bf296a9c169caa8e7414097844aa0933a898858a6a8ba7f1f6f911b1e0debe2fd4c2be9d187fad0bc1bbedc3a19f51dcd4415a08fd2df4dba41b9cce6e1e903908de11c0c9a6ebd3b117d35c54d3ab735d6e975ecce7aa94bcb571963c26282f06d54e00892a91dff033b553ca46eb7d52ca9846bd645e3634498d62efcc72f81c3157eab86e791a701fd0952ad13bcdea31a6b6cbffb87f07607ab5736c6921f5c0027f12e2e638b32b75b91ea8650c18b265605b219b790c5a2d0c15f", 0x146}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:21:13 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000280)='-', 0x1}], 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80]}, 0x8, 0x400) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x19, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=0x200, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x1, 0x3}, 0x0, 0x0, &(0x7f0000000340)={0x4, 0xc, 0xfff, 0xfb}, &(0x7f0000000300)=0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=0x100000000}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000880)='\x00\xb0c\x97\x9e\x84\xa54O\xbc&\x14|\xcb\xae\xe4\xc8/\xabH\n\x86h\x13l\x9e\xbe', r5}, 0x30) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd27efed870204b0c300006000018008000b00736970000800090050000000060004004e21000008000b0073697000080008002c000000060002000800000014000300fe8000000000000000000000000000bb08000800ffffffff08000b007369700008000600736564000800060002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, r3, 0x0, 0x18, &(0x7f00000001c0)='$em0,nodevppp1@security\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)='NLBL_CIPSOv4\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00', r5}, 0x30) r6 = syz_open_procfs(0x0, &(0x7f0000001100)='net/nf_conntrack\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) 01:21:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc0000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:13 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1390.729492][ T8695] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1390.890782][T10867] usb 3-1: new high-speed USB device number 87 using dummy_hcd 01:21:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x132}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1391.097632][ T8695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.108133][ T8695] usb 2-1: config 0 has no interfaces? [ 1391.113830][ T8695] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1391.123341][ T8695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.212393][T32042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1391.220533][T32042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1391.257084][ T8695] usb 2-1: config 0 descriptor?? [ 1391.264188][T32042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1391.291917][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1391.301369][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.364140][T10867] usb 3-1: config 0 descriptor?? [ 1391.417673][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:21:14 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000140)="f3", 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x2000005) 01:21:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706f1640304000000a9822c1680a22e0c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x207ffc, 0x0) [ 1392.094100][T32063] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1392.102765][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1392.114357][T32063] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1392.955964][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1392.962651][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1392.969244][T10867] gspca_stk1135: Sensor write failed [ 1392.974698][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1392.981369][T10867] gspca_stk1135: Sensor write failed [ 1392.986929][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1392.993316][T10867] gspca_stk1135: Sensor read failed [ 1392.998810][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1393.005358][T10867] gspca_stk1135: Sensor read failed [ 1393.010763][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1393.017649][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1393.024050][T10867] gspca_stk1135: Sensor read failed [ 1393.029535][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1393.036034][T10867] gspca_stk1135: Sensor read failed [ 1393.041588][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1393.048189][T10867] gspca_stk1135: Sensor write failed [ 1393.053675][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1393.060146][T10867] gspca_stk1135: Sensor write failed [ 1393.065957][T10867] stk1135: probe of 3-1:0.0 failed with error -71 01:21:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:21:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 1393.792089][T27791] usb 2-1: USB disconnect, device number 83 01:21:16 executing program 4: r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000000)='J', 0x2000, 0x0, 0x0) 01:21:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:21:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1394.108404][T10867] usb 3-1: USB disconnect, device number 87 01:21:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000070601010000000000000000000000000500010006"], 0x24}}, 0x0) 01:21:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) dup3(r2, r3, 0x0) [ 1394.556865][ T3216] usb 2-1: new high-speed USB device number 84 using dummy_hcd 01:21:17 executing program 5: [ 1394.686119][T10867] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1394.855840][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1394.866604][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1394.935198][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1394.944775][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1394.987635][ T3216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.998476][ T3216] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1395.008527][ T3216] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1395.017856][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.117607][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1395.127090][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:21:18 executing program 3: [ 1395.196769][T10867] usb 3-1: config 0 descriptor?? [ 1395.246248][ T3216] usb 2-1: config 0 descriptor?? 01:21:18 executing program 5: [ 1395.286500][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:21:18 executing program 4: 01:21:18 executing program 3: [ 1396.752229][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1396.759119][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.765754][T10867] gspca_stk1135: Sensor write failed [ 1396.771216][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.777694][T10867] gspca_stk1135: Sensor write failed [ 1396.783152][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.789641][T10867] gspca_stk1135: Sensor read failed [ 1396.795028][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.802126][T10867] gspca_stk1135: Sensor read failed [ 1396.807492][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1396.814250][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.820790][T10867] gspca_stk1135: Sensor read failed [ 1396.826258][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.832647][T10867] gspca_stk1135: Sensor read failed [ 1396.838132][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.844519][T10867] gspca_stk1135: Sensor write failed [ 1396.850098][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1396.856566][T10867] gspca_stk1135: Sensor write failed [ 1396.862189][T10867] stk1135: probe of 3-1:0.0 failed with error -71 01:21:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:21:20 executing program 4: 01:21:20 executing program 5: 01:21:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1397.592079][ T8695] usb 2-1: USB disconnect, device number 84 01:21:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:20 executing program 3: 01:21:20 executing program 4: 01:21:20 executing program 5: [ 1398.095929][T10867] usb 3-1: USB disconnect, device number 88 01:21:21 executing program 3: 01:21:21 executing program 5: 01:21:21 executing program 4: [ 1398.555597][T12907] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1398.666225][T10867] usb 3-1: new high-speed USB device number 89 using dummy_hcd 01:21:21 executing program 3: [ 1398.936844][T12907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.947479][T12907] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1398.958525][T12907] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1398.967870][T12907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.067696][T10867] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1399.077191][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.145967][T10867] usb 3-1: config 0 descriptor?? [ 1399.185721][T12907] usb 2-1: config 0 descriptor?? [ 1399.202950][T10867] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1400.745821][T10867] gspca_stk1135: reg_w 0xf err -71 [ 1400.752162][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.759264][T10867] gspca_stk1135: Sensor write failed [ 1400.764747][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.771226][T10867] gspca_stk1135: Sensor write failed [ 1400.776778][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.783165][T10867] gspca_stk1135: Sensor read failed [ 1400.788634][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.795259][T10867] gspca_stk1135: Sensor read failed [ 1400.800526][T10867] gspca_stk1135: Detected sensor type unknown (0x0) [ 1400.807379][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.813880][T10867] gspca_stk1135: Sensor read failed [ 1400.819365][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.825852][T10867] gspca_stk1135: Sensor read failed [ 1400.831235][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.837706][T10867] gspca_stk1135: Sensor write failed [ 1400.843169][T10867] gspca_stk1135: serial bus timeout: status=0x00 [ 1400.849655][T10867] gspca_stk1135: Sensor write failed [ 1400.855725][T10867] stk1135: probe of 3-1:0.0 failed with error -71 01:21:23 executing program 0: 01:21:23 executing program 5: 01:21:23 executing program 4: [ 1401.157631][T10867] usb 3-1: USB disconnect, device number 89 01:21:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:21:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:24 executing program 3: [ 1401.505402][ T3216] usb 2-1: USB disconnect, device number 85 01:21:24 executing program 4: socket$inet6(0x1c, 0x0, 0x0) socket$inet6_sctp(0x1c, 0x0, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000180), &(0x7f0000001700)=0x4) 01:21:24 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 01:21:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4}, 0x10) 01:21:24 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x7ff}, 0x10) [ 1402.105682][ T3216] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1402.185420][T10867] usb 2-1: new high-speed USB device number 86 using dummy_hcd 01:21:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/30, 0x1e}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/3, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r5, 0x0) r7 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r3, 0x0) [ 1402.486011][ T3216] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1402.495490][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:21:25 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)=0x8) [ 1402.585672][T10867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.596194][T10867] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1402.605535][T10867] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1402.615024][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.671291][ T3216] usb 3-1: config 0 descriptor?? [ 1402.722850][ T3216] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1402.773585][T10867] usb 2-1: config 0 descriptor?? 01:21:25 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) 01:21:25 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0xedd, 0x1}, 0x10) 01:21:26 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x1202, &(0x7f0000000040)=ANY=[], 0x8) [ 1404.255378][ T3216] gspca_stk1135: reg_w 0xf err -71 [ 1404.261718][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.268510][ T3216] gspca_stk1135: Sensor write failed [ 1404.273988][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.280533][ T3216] gspca_stk1135: Sensor write failed [ 1404.286287][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.292685][ T3216] gspca_stk1135: Sensor read failed [ 1404.298194][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.304871][ T3216] gspca_stk1135: Sensor read failed [ 1404.310140][ T3216] gspca_stk1135: Detected sensor type unknown (0x0) [ 1404.317341][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.323873][ T3216] gspca_stk1135: Sensor read failed [ 1404.329694][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.336529][ T3216] gspca_stk1135: Sensor read failed [ 1404.341884][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.348509][ T3216] gspca_stk1135: Sensor write failed [ 1404.354043][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1404.360652][ T3216] gspca_stk1135: Sensor write failed [ 1404.366651][ T3216] stk1135: probe of 3-1:0.0 failed with error -71 [ 1404.387449][ T3216] usb 3-1: USB disconnect, device number 90 01:21:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:21:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x20, 0x0, 0x1}, 0x98) 01:21:27 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000140)={r4}, 0x8) 01:21:27 executing program 3: syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6010fb7f00183aff0000000000000db74c00000010000000ff02"], 0x0) 01:21:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f00000000c0)={0x0, 0x0, 0xf}, &(0x7f0000000140)=0x18) 01:21:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc0000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1404.845426][ T3364] usb 2-1: USB disconnect, device number 86 01:21:28 executing program 3: socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet6_sctp(0x1c, 0x0, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/165, 0xa5}, {0x0}, {0x0}], 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) shutdown(r4, 0x0) r6 = open$dir(&(0x7f0000000100)='./file1\x00', 0x40000400001803c1, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 01:21:28 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) 01:21:28 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x27, &(0x7f0000000340), &(0x7f0000000380)=0x1e0) 01:21:28 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="f9", 0x1}], 0x1, &(0x7f0000000240)=[{0x10}, {0x10}], 0x20}, 0x0) [ 1405.606187][T12907] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1405.618492][ T3216] usb 3-1: new high-speed USB device number 91 using dummy_hcd 01:21:28 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4, 0x8, 0x0, 0x1}, 0x10) [ 1405.997656][T12907] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1406.007156][T12907] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1406.016707][T12907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.076642][ T3216] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1406.086003][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.171853][ T3216] usb 3-1: config 0 descriptor?? [ 1406.212833][T12907] usb 2-1: config 0 descriptor?? [ 1406.255722][ T3216] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:21:29 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x1202, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16], 0x8) [ 1407.778184][ T3216] gspca_stk1135: reg_w 0xf err -71 [ 1407.784652][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.791048][ T3216] gspca_stk1135: Sensor write failed [ 1407.796891][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.803299][ T3216] gspca_stk1135: Sensor write failed [ 1407.808891][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.815361][ T3216] gspca_stk1135: Sensor read failed [ 1407.820761][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.827275][ T3216] gspca_stk1135: Sensor read failed [ 1407.832552][ T3216] gspca_stk1135: Detected sensor type unknown (0x0) [ 1407.839447][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.847243][ T3216] gspca_stk1135: Sensor read failed [ 1407.852631][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.859145][ T3216] gspca_stk1135: Sensor read failed [ 1407.864690][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.871086][ T3216] gspca_stk1135: Sensor write failed [ 1407.876805][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.883205][ T3216] gspca_stk1135: Sensor write failed [ 1407.888944][ T3216] stk1135: probe of 3-1:0.0 failed with error -71 [ 1407.995667][ T3216] usb 3-1: USB disconnect, device number 91 [ 1408.541024][ T3216] usb 2-1: USB disconnect, device number 87 01:21:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 01:21:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@prinfo={0x14}], 0x14}, 0x18c) 01:21:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0xffffffffffffff6f, 0x2}, 0x10) getsockname(r0, 0x0, &(0x7f00000000c0)) 01:21:31 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@init={0x14}, @prinfo={0x14}, @sndrcv={0x2c}, @authinfo={0x10}, @prinfo={0x14}, @authinfo={0x10}, @sndinfo={0x1c}], 0xa4}, 0x18c) 01:21:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x108, &(0x7f0000000080)={r4, 0x0, 0xf}, &(0x7f00000000c0)=0x18) 01:21:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc0000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:31 executing program 5: socket$inet6_sctp(0x1c, 0x0, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) 01:21:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x8}) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x80000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150a050000932f6dd7e54d31f69323fd0000000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001e80)="4d19be16b52fe1fb60ae91b8d1f4a6a2b952c2c93cbcf7ae94165b44771b11e33f65490fbc4228b50fee20abb578bea101a063d8c9b605877016087a5f6a2cd59d04ee9c1435f612b8b118aed17d4f3d9f017e5de8e8c2aaabcf15fc8fb0a0fdf06526a011c9d6c54d5b3bd1289f208e155c3bef1625da330b7f26eb8649f31334d31786070e5595bd632ab6b562f08058216c8d18ed8242338972191b936aec8114731bc32cb73052ee2a5757b5dbc836b0ede3ebafb7c4e25692cb5c444649b749a4f378c2e117c8808dc9c2349259", 0xd0}], 0x1}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c098a927f1f6588b967141241ba7860685cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x7ea0, 0x11, 0x0, 0x27) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x14c}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)}], 0x1}}], 0x2, 0x0) 01:21:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a051400000000000000000100000d0900010073797a300000000094000000160a1fffffff000000000000010000000900010073797a30000000000900020073797a320000000068000380540003801400010076657468305f746f5f62726964676500140001007465616d5f736c6176655f310000000014000193a3253d32a3df26736c6176655f310000140001007465616d5f736c6176655f30000000000800024000000000080001"], 0xf0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000c1d) [ 1409.344479][ T3364] usb 2-1: new high-speed USB device number 88 using dummy_hcd 01:21:32 executing program 4: unshare(0x40000000) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000cf624062bbf0047ac82438e2f5695b266b0019642b721e8f468b8b6a285ba8b66275607f3a63826c083436e2", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25130000000c009900050000000100000008001400", @ANYRES32=r2, @ANYBLOB="06001000040600000500e400000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x200008c0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) [ 1409.465197][ T3216] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1409.745781][ T3364] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1409.755652][ T3364] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1409.765174][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.866618][ T3216] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1409.875993][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.973460][T32390] IPVS: ftp: loaded support on port[0] = 21 [ 1409.975101][ T3216] usb 3-1: config 0 descriptor?? [ 1410.003869][ T3364] usb 2-1: config 0 descriptor?? 01:21:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9800000000010104000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000001c0018"], 0x98}}, 0x0) [ 1410.055232][T32394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25295 sclass=netlink_route_socket pid=32394 comm=syz-executor.4 [ 1410.089483][ T3216] gspca_main: stk1135-2.14.0 probing 174f:6a31 01:21:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x15, 0xff01, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60]}, @in6=@dev}}}, 0xb8}}, 0x0) [ 1410.526915][T32390] IPVS: ftp: loaded support on port[0] = 21 [ 1410.553081][T32424] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1410.681379][T32394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25295 sclass=netlink_route_socket pid=32394 comm=syz-executor.4 [ 1410.768244][ T1323] tipc: TX() has been purged, node left! [ 1411.614454][ T3216] gspca_stk1135: reg_w 0xf err -71 [ 1411.621122][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.627740][ T3216] gspca_stk1135: Sensor write failed [ 1411.633192][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.639686][ T3216] gspca_stk1135: Sensor write failed [ 1411.645303][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.651695][ T3216] gspca_stk1135: Sensor read failed [ 1411.657221][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.663609][ T3216] gspca_stk1135: Sensor read failed [ 1411.669079][ T3216] gspca_stk1135: Detected sensor type unknown (0x0) [ 1411.675961][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.682371][ T3216] gspca_stk1135: Sensor read failed [ 1411.687839][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.694304][ T3216] gspca_stk1135: Sensor read failed [ 1411.699668][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.706204][ T3216] gspca_stk1135: Sensor write failed [ 1411.711669][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1411.718226][ T3216] gspca_stk1135: Sensor write failed [ 1411.723853][ T3216] stk1135: probe of 3-1:0.0 failed with error -71 [ 1411.744390][ T3216] usb 3-1: USB disconnect, device number 92 [ 1412.010503][ T3216] usb 2-1: USB disconnect, device number 88 01:21:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 01:21:35 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10) 01:21:35 executing program 5: 01:21:35 executing program 0: 01:21:35 executing program 4: unshare(0x40000000) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000cf624062bbf0047ac82438e2f5695b266b0019642b721e8f468b8b6a285ba8b66275607f3a63826c083436e2", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25130000000c009900050000000100000008001400", @ANYRES32=r2, @ANYBLOB="06001000040600000500e400000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x200008c0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) 01:21:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc0000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1412.578825][T32472] IPVS: ftp: loaded support on port[0] = 21 [ 1412.655635][T32473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25295 sclass=netlink_route_socket pid=32473 comm=syz-executor.4 01:21:35 executing program 0: [ 1412.764296][ T8695] usb 2-1: new high-speed USB device number 89 using dummy_hcd 01:21:35 executing program 5: 01:21:35 executing program 3: [ 1413.168971][ T3216] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1413.206111][ T8695] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.215590][ T8695] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1413.225269][ T8695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.360059][ T8695] usb 2-1: config 0 descriptor?? 01:21:36 executing program 0: 01:21:36 executing program 3: [ 1413.568925][ T3216] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1413.578253][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.692794][ T3216] usb 3-1: config 0 descriptor?? 01:21:36 executing program 5: [ 1413.777096][ T3216] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1413.859903][ T1323] tipc: TX() has been purged, node left! [ 1413.880578][ T1323] tipc: TX() has been purged, node left! [ 1415.264826][ T3216] gspca_stk1135: reg_w 0xf err -71 [ 1415.271296][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.278351][ T3216] gspca_stk1135: Sensor write failed [ 1415.283989][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.290370][ T3216] gspca_stk1135: Sensor write failed [ 1415.296157][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.302615][ T3216] gspca_stk1135: Sensor read failed [ 1415.308147][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.314655][ T3216] gspca_stk1135: Sensor read failed [ 1415.319925][ T3216] gspca_stk1135: Detected sensor type unknown (0x0) [ 1415.326841][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.333337][ T3216] gspca_stk1135: Sensor read failed [ 1415.338867][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.345409][ T3216] gspca_stk1135: Sensor read failed [ 1415.350777][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.357354][ T3216] gspca_stk1135: Sensor write failed [ 1415.362807][ T3216] gspca_stk1135: serial bus timeout: status=0x00 [ 1415.369349][ T3216] gspca_stk1135: Sensor write failed [ 1415.375040][ T3216] stk1135: probe of 3-1:0.0 failed with error -71 [ 1415.487201][ T3216] usb 3-1: USB disconnect, device number 93 [ 1415.793266][ T3216] usb 2-1: USB disconnect, device number 89 01:21:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f8306404f17316a1ad6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 01:21:38 executing program 4: unshare(0x40000000) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000cf624062bbf0047ac82438e2f5695b266b0019642b721e8f468b8b6a285ba8b66275607f3a63826c083436e2", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25130000000c009900050000000100000008001400", @ANYRES32=r2, @ANYBLOB="06001000040600000500e400000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x200008c0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) 01:21:38 executing program 0: 01:21:38 executing program 5: 01:21:38 executing program 3: 01:21:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 1416.232931][T32532] IPVS: ftp: loaded support on port[0] = 21 01:21:39 executing program 0: [ 1416.346266][T32535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25295 sclass=netlink_route_socket pid=32535 comm=syz-executor.4 01:21:39 executing program 5: 01:21:39 executing program 3: [ 1416.584124][ T3364] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1416.664145][ T8695] usb 3-1: new high-speed USB device number 94 using dummy_hcd 01:21:39 executing program 5: [ 1416.974750][ T3364] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1416.984205][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.065725][ T3364] usb 2-1: config 0 descriptor?? [ 1417.075553][ T8695] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 1417.085093][ T8695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.127303][ T3364] ch341 2-1:0.0: ch341-uart converter detected 01:21:40 executing program 0: [ 1417.216965][ T8695] usb 3-1: config 0 descriptor?? [ 1417.265988][ T8695] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1417.314480][ T3364] usb 2-1: failed to receive control message: -32 [ 1417.321324][ T3364] ch341-uart: probe of ttyUSB0 failed with error -32 01:21:40 executing program 3: [ 1417.416106][T24641] tipc: TX() has been purged, node left! [ 1418.784362][ T8695] gspca_stk1135: reg_w 0xf err -71 [ 1418.790822][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.797920][ T8695] gspca_stk1135: Sensor write failed [ 1418.803539][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.810045][ T8695] gspca_stk1135: Sensor write failed [ 1418.815640][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.822029][ T8695] gspca_stk1135: Sensor read failed [ 1418.827639][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.834163][ T8695] gspca_stk1135: Sensor read failed [ 1418.839434][ T8695] gspca_stk1135: Detected sensor type unknown (0x0) [ 1418.846395][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.852777][ T8695] gspca_stk1135: Sensor read failed [ 1418.858350][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.864893][ T8695] gspca_stk1135: Sensor read failed [ 1418.870346][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.876883][ T8695] gspca_stk1135: Sensor write failed [ 1418.882330][ T8695] gspca_stk1135: serial bus timeout: status=0x00 [ 1418.888860][ T8695] gspca_stk1135: Sensor write failed [ 1418.894657][ T8695] stk1135: probe of 3-1:0.0 failed with error -71 [ 1418.913976][ T8695] usb 3-1: USB disconnect, device number 94 [ 1419.346134][ T8695] usb 2-1: USB disconnect, device number 90 [ 1419.354848][ T8695] ch341 2-1:0.0: device disconnected 01:21:42 executing program 5: 01:21:42 executing program 4: 01:21:42 executing program 3: 01:21:42 executing program 0: 01:21:42 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:42 executing program 2: 01:21:42 executing program 0: 01:21:42 executing program 3: 01:21:42 executing program 4: r0 = socket(0x2, 0x8001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040)=0x200000, 0x4) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022eeb88"], 0x10) shutdown(r0, 0x1) 01:21:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x13000011, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) [ 1420.153902][ T3216] usb 2-1: new high-speed USB device number 91 using dummy_hcd 01:21:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x20) [ 1420.535400][ T3216] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1420.544839][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:21:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x8, 0x7fff, 0x0, 0x1, 0x0, [0x13]}, 0x40) [ 1420.647269][ T3216] usb 2-1: config 0 descriptor?? 01:21:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x13, &(0x7f0000000100)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x2, 0x100, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @generic={0x2, 0x9, 0x0, 0x3, 0xffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x27, &(0x7f00000000c0)=""/39, 0x100, 0x6, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x7}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0xfffffff9}, 0x10, 0xffffffffffffffff, r4}, 0x78) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002e0, 0xd, 0x0, &(0x7f0000000280)="b95b03b708030000009e40f086", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a8}, [@call, @func, @func]}, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r5}, 0x78) socket$kcm(0x2, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0x0, 0x2, 0x5, 0xa, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x6, 0x7, 0x4, 0x40, 0x1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x4, 0xff}, 0x10}, 0x78) [ 1420.698347][ T3216] ch341 2-1:0.0: ch341-uart converter detected 01:21:43 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x81, 0x80, 0x4, 0x7, 0x0, 0x1f, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0xbc07, 0x0, 0x5, 0x5, 0x7ffc, 0x1, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0xe, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x0, 0x5b99, 0x9, 0xe0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x40) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x8, 0x12) [ 1420.903716][ T3216] usb 2-1: failed to receive control message: -32 [ 1420.910707][ T3216] ch341-uart: probe of ttyUSB0 failed with error -32 01:21:44 executing program 2: msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1}}) 01:21:44 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000380)=0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) dup2(r0, r1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="84e4cb94bc06050000000000000000955878b769389f0900020073797a3200000000090002007379fbe3e91f552d8afb30000000000900020063797a31000000000500010007000000070000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 01:21:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "e1e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000340)={0x750, {0x2, 0x0, @remote={0xac, 0x14, 0x2}}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0xfe03, 0x0, 0x8, 0xffffffff, 0x807}) 01:21:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1) 01:21:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0) 01:21:45 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x47, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0xfffffffe}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={0x0, 0x208}, 0x1, 0x0, 0x0, 0x809}, 0x20000004) fstat(0xffffffffffffffff, &(0x7f0000000400)) 01:21:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x21, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 1422.798109][T26726] usb 2-1: USB disconnect, device number 91 [ 1422.806487][T26726] ch341 2-1:0.0: device disconnected [ 1423.081210][T32654] new mount options do not match the existing superblock, will be ignored [ 1423.132393][T32652] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1423.211966][T32657] new mount options do not match the existing superblock, will be ignored 01:21:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) 01:21:46 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x15, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$cont(0x7, r2, 0x0, 0x0) 01:21:46 executing program 5: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x0, @loopback, 0x4e22, 0x0, 'none\x00'}, 0x2c) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2110, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) [ 1423.773703][ T8695] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1423.882891][T32669] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1424.135103][ T8695] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1424.144618][ T8695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:21:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0) 01:21:47 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x5603, &(0x7f0000000080)=""/50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1424.345918][ T8695] usb 2-1: config 0 descriptor?? [ 1424.388045][ T8695] ch341 2-1:0.0: ch341-uart converter detected [ 1424.594183][ T8695] usb 2-1: failed to receive control message: -32 [ 1424.600989][ T8695] ch341-uart: probe of ttyUSB0 failed with error -32 [ 1424.646149][T32687] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 01:21:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utime(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 1424.890471][T32696] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 01:21:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:21:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) 01:21:49 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/50) 01:21:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b44, &(0x7f0000000080)=""/50) 01:21:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='ramf\x96\xaa\x16|(VN\xb1\x9b\xb7\x85A\x9fv\f\xa0)\xbe\x83\xde\xca\x84A_\x86\xf3\xd3r\x81\xf9{\x05\xb9\xc9\x95wh,\xfb\xbb\xe8y\x87\'@\'[j\x1e*\xf6L\x9bw', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r7, 0x0, 0x800000080004103) [ 1426.400505][ T8695] usb 2-1: USB disconnect, device number 92 [ 1426.434761][ T8695] ch341 2-1:0.0: device disconnected [ 1426.669952][T32725] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 01:21:49 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x7f}, @IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x8}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x47, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0xfffffffe}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="080204cf", @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x809}, 0x20000004) fstat(r2, &(0x7f0000000400)) 01:21:49 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x7f}, @IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x8}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x47, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0xfffffffe}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x809}, 0x20000004) fstat(r2, &(0x7f0000000400)) 01:21:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) dup2(r3, 0xffffffffffffffff) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x0) fcntl$setstatus(r2, 0x4, 0x42000) dup2(r1, r2) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/27) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003b80)=""/248, 0xf8}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) memfd_create(&(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0) 01:21:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b44, &(0x7f0000000080)=""/50) [ 1427.577674][T26726] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1427.594120][T32747] new mount options do not match the existing superblock, will be ignored [ 1427.652239][T32749] new mount options do not match the existing superblock, will be ignored [ 1427.740879][T32757] new mount options do not match the existing superblock, will be ignored [ 1427.784348][T32749] new mount options do not match the existing superblock, will be ignored [ 1427.955662][T26726] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1427.955781][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.959698][T26726] usb 2-1: config 0 descriptor?? 01:21:50 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x0, 0x5800) 01:21:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/50) [ 1428.123984][T26726] ch341 2-1:0.0: ch341-uart converter detected [ 1428.257588][T26726] usb 2-1: failed to receive control message: -32 [ 1428.257913][T26726] ch341-uart: probe of ttyUSB0 failed with error -32 01:21:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="16010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 01:21:53 executing program 3: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)='6', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x2000012, 0x1f4}, 0x6}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66ba76b699d3a483904811c5709efa01fa13e4ddc813f76684d3d1529fea5d78b38267db0082270f62b41b50981b0313b668585ad32e8977c5f7c2dc112136b8f7392223205ad86f4a9de1cddbd119f26acc2f", 0xffffffcd, 0x11, 0x0, 0x170) 01:21:53 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x14, 0x0, 0x0) 01:21:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 01:21:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xee, 0xe, 0xec, 0x40, 0x7b8, 0x401a, 0x3d3d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0xba, 0x9}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, "62beeb8c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:53 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='ramf\x96\xaa\x16|(VN\xb1\x9b\xb7\x85A\x9fv\f\xa0)\xbe\x83\xde\xca\x84A_\x86\xf3\xd3r\x81\xf9{\x05\xb9\xc9\x95wh,\xfb\xbb\xe8y\x87\'@\'[j\x1e*\xf6L\x9bw', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r7, 0x0, 0x800000080004103) [ 1430.295252][T26726] usb 2-1: USB disconnect, device number 93 [ 1430.303940][T26726] ch341 2-1:0.0: device disconnected 01:21:53 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="240000001e005f0214fffffffffffff80700000003000000000000000300090003000000", 0x24) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000001c0)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001000010400000000d802000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100697069700000000028000280060012004e200000050005001f000000040013000500040042000000060012004e20000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="fb3260dc324e9567d1e539f42568c446b60d0ab0fbfd4c2e1cd10f8d43ad492aaf1228e5afe1ae6b64a2c5aa9e697d1cef37b9087b6e1fa5b118b2dd01fb12f266af68b333610c4a0e6b5ecb9d9303f0befd3410e9ee96f3b01550e08769eb7b8e6b2160461f3067eac6362f1f22c807bb9e6afaeb3cd952d0c78d4670dfecb0bb7cf055c566a055e69f613ebe09169337214ca0b296d3e10e83257bc3b800a81bd60b42e13ae5ce2c084be1f73da665cc788505c740e0df3e49c75e775c9cbb49e04997df90c0268fc26f0e0b7b8083"], 0x68}}, 0x0) 01:21:53 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r5, 0x8200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) [ 1431.173675][ T8695] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1431.344274][ T3216] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1431.542866][ T8695] usb 1-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=3d.3d [ 1431.542939][ T8695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:21:54 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x8200) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) [ 1431.547904][ T8695] usb 1-1: config 0 descriptor?? [ 1431.724486][ T3216] usb 2-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1431.724626][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.729304][ T3216] usb 2-1: config 0 descriptor?? [ 1431.776326][ T3216] ch341 2-1:0.0: ch341-uart converter detected [ 1431.993418][ T3216] usb 2-1: failed to receive control message: -32 [ 1431.993779][ T3216] ch341-uart: probe of ttyUSB0 failed with error -32 [ 1432.251991][ T8695] ===================================================== [ 1432.252114][ T8695] BUG: KMSAN: uninit-value in batadv_hard_if_event+0x28d7/0x3bd0 [ 1432.252139][ T8695] CPU: 1 PID: 8695 Comm: kworker/1:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 1432.252149][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.252184][ T8695] Workqueue: usb_hub_wq hub_event [ 1432.252197][ T8695] Call Trace: [ 1432.252238][ T8695] dump_stack+0x21c/0x280 [ 1432.252266][ T8695] kmsan_report+0xf7/0x1e0 [ 1432.252295][ T8695] __msan_warning+0x58/0xa0 [ 1432.252320][ T8695] batadv_hard_if_event+0x28d7/0x3bd0 [ 1432.252362][ T8695] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 1432.252424][ T8695] raw_notifier_call_chain+0x123/0x290 [ 1432.252515][ T8695] register_netdevice+0x3120/0x37d0 [ 1432.252567][ T8695] register_netdev+0xbe/0x100 [ 1432.252631][ T8695] rtl8150_probe+0x12d9/0x15b0 [ 1432.252669][ T8695] ? read_eprom_word+0xe80/0xe80 [ 1432.252720][ T8695] usb_probe_interface+0xece/0x1550 [ 1432.252756][ T8695] ? usb_register_driver+0x900/0x900 [ 1432.252844][ T8695] really_probe+0xf20/0x20b0 [ 1432.252872][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.252900][ T8695] driver_probe_device+0x293/0x390 [ 1432.252930][ T8695] __device_attach_driver+0x63f/0x830 [ 1432.252965][ T8695] bus_for_each_drv+0x2ca/0x3f0 [ 1432.252988][ T8695] ? coredump_store+0xf0/0xf0 [ 1432.253018][ T8695] __device_attach+0x4e2/0x7f0 [ 1432.253050][ T8695] device_initial_probe+0x4a/0x60 [ 1432.253073][ T8695] bus_probe_device+0x177/0x3d0 [ 1432.253097][ T8695] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1432.253118][ T8695] device_add+0x3b0e/0x40d0 [ 1432.253160][ T8695] usb_set_configuration+0x380f/0x3f10 [ 1432.253191][ T8695] ? usb_set_configuration+0xb41/0x3f10 [ 1432.253239][ T8695] usb_generic_driver_probe+0x138/0x300 [ 1432.253263][ T8695] ? usb_choose_configuration+0xe70/0xe70 [ 1432.253285][ T8695] usb_probe_device+0x311/0x490 [ 1432.253311][ T8695] ? usb_register_device_driver+0x540/0x540 [ 1432.253332][ T8695] really_probe+0xf20/0x20b0 [ 1432.253358][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.253385][ T8695] driver_probe_device+0x293/0x390 [ 1432.253414][ T8695] __device_attach_driver+0x63f/0x830 [ 1432.253445][ T8695] bus_for_each_drv+0x2ca/0x3f0 [ 1432.253465][ T8695] ? coredump_store+0xf0/0xf0 [ 1432.253494][ T8695] __device_attach+0x4e2/0x7f0 [ 1432.253527][ T8695] device_initial_probe+0x4a/0x60 [ 1432.253561][ T8695] bus_probe_device+0x177/0x3d0 [ 1432.253588][ T8695] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1432.253610][ T8695] device_add+0x3b0e/0x40d0 [ 1432.253658][ T8695] usb_new_device+0x1bd4/0x2a30 [ 1432.253696][ T8695] hub_event+0x5e7b/0x8a70 [ 1432.253757][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.253782][ T8695] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1432.253803][ T8695] ? led_work+0x7c0/0x7c0 [ 1432.253858][ T8695] process_one_work+0x1688/0x2140 [ 1432.253900][ T8695] worker_thread+0x10bc/0x2730 [ 1432.253922][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.253961][ T8695] kthread+0x551/0x590 [ 1432.253985][ T8695] ? process_one_work+0x2140/0x2140 [ 1432.254010][ T8695] ? kthread_blkcg+0x110/0x110 [ 1432.254036][ T8695] ret_from_fork+0x1f/0x30 [ 1432.254053][ T8695] [ 1432.254060][ T8695] Uninit was stored to memory at: [ 1432.254085][ T8695] kmsan_internal_chain_origin+0xad/0x130 [ 1432.254104][ T8695] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1432.254119][ T8695] kmsan_memcpy_metadata+0xb/0x10 [ 1432.254150][ T8695] __msan_memcpy+0x43/0x50 [ 1432.254169][ T8695] rtl8150_probe+0x1236/0x15b0 [ 1432.254189][ T8695] usb_probe_interface+0xece/0x1550 [ 1432.254207][ T8695] really_probe+0xf20/0x20b0 [ 1432.254225][ T8695] driver_probe_device+0x293/0x390 [ 1432.254244][ T8695] __device_attach_driver+0x63f/0x830 [ 1432.254262][ T8695] bus_for_each_drv+0x2ca/0x3f0 [ 1432.254280][ T8695] __device_attach+0x4e2/0x7f0 [ 1432.254298][ T8695] device_initial_probe+0x4a/0x60 [ 1432.254315][ T8695] bus_probe_device+0x177/0x3d0 [ 1432.254332][ T8695] device_add+0x3b0e/0x40d0 [ 1432.254350][ T8695] usb_set_configuration+0x380f/0x3f10 [ 1432.254368][ T8695] usb_generic_driver_probe+0x138/0x300 [ 1432.254388][ T8695] usb_probe_device+0x311/0x490 [ 1432.254407][ T8695] really_probe+0xf20/0x20b0 [ 1432.254427][ T8695] driver_probe_device+0x293/0x390 [ 1432.254448][ T8695] __device_attach_driver+0x63f/0x830 [ 1432.254466][ T8695] bus_for_each_drv+0x2ca/0x3f0 [ 1432.254485][ T8695] __device_attach+0x4e2/0x7f0 [ 1432.254505][ T8695] device_initial_probe+0x4a/0x60 [ 1432.254524][ T8695] bus_probe_device+0x177/0x3d0 [ 1432.254547][ T8695] device_add+0x3b0e/0x40d0 [ 1432.254569][ T8695] usb_new_device+0x1bd4/0x2a30 [ 1432.254585][ T8695] hub_event+0x5e7b/0x8a70 [ 1432.254605][ T8695] process_one_work+0x1688/0x2140 [ 1432.254626][ T8695] worker_thread+0x10bc/0x2730 [ 1432.254643][ T8695] kthread+0x551/0x590 [ 1432.254662][ T8695] ret_from_fork+0x1f/0x30 [ 1432.254667][ T8695] [ 1432.254674][ T8695] Local variable ----node_id.i@rtl8150_probe created at: [ 1432.254694][ T8695] rtl8150_probe+0xea7/0x15b0 [ 1432.254712][ T8695] rtl8150_probe+0xea7/0x15b0 [ 1432.254717][ T8695] ===================================================== [ 1432.254723][ T8695] Disabling lock debugging due to kernel taint [ 1432.254734][ T8695] Kernel panic - not syncing: panic_on_warn set ... [ 1432.254759][ T8695] CPU: 1 PID: 8695 Comm: kworker/1:4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1432.254769][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.254787][ T8695] Workqueue: usb_hub_wq hub_event [ 1432.254798][ T8695] Call Trace: [ 1432.254828][ T8695] dump_stack+0x21c/0x280 [ 1432.254906][ T8695] panic+0x4d7/0xef7 [ 1432.254948][ T8695] ? add_taint+0x17c/0x210 [ 1432.254979][ T8695] kmsan_report+0x1df/0x1e0 [ 1432.255007][ T8695] __msan_warning+0x58/0xa0 [ 1432.255035][ T8695] batadv_hard_if_event+0x28d7/0x3bd0 [ 1432.255076][ T8695] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 1432.255099][ T8695] raw_notifier_call_chain+0x123/0x290 [ 1432.255132][ T8695] register_netdevice+0x3120/0x37d0 [ 1432.255175][ T8695] register_netdev+0xbe/0x100 [ 1432.255204][ T8695] rtl8150_probe+0x12d9/0x15b0 [ 1432.255240][ T8695] ? read_eprom_word+0xe80/0xe80 [ 1432.255263][ T8695] usb_probe_interface+0xece/0x1550 [ 1432.255300][ T8695] ? usb_register_driver+0x900/0x900 [ 1432.255323][ T8695] really_probe+0xf20/0x20b0 [ 1432.255352][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.255382][ T8695] driver_probe_device+0x293/0x390 [ 1432.255413][ T8695] __device_attach_driver+0x63f/0x830 [ 1432.255447][ T8695] bus_for_each_drv+0x2ca/0x3f0 [ 1432.255470][ T8695] ? coredump_store+0xf0/0xf0 [ 1432.255503][ T8695] __device_attach+0x4e2/0x7f0 [ 1432.255566][ T8695] device_initial_probe+0x4a/0x60 [ 1432.255592][ T8695] bus_probe_device+0x177/0x3d0 [ 1432.255619][ T8695] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1432.255642][ T8695] device_add+0x3b0e/0x40d0 [ 1432.255689][ T8695] usb_set_configuration+0x380f/0x3f10 [ 1432.255721][ T8695] ? usb_set_configuration+0xb41/0x3f10 [ 1432.255773][ T8695] usb_generic_driver_probe+0x138/0x300 [ 1432.255797][ T8695] ? usb_choose_configuration+0xe70/0xe70 [ 1432.255820][ T8695] usb_probe_device+0x311/0x490 [ 1432.255850][ T8695] ? usb_register_device_driver+0x540/0x540 [ 1432.255872][ T8695] really_probe+0xf20/0x20b0 [ 1432.255899][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.255927][ T8695] driver_probe_device+0x293/0x390 [ 1432.255956][ T8695] __device_attach_driver+0x63f/0x830 [ 1432.255988][ T8695] bus_for_each_drv+0x2ca/0x3f0 [ 1432.256010][ T8695] ? coredump_store+0xf0/0xf0 [ 1432.256040][ T8695] __device_attach+0x4e2/0x7f0 [ 1432.256074][ T8695] device_initial_probe+0x4a/0x60 [ 1432.256099][ T8695] bus_probe_device+0x177/0x3d0 [ 1432.256125][ T8695] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1432.256147][ T8695] device_add+0x3b0e/0x40d0 [ 1432.256193][ T8695] usb_new_device+0x1bd4/0x2a30 [ 1432.256233][ T8695] hub_event+0x5e7b/0x8a70 [ 1432.256296][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.256320][ T8695] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1432.256340][ T8695] ? led_work+0x7c0/0x7c0 [ 1432.256365][ T8695] process_one_work+0x1688/0x2140 [ 1432.256407][ T8695] worker_thread+0x10bc/0x2730 [ 1432.256430][ T8695] ? kmsan_get_metadata+0x116/0x180 [ 1432.256471][ T8695] kthread+0x551/0x590 [ 1432.256494][ T8695] ? process_one_work+0x2140/0x2140 [ 1432.256520][ T8695] ? kthread_blkcg+0x110/0x110 [ 1432.256551][ T8695] ret_from_fork+0x1f/0x30 [ 1432.257950][ T8695] Kernel Offset: disabled [ 1433.066413][ T8695] Rebooting in 86400 seconds..