Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. 2020/11/24 14:19:44 fuzzer started 2020/11/24 14:19:46 dialing manager at 10.128.0.26:41737 2020/11/24 14:19:46 syscalls: 3266 2020/11/24 14:19:46 code coverage: enabled 2020/11/24 14:19:46 comparison tracing: enabled 2020/11/24 14:19:46 extra coverage: enabled 2020/11/24 14:19:46 setuid sandbox: enabled 2020/11/24 14:19:46 namespace sandbox: enabled 2020/11/24 14:19:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/24 14:19:46 fault injection: enabled 2020/11/24 14:19:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/24 14:19:46 net packet injection: enabled 2020/11/24 14:19:46 net device setup: enabled 2020/11/24 14:19:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/24 14:19:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/24 14:19:46 USB emulation: enabled 2020/11/24 14:19:46 hci packet injection: enabled 2020/11/24 14:19:46 wifi device emulation: enabled 14:22:15 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, 0x0, 0x0) syzkaller login: [ 311.261542][ T8281] IPVS: ftp: loaded support on port[0] = 21 [ 311.788473][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 311.941138][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.948652][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.958711][ T8281] device bridge_slave_0 entered promiscuous mode [ 311.971860][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.979335][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.989747][ T8281] device bridge_slave_1 entered promiscuous mode [ 312.039360][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.056338][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.103951][ T8281] team0: Port device team_slave_0 added [ 312.117303][ T8281] team0: Port device team_slave_1 added [ 312.162256][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.169607][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.196034][ T8281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.212076][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.219314][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.245663][ T8281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.310052][ T8281] device hsr_slave_0 entered promiscuous mode [ 312.320832][ T8281] device hsr_slave_1 entered promiscuous mode [ 312.619672][ T8281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.636317][ T8281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.656233][ T8281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.690949][ T8281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.035104][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.075602][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.085546][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.111579][ T4733] Bluetooth: hci0: command 0x0409 tx timeout [ 313.112527][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.147985][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.159537][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.169074][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.176458][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.230057][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.239683][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.250012][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.259655][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.266929][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.276171][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.287353][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.319302][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.330904][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.346663][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.379516][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.396820][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.438811][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.449662][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.459722][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.469669][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.486452][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.551906][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.560327][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.591428][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.654924][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.665878][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.734021][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.745852][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.772028][ T8281] device veth0_vlan entered promiscuous mode [ 313.781083][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.790535][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.827150][ T8281] device veth1_vlan entered promiscuous mode [ 313.906439][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.916849][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.927082][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.938244][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.962141][ T8281] device veth0_macvtap entered promiscuous mode [ 313.982499][ T8281] device veth1_macvtap entered promiscuous mode [ 314.042657][ T8281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.051555][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.061367][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.072202][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.082586][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.110498][ T8281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.128571][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.139305][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.152755][ T8281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.162278][ T8281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.171814][ T8281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.180840][ T8281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.622217][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.630632][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.638908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.705190][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.713789][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.721954][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:22:21 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, 0x0, 0x0) 14:22:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000000005000000", 0x58}], 0x1) [ 315.188241][ T5] Bluetooth: hci0: command 0x041b tx timeout 14:22:21 executing program 0: socketpair(0x28, 0x0, 0x2, &(0x7f0000003440)) 14:22:22 executing program 0: pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x8}, &(0x7f0000000200)={0x77359400}, 0x0) 14:22:22 executing program 0: delete_module(0x0, 0xc00) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xab) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) [ 316.119214][ C1] sd 0:0:1:0: [sg0] tag#7757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 316.130067][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB: Test Unit Ready [ 316.136867][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.146987][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.157826][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.167722][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.177959][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.187775][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.197710][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.207678][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.217606][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.227542][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.238194][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.248711][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.258675][ C1] sd 0:0:1:0: [sg0] tag#7757 CDB[c0]: 00 00 00 00 00 00 00 00 [ 316.283907][ C0] sd 0:0:1:0: [sg0] tag#7758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 316.294885][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB: Test Unit Ready [ 316.301783][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.311780][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.321858][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.332128][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.342076][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.352218][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.362418][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.372363][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.382312][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.392281][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.402238][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.412204][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.422516][ C0] sd 0:0:1:0: [sg0] tag#7758 CDB[c0]: 00 00 00 00 00 00 00 00 14:22:22 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1239fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) write$FUSE_DIRENTPLUS(r1, &(0x7f00000033c0)=ANY=[@ANYBLOB="b0050000fe", @ANYRES64=0x0, @ANYBLOB="01"], 0x5b0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 317.268591][ T5] Bluetooth: hci0: command 0x040f tx timeout 14:22:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0x1, "5b98b7d24d31fee8532ab94c33166e0c2c59dc2f2b019fbdcadb0729709105ea", 0x20, 0x196, 0x81, 0x4, 0x1}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(0x0, 0x0, 0x0) 14:22:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0x1, "5b98b7d24d31fee8532ab94c33166e0c2c59dc2f2b019fbdcadb0729709105ea", 0x20, 0x196, 0x81, 0x4, 0x1}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(0x0, 0x0, 0x0) 14:22:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6356) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000104010200f000000000000000000000e6001481ffffff000800054000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x8c, 0xa, 0xa, 0x581, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x53}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x6, 0x6, 0x9}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000280)=""/226) [ 318.822600][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.870978][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 14:22:25 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) [ 319.348125][ T4733] Bluetooth: hci0: command 0x0419 tx timeout [ 319.428958][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 319.678342][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 319.798613][ T5] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 319.807021][ T5] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 319.816156][ T5] usb 1-1: config 0 has no interface number 0 [ 319.822667][ T5] usb 1-1: config 0 interface 228 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 319.836902][ T5] usb 1-1: config 0 interface 228 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 320.068604][ T5] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 320.078154][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.086745][ T5] usb 1-1: Product: syz [ 320.091472][ T5] usb 1-1: Manufacturer: syz [ 320.096265][ T5] usb 1-1: SerialNumber: syz [ 320.140438][ T5] usb 1-1: config 0 descriptor?? [ 320.188572][ T5] usb 1-1: invalid MIDI EP [ 320.193293][ T5] usb 1-1: snd-bcd2000: error during probing [ 320.201238][ T5] snd-bcd2000: probe of 1-1:0.228 failed with error -22 [ 320.390701][ T2091] usb 1-1: USB disconnect, device number 2 [ 321.179096][ T2091] usb 1-1: new high-speed USB device number 3 using dummy_hcd 14:22:27 executing program 1: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={0x0, 0xa33a}, 0x8) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x6, 0x144682) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1401, 0x310, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4081) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = accept(r1, &(0x7f0000000800)=@tipc, &(0x7f0000000880)=0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd8, 0x1403, 0x8, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4c014}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000b80)={0x4, 0x3, 0x4, 0x1000, 0x7fffffff, {}, {0x3, 0x2, 0x0, 0x2, 0xb6, 0x80, "bd210264"}, 0x1, 0x1, @userptr=0x5, 0x5482}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c00)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000c40)={0x3, 0x3}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000c80)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)={&(0x7f0000000cc0)='./file0\x00', r5}, 0x10) getsockname$l2tp(r5, &(0x7f0000000d80)={0x2, 0x0, @initdev}, &(0x7f0000000dc0)=0x10) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000e00)) [ 321.485068][ T2091] usb 1-1: Using ep0 maxpacket: 32 [ 321.660957][ T2091] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 321.669600][ T2091] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 321.678904][ T2091] usb 1-1: config 0 has no interface number 0 [ 321.685771][ T2091] usb 1-1: config 0 interface 228 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 321.698261][ T2091] usb 1-1: config 0 interface 228 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 321.919025][ T2091] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 321.928667][ T2091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.936800][ T2091] usb 1-1: Product: syz [ 321.941410][ T2091] usb 1-1: Manufacturer: syz [ 321.946128][ T2091] usb 1-1: SerialNumber: syz [ 321.980768][ T2091] usb 1-1: config 0 descriptor?? [ 322.029012][ T2091] usb 1-1: invalid MIDI EP [ 322.034165][ T2091] usb 1-1: snd-bcd2000: error during probing [ 322.041298][ T2091] snd-bcd2000: probe of 1-1:0.228 failed with error -22 14:22:28 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) [ 322.170574][ T2091] usb 1-1: USB disconnect, device number 3 [ 322.769101][ T2091] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 323.008810][ T2091] usb 1-1: Using ep0 maxpacket: 32 [ 323.071166][ T8600] IPVS: ftp: loaded support on port[0] = 21 [ 323.130162][ T2091] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 323.138622][ T2091] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 323.147448][ T2091] usb 1-1: config 0 has no interface number 0 [ 323.154086][ T2091] usb 1-1: config 0 interface 228 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 323.166428][ T2091] usb 1-1: config 0 interface 228 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.411362][ T2091] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 323.421281][ T2091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.429595][ T2091] usb 1-1: Product: syz [ 323.433873][ T2091] usb 1-1: Manufacturer: syz [ 323.438708][ T2091] usb 1-1: SerialNumber: syz [ 323.634700][ T2091] usb 1-1: config 0 descriptor?? [ 323.693474][ T2091] usb 1-1: invalid MIDI EP [ 323.698307][ T2091] usb 1-1: snd-bcd2000: error during probing [ 323.705138][ T2091] snd-bcd2000: probe of 1-1:0.228 failed with error -22 [ 323.740738][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 323.919191][ T8493] usb 1-1: USB disconnect, device number 4 [ 324.004770][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.012460][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.022403][ T8600] device bridge_slave_0 entered promiscuous mode [ 324.077585][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.085637][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.095326][ T8600] device bridge_slave_1 entered promiscuous mode [ 324.161767][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.183166][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.242007][ T8600] team0: Port device team_slave_0 added [ 324.258423][ T8600] team0: Port device team_slave_1 added [ 324.315212][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.323389][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.349803][ T8600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.367493][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.375249][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.402146][ T8600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 14:22:30 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) [ 324.504367][ T8600] device hsr_slave_0 entered promiscuous mode [ 324.560278][ T8600] device hsr_slave_1 entered promiscuous mode [ 324.571712][ T8600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.579528][ T8600] Cannot create hsr debugfs directory [ 324.948858][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 325.008323][ T8493] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 325.136436][ T8600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 325.154280][ T8600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 325.184417][ T8600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 325.215715][ T8600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 325.250568][ T8493] usb 1-1: Using ep0 maxpacket: 32 [ 325.399717][ T8493] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 325.408589][ T8493] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 325.418654][ T8493] usb 1-1: config 0 has no interface number 0 [ 325.424898][ T8493] usb 1-1: config 0 interface 228 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 325.436313][ T8493] usb 1-1: config 0 interface 228 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 325.609970][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.639396][ T8493] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 325.649448][ T8493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.657595][ T8493] usb 1-1: Product: syz [ 325.662107][ T8493] usb 1-1: Manufacturer: syz [ 325.666822][ T8493] usb 1-1: SerialNumber: syz [ 325.683756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.694602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.714867][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.733111][ T8493] usb 1-1: config 0 descriptor?? [ 325.763842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.774209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.784393][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.787738][ T8493] usb 1-1: invalid MIDI EP [ 325.791819][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.804241][ T8493] usb 1-1: snd-bcd2000: error during probing [ 325.811110][ T8493] snd-bcd2000: probe of 1-1:0.228 failed with error -22 [ 325.883522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.893233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.903405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.913612][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.921041][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.930449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.941696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.012405][ T17] usb 1-1: USB disconnect, device number 5 [ 326.103504][ T8600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.114458][ T8600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.135053][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.154999][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.166113][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.176682][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.187493][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.197763][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.208455][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.218347][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.231311][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.241316][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.300230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.309180][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.345463][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.413729][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.424534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.488712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.499617][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.527806][ T8600] device veth0_vlan entered promiscuous mode [ 326.542670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.555387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 14:22:32 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) [ 326.623911][ T8600] device veth1_vlan entered promiscuous mode [ 326.722811][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.735130][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.775562][ T8600] device veth0_macvtap entered promiscuous mode [ 326.835473][ T8600] device veth1_macvtap entered promiscuous mode [ 326.941598][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 326.952794][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.966956][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.975309][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.985035][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.994594][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.004810][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.030531][ T8493] Bluetooth: hci1: command 0x041b tx timeout [ 327.058438][ T17] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 327.079039][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 327.090409][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.105420][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.114321][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.124737][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.197579][ T8600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.206978][ T8600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.216193][ T8600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.226102][ T8600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.308999][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 327.491066][ T17] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 327.499544][ T17] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 327.508986][ T17] usb 1-1: config 0 has no interface number 0 [ 327.515230][ T17] usb 1-1: config 0 interface 228 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 327.526725][ T17] usb 1-1: config 0 interface 228 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 327.692525][ T953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.702415][ T953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.712214][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.801433][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.809521][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.817456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.912374][ T17] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 327.921830][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.930165][ T17] usb 1-1: Product: syz [ 327.934444][ T17] usb 1-1: Manufacturer: syz [ 327.939333][ T17] usb 1-1: SerialNumber: syz [ 328.009855][ T17] usb 1-1: config 0 descriptor?? [ 328.058383][ T17] usb 1-1: invalid MIDI EP [ 328.062984][ T17] usb 1-1: snd-bcd2000: error during probing [ 328.070010][ T17] snd-bcd2000: probe of 1-1:0.228 failed with error -22 [ 328.267098][ T17] usb 1-1: USB disconnect, device number 6 14:22:34 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)="00a2e14e5602f5be807dbe593b8796fb9144469843aeefe22abc97d1d57c9b6b77c7ce7400520de559d1a8b8b1ad17e6bfbac0bb6b15f380ef40e48bc92dc3ed2459bba0528e13718d99c6996e2e78c906fe442b2e985314dca3841d2e6b7da8ae34a86ad145e27cf1af8b48da1b7780f092954e951ca87af004", 0x7a, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="26750042c73fd1d8b69265f3a9f998065117b406001a64014e01f3f11447b9eaa0375aec1e6001f0e9aa02b85660da8f9a4eaffbf793ed1ce10527430c2208406dfeac5f03049b60ebdbb7ef9ee1b1", 0x4f, r1) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000001500)="e04991c736b75968c187b0c6ba7fbefabb8ed954dae98324341f5d908b13637b267e10bf341f08006d6dad5227b953d949ddb4c19ae805608c647ed7831a3fbe6b1915a320477a519983b709650cebe0b197c97b22afd990ca28b8176cdd493174988395662911cb4287394714eb69a0def8439aa292f2fca95ef064b51a5b5f8f6904da219a0de8c2280340a61ec8fa601194e5298daf85dde43560abb6a9b0f8c63d522988f11848cd93ff3028b586a1fedacd307afc22d79377f19722051bd648143fca25fc9f0eb648a799c25d1e329792ec14dd7407f0fb53bc6ab63d9847388be9b0be553b153ae0b5bf572874fb5b29cae0e9c9807c", 0xf9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r3, r0}, &(0x7f00000003c0)=""/4096, 0x1000, 0x0) 14:22:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500290b"], 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 14:22:35 executing program 0: [ 329.109100][ T17] Bluetooth: hci1: command 0x040f tx timeout 14:22:35 executing program 0: 14:22:35 executing program 1: unshare(0x38000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000004c0)={0x326, "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"}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x8a3c9, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x801}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3}) 14:22:35 executing program 0: 14:22:36 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 14:22:37 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 330.830099][ T8884] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 330.840902][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.190565][ T17] Bluetooth: hci1: command 0x0419 tx timeout 14:22:37 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 14:22:38 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x0, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) 14:22:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000004290000003e0000000100000000000000"], 0x18}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) [ 332.788729][ T50] usb 1-1: new high-speed USB device number 7 using dummy_hcd 14:22:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r6 = getpgid(r5) prctl$PR_SET_PTRACER(0x59616d61, r6) r7 = gettid() tkill(r7, 0x1004000000013) ptrace(0x10, r7) read(r3, &(0x7f0000000000), 0x20002000) [ 333.058846][ T50] usb 1-1: device descriptor read/64, error 18 [ 333.449529][ T50] usb 1-1: device descriptor read/64, error 18 [ 333.718902][ T50] usb 1-1: new high-speed USB device number 8 using dummy_hcd 14:22:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r6 = getpgid(r5) prctl$PR_SET_PTRACER(0x59616d61, r6) r7 = gettid() tkill(r7, 0x1004000000013) ptrace(0x10, r7) read(r3, &(0x7f0000000000), 0x20002000) [ 333.989536][ T50] usb 1-1: device descriptor read/64, error 18 [ 334.378549][ T50] usb 1-1: device descriptor read/64, error 18 [ 334.500245][ T50] usb usb1-port1: attempt power cycle 14:22:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r6 = getpgid(r5) prctl$PR_SET_PTRACER(0x59616d61, r6) r7 = gettid() tkill(r7, 0x1004000000013) ptrace(0x10, r7) read(r3, &(0x7f0000000000), 0x20002000) [ 335.208384][ T50] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 335.302940][ T50] usb 1-1: Invalid ep0 maxpacket: 0 [ 335.458445][ T50] usb 1-1: new high-speed USB device number 10 using dummy_hcd 14:22:41 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x0, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) [ 335.579281][ T50] usb 1-1: device descriptor read/8, error -71 14:22:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r6 = getpgid(r5) prctl$PR_SET_PTRACER(0x59616d61, r6) r7 = gettid() tkill(r7, 0x1004000000013) ptrace(0x10, r7) read(r3, &(0x7f0000000000), 0x20002000) [ 335.788909][ T50] usb 1-1: device descriptor read/8, error -71 [ 335.912402][ T50] usb usb1-port1: unable to enumerate USB device [ 336.270569][ T50] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 336.548991][ T50] usb 1-1: device descriptor read/64, error 18 14:22:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 336.939822][ T50] usb 1-1: device descriptor read/64, error 18 [ 337.208790][ T50] usb 1-1: new high-speed USB device number 12 using dummy_hcd 14:22:43 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4100, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x800c010}, 0x20000004) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000280)=0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x80401, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000300)={0x3f, 0xff, 0xfff, 0x8, 0x6, "5436ffe4f7b15ea3"}) setuid(0xee01) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$qrtr(r0, &(0x7f0000002c40)={&(0x7f0000000440)={0x2a, 0x0, 0x1}, 0xc, &(0x7f0000001900)=[{&(0x7f0000000480)="ebf7e31b9b68ee097581e1374144fb", 0xf}, {&(0x7f00000004c0)="3762338610b159b14463eff6a3938c3fe8bc4df8edeb572f9153bac5e8e7", 0x1e}, {&(0x7f0000000500)="35e72406b6ecacfdfa97d0120a6888ed5062737fb5d8c4db7ea535815a95df49b11496008e049b57667ceffd7e355eab15de7ae136bf33376bf8172383848a60acf0549b8cbb186daea2d576883b28995adf3a8f0bb6607fa2bc63abb003333a997076f4ab11bf62193e6acb2ca4fc6debf660b8f7426df85ab4ee1fe6967a1125e9551faf949e2a685430cfa9850483439bb495efa8a7990715e3ba18f5bd52a23dc16307c245a889d6b0bdd725971dee6cee1282095b1f8d7664906258115cbd43d42fd4e2a08d3aec5c9c4b10b205ccedc5241790", 0xd6}, {&(0x7f0000000600)="bc4171e4ffb1999bac2fcc5403ee8c931737fa7136d06608256a815aa250e410adfeda2398298d23c79e6df6b02565aceac7e2b93b98f3d1dd5e95677dc461b6c28c34af4832bd9119b0f09e975b73d2d5a4646e6ca792cddc81a290597848305618cb127993aaa0e8f746f7b3c7b293e0744cea45a3190940b23d86a5c3", 0x7e}, {&(0x7f0000000680)="af8fd3445d9d762b4f3002bb3bf32b4c89", 0x11}, {&(0x7f00000006c0)="befd7c66d4a11892a8d49d82b6c85d1269c1f51d37803c338168d4d497719e425060a18945a981e83f7c6856e51cb6e47b2fca8db6c31543dfa77dffc6425eb08a863940d65868a838230a2f8e996cb8232abc0f7d7dfbdcfc3da66d3420d96893ca6884e4b97e7877e08bec46d38acc5788b7aeaab66837d6877339fc7df969b6ef5bb66109f1e1feb7bf9301fe553fdc90a4", 0x93}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="c5e947e81a7f7f6829298ab18f61ce3c60448a357bec5469712abcaa5c8bb8c74d62153a01dba2c3383b2211e7ae7e688fa20259bf3eaca64e7a98f4bdf1fe5d1d1e403d7497e5ef3b6b05033f91a8e5df6e414a99957a508d51c600aadd3f2bee7afdab4951c74099e0ae87fed4c58ca617d0031aa28abed80aa6d05ab61f2230ffe42b8aeffb3504fe29687ba1e075e35991a1ceb9724076da234ed3e9cae030d9a3818e65a93f99a933cb02688d3ce4b6051158b6557e0fae83c3fe0947ebeaefd3d5700164f22719955081beb98f6c6ed6fff3feb08d54bd2fb7760b706b", 0xe0}, {&(0x7f0000001880)="b50d5830e38316251003ca14f6920d68404efcab54b04be3d6a5e7097134c9bacbf19cc323e0a2a4ba8b439081a8179f8b6eb4174683aca7d0e88df0ca75bcc957852f673153a9fc6435bcf867db714e3dcbf1b5fb682e3ff42cc25e2d7a15acd546d8ade4308e680943692e4ed3ad41e506190acf3b3de45e80dcfca7", 0x7d}], 0x9, &(0x7f00000019c0)=[{0x68, 0x1f5, 0x2, "8335dce40296df07e5a532fc00a2092751c3c676eaed2a731e952adc2542c2cc54e2319c74248dc09aba3c1804fe0385a61656245ab67b71d6ac3ccc47584fbcde0aa5f86a9e185091c647d4bf9c2843a7"}, {0x38, 0x88, 0x9, "cdb6464aa9a9a9cc561ed0839419b9d4bfd24dee2adabfb6f4377f07739448dfb18ad62026"}, {0x80, 0x115, 0xfffffff8, "492f62ee78a82c8cad5d1556aee2d17ecc970ed09ef7fb38318b1b0023aaf9d3083925b7e83c38de0ef57ffb2ea5fc9fa88060151efeed726983ed607757781b416e202e5d30c1675625319078de2a663e1daad349f3371b965c65858134f9c5ee74c04e185cebab8d1f"}, {0xc0, 0x10a, 0x7, "47eb278f35525fd7a01c3db8f1ef94249b8ca2a463e68f6f6dc464861e30109388f94382ff40ecc720d8e02a90002c6321f773404e1e3b90a7b1ac7c7c1bb4ec68bac255fa0630d1e5924a4d9f4f668bd47ad76c2b5e4959f73c4faf283365a177d2fb3f2bc576fceebed2c28d495726bf8d023a6e25d743c40af3dc2392bc18cf5bb46338839d28460c3e7cabb3f2635c0b8f96b4b8e2ab8848597e2e4739aada6397ff621d5f7a49d5fc"}, {0x48, 0x117, 0x8, "258acb8d7767298b7e44952371f7b6941b4dafdfb1bc21b0ab4a750bb00b55b2b87f98b527a35bf1e65629a092f97b3248c1f5b35980ce"}, {0x18, 0x117, 0x0, "117ccc05e0"}, {0x18, 0x0, 0x7, "134e"}, {0x1010, 0x111, 0x81, "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"}], 0x1268, 0x10}, 0x38) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002c80)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty}}, 0x4, 0x401, 0x3, 0x7f, 0x8c, 0x1, 0x6}, &(0x7f0000002d40)=0x9c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002d80)={r2, 0xc94}, 0x8) lsetxattr$security_ima(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)='security.ima\x00', &(0x7f0000002e40)=@v1={0x2, "98bbd9f3"}, 0x5, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e80)='/dev/vcsa\x00', 0x200242, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000002ec0)={0x1a, "44e5bf0c68e48729dd48133cc35f35794bad25c23a82bb1901c2a28d365330602e25d0b0c0baeb0e1af4c945d49a06f8852602ed4e43084c3a4023dd1a70a5c46f3dd68c4b27de06a6ee22cde6c025a439b128e0bdab23379a809558b053a8f22dda43550df05e854a09ec685eda6d1dcf9a20a9f2724f8123232c8215715503b96847a4c79dc3b87f063bc0667b737bfd4ac2e54d0b5fdbb75669627222294b420e1c49036ebe783020b4331805e8daf8460aab03c31fe952474877e9921b31e879d1792a24a75f60588f6a639699a097d9c2a94b7d19a02e8a370f56ac511d1c4ac995a8aaf7c2d96572975cb064c1ae5f205678f6b18cba1819b6c84456cec3b01397bc06b661053a1390923bdb032c243c99ea1caa6efd6c0fa2b5ecb65ebeb60a28105cce5110e4955ac261d6a2219be2f673c7c90348fb52a8a2d5131ef084665b617b04dd0193618a68bca1599013f41b979a15e8f6eea7f4d428d01196d68c9b074aed89a2422a2099cad935eaf90bc3050b8aab1478fa99115bcbedee2628aa1dee0172b66e63272e4301b1cc1894aea2f5617f4bb74e106a36971b0c5105c3283e5a57266aca209c94c557d05275c42d7edc97426a687a8e0570dc56adc63467d8b10415fdca471b54315fe6c67317d9d7da3a8a1cc9ed709a75afcf00d6062cb0bd49b053ee72f5ab8b47b3cd656e2355e0c5663da7a24e8d5631"}) r4 = syz_open_dev$vcsa(&(0x7f0000003100)='/dev/vcsa#\x00', 0xd0, 0x60200) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000003140)) write$P9_RRENAMEAT(r1, &(0x7f0000003180)={0x7, 0x4b, 0x2}, 0x7) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000031c0)={r0, 0x6, 0x17, 0x2}) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000003200)={r4, 0x101, 0x16, "bc98c71dc363ee4b45cf6173c92b075bbaa9cc7ef019a5a0debdce3318535013f11477ee263a3bb2da4c7e97d40871eea2a5e0d580fc086d6e8535d18fdad1cd3531c26f4b76f5d7bcc27b734586f23113a883b58b0327a12fd3c754fc2240777656b8a6b75ad4284280dfb97158ebc72e6a3ab49c8f5940c6dd3068e31673f992e523128b8b74a019b661951ef6cd55cf1768dde1cd11e51b70bfa836684e78836552c22904b888a64f246a5efc0ae418de50ed796e281ba31c3cb18fa0"}) 14:22:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() ptrace(0x10, r6) [ 337.653319][ T50] usb 1-1: device descriptor read/64, error 18 14:22:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() ptrace(0x10, r6) 14:22:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() ptrace(0x10, r6) 14:22:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) [ 338.309507][ T50] usb 1-1: device descriptor read/64, error 18 [ 338.433384][ T50] usb usb1-port1: attempt power cycle 14:22:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) 14:22:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) 14:22:45 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x0, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) 14:22:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 339.189558][ T8991] ptrace attach of "/root/syz-executor.1"[8989] was attempted by "/root/syz-executor.1"[8991] [ 339.449884][ T50] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 339.542693][ T50] usb 1-1: Invalid ep0 maxpacket: 0 [ 339.708528][ T50] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 339.754536][ T9000] IPVS: ftp: loaded support on port[0] = 21 [ 339.799514][ T50] usb 1-1: Invalid ep0 maxpacket: 0 [ 339.805768][ T50] usb usb1-port1: unable to enumerate USB device 14:22:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 340.266855][ T9030] ptrace attach of "/root/syz-executor.1"[9027] was attempted by "/root/syz-executor.1"[9030] [ 340.577742][ T9000] chnl_net:caif_netlink_parms(): no params data found [ 340.781584][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.789444][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.799426][ T9000] device bridge_slave_0 entered promiscuous mode [ 340.820264][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.827679][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.838590][ T9000] device bridge_slave_1 entered promiscuous mode 14:22:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 340.903850][ T9000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.922105][ T9000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.980047][ T9000] team0: Port device team_slave_0 added [ 340.999122][ T9000] team0: Port device team_slave_1 added [ 341.074994][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.083203][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.110234][ T9000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.146074][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.155383][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.183635][ T9000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.296818][ T9164] ptrace attach of "/root/syz-executor.1"[9163] was attempted by "/root/syz-executor.1"[9164] [ 341.388479][ T9000] device hsr_slave_0 entered promiscuous mode [ 341.417574][ T9000] device hsr_slave_1 entered promiscuous mode [ 341.440943][ T9000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.449326][ T9000] Cannot create hsr debugfs directory [ 341.509166][ T8850] Bluetooth: hci2: command 0x0409 tx timeout [ 341.891345][ T9000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.947310][ T9000] netdevsim netdevsim2 netdevsim1: renamed from eth1 14:22:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 341.988843][ T9000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.026238][ T9000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.337484][ T9226] ptrace attach of "/root/syz-executor.1"[9225] was attempted by "/root/syz-executor.1"[9226] [ 342.758102][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.802772][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.812032][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.837279][ T9000] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.865426][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.876199][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.885668][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.893056][ T8850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.960933][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.970688][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.980791][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.990147][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.997474][ T8850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.006943][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.018030][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.029156][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.039695][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.063180][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.096824][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.107920][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.193784][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.203713][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.213440][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.224287][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.249399][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.364947][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.373460][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.410389][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.552909][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.563826][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.631214][ T8850] Bluetooth: hci2: command 0x041b tx timeout [ 343.662913][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.673948][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.704164][ T9000] device veth0_vlan entered promiscuous mode [ 343.713289][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.722771][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.771884][ T9000] device veth1_vlan entered promiscuous mode [ 343.856366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.866262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.876149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.886950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.911144][ T9000] device veth0_macvtap entered promiscuous mode [ 343.933792][ T9000] device veth1_macvtap entered promiscuous mode [ 343.997878][ T9000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 344.009119][ T9000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.019931][ T9000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 344.030640][ T9000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.044875][ T9000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.054680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.064931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.074687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.085109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.112977][ T9000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 344.123701][ T9000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.135036][ T9000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 344.146764][ T9000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.161097][ T9000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.171429][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.181830][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.217011][ T9000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.226504][ T9000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.235683][ T9000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.244892][ T9000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.625126][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.633429][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.642016][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.754296][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.762326][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.772071][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:22:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:22:51 executing program 0: syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x5, 0x3f, "7838737cd5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x40, 0x7, 0x54, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x9], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x5, 0xb8b, 0x4, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "f8e3c3"}]}]}}]}}]}}, 0x0) 14:22:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 345.570457][ T9267] ptrace attach of "/root/syz-executor.1"[9264] was attempted by "/root/syz-executor.1"[9267] [ 345.610594][ T9268] ptrace attach of "/root/syz-executor.2"[9266] was attempted by "/root/syz-executor.2"[9268] [ 345.680716][ T2990] Bluetooth: hci2: command 0x040f tx timeout [ 345.688470][ T8493] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 345.928436][ T8493] usb 1-1: Using ep0 maxpacket: 32 [ 346.048834][ T8493] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 346.058054][ T8493] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 346.070884][ T8493] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 14:22:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) 14:22:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 346.239772][ T8493] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 346.249728][ T8493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.258968][ T8493] usb 1-1: Product: syz [ 346.263245][ T8493] usb 1-1: Manufacturer: syz [ 346.267950][ T8493] usb 1-1: SerialNumber: syz [ 346.279701][ T8493] usb 1-1: config 0 descriptor?? [ 346.328287][ T8493] usb 1-1: invalid MIDI EP [ 346.332849][ T8493] usb 1-1: snd-bcd2000: error during probing [ 346.339885][ T8493] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 346.525258][ T2990] usb 1-1: USB disconnect, device number 15 [ 346.581698][ T9284] ptrace attach of "/root/syz-executor.1"[9278] was attempted by "/root/syz-executor.1"[9284] [ 346.657512][ T9286] ptrace attach of "/root/syz-executor.2"[9285] was attempted by "/root/syz-executor.2"[9286] 14:22:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d, 0x0, [@hid_hid={0x9, 0x21, 0xfff, 0x3f, 0x1, {0x22, 0x80a}}]}}]}}]}}, 0x0) 14:22:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:22:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 347.652062][ T9301] ptrace attach of "/root/syz-executor.2"[9298] was attempted by "/root/syz-executor.2"[9301] [ 347.730302][ T8850] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 347.754500][ T4733] Bluetooth: hci2: command 0x0419 tx timeout [ 347.980351][ T8850] usb 1-1: Using ep0 maxpacket: 32 14:22:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() ptrace(0x10, r5) 14:22:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 348.260264][ T8850] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 348.269895][ T8850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.278694][ T8850] usb 1-1: Product: syz [ 348.282989][ T8850] usb 1-1: Manufacturer: syz [ 348.287723][ T8850] usb 1-1: SerialNumber: syz [ 348.304445][ T8850] usb 1-1: config 0 descriptor?? [ 348.398954][ T8850] usb 1-1: invalid MIDI EP [ 348.403641][ T8850] usb 1-1: snd-bcd2000: error during probing [ 348.410550][ T8850] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 348.557923][ T8850] usb 1-1: USB disconnect, device number 16 14:22:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() ptrace(0x10, r5) 14:22:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) r5 = gettid() ptrace(0x10, r5) 14:22:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) 14:22:55 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d}}]}}]}}, 0x0) 14:22:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) 14:22:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:22:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r4) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) [ 349.760167][ T4733] usb 1-1: new high-speed USB device number 17 using dummy_hcd 14:22:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 350.018447][ T4733] usb 1-1: Using ep0 maxpacket: 32 [ 350.216111][ T9351] ptrace attach of "/root/syz-executor.2"[9352] was attempted by "/root/syz-executor.2"[9351] 14:22:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 350.311596][ T4733] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 350.320937][ T4733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.329259][ T4733] usb 1-1: Product: syz [ 350.333620][ T4733] usb 1-1: Manufacturer: syz [ 350.338537][ T4733] usb 1-1: SerialNumber: syz [ 350.456805][ T4733] usb 1-1: config 0 descriptor?? [ 350.508797][ T4733] usb 1-1: invalid MIDI EP [ 350.513356][ T4733] usb 1-1: snd-bcd2000: error during probing [ 350.520612][ T4733] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 350.723082][ T4733] usb 1-1: USB disconnect, device number 17 14:22:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 351.171336][ T9369] ptrace attach of "/root/syz-executor.2"[9368] was attempted by "/root/syz-executor.2"[9369] 14:22:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) 14:22:57 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 14:22:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 352.050426][ T2990] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 352.140821][ T9383] ptrace attach of "/root/syz-executor.2"[9382] was attempted by "/root/syz-executor.2"[9383] [ 352.309447][ T2990] usb 1-1: Using ep0 maxpacket: 32 14:22:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 352.593034][ T2990] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 352.602461][ T2990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.610914][ T2990] usb 1-1: Product: syz [ 352.615202][ T2990] usb 1-1: Manufacturer: syz [ 352.620186][ T2990] usb 1-1: SerialNumber: syz [ 352.732275][ T2990] usb 1-1: config 0 descriptor?? 14:22:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x0) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 352.777363][ T2990] usb 1-1: invalid MIDI EP [ 352.782606][ T2990] usb 1-1: snd-bcd2000: error during probing [ 352.789520][ T2990] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 352.977602][ T2990] usb 1-1: USB disconnect, device number 18 [ 353.209837][ T9400] ptrace attach of "/root/syz-executor.2"[9399] was attempted by "/root/syz-executor.2"[9400] 14:22:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 353.758730][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd 14:23:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 354.006178][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 354.223247][ T9411] ptrace attach of "/root/syz-executor.2"[9410] was attempted by "/root/syz-executor.2"[9411] [ 354.311044][ T7] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 354.320417][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.328801][ T7] usb 1-1: Product: syz [ 354.333345][ T7] usb 1-1: Manufacturer: syz [ 354.338236][ T7] usb 1-1: SerialNumber: syz [ 354.385688][ T7] usb 1-1: config 0 descriptor?? 14:23:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 354.438866][ T7] usb 1-1: invalid MIDI EP [ 354.443572][ T7] usb 1-1: snd-bcd2000: error during probing [ 354.450656][ T7] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 354.675503][ T7] usb 1-1: USB disconnect, device number 19 14:23:01 executing program 0: syz_usb_connect(0x0, 0x25f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf9, 0x25, 0x5, 0x20, 0x12d1, 0xfb57, 0xc860, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x6, 0xff, 0x4, 0x7b, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x20, 0x3, [@generic={0x12, 0x21, "ead9781e68c73a6689583a80197bb12a"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x408, 0x3f, 0x8, 0x1f, [@generic={0xfc, 0x6, "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"}, @generic={0x6e, 0x6, "e5032578e79023b7a5337969f3e99f06d84714899a7019c8a21cef7d86bb4a6203e8158373cfc852f384deecf005653c956a65f3f2e070657a9187280d9ecb1442172e65b661e748365bca3f9da84d24117293c47d1f0b3cd709f43cdd65f2f0921b78a62a6f3ce60d3c6749"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x9, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x40}]}}, {{0x9, 0x5, 0x5, 0x0, 0x1ff, 0x81, 0x3, 0x7f}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x3, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}, @generic={0x7b, 0x30, "c6132e1d987abf333cc249cd38e4e47e62defc6821645325d8f5a2d5f10c48baba6fcfe54264697448e8ba357889151c8dd8089d18cf2d14a3c993b88853ca80fe0e43b5b01344514a6dbf05aaedc42b503597873aad327074ba6df3309d29c331d08955b28b129f4676a2367ebc33d4477e134b52a8288483"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x80, 0x1}}]}}]}}]}}, 0x0) 14:23:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 355.361811][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd 14:23:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 355.619147][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 355.751592][ T7] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 355.760073][ T7] usb 1-1: config 0 has no interface number 0 [ 355.766408][ T7] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0xB has invalid maxpacket 1032, setting to 64 [ 355.777745][ T7] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x5 has invalid maxpacket 511, setting to 64 [ 355.788934][ T7] usb 1-1: config 0 interface 16 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 355.993302][ T7] usb 1-1: New USB device found, idVendor=12d1, idProduct=fb57, bcdDevice=c8.60 [ 356.002809][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.011198][ T7] usb 1-1: Product: syz [ 356.015651][ T7] usb 1-1: Manufacturer: syz [ 356.021219][ T7] usb 1-1: SerialNumber: syz [ 356.034810][ T7] usb 1-1: config 0 descriptor?? [ 356.084652][ T7] option 1-1:0.16: GSM modem (1-port) converter detected [ 356.286146][ T50] usb 1-1: USB disconnect, device number 20 [ 356.297401][ T50] option 1-1:0.16: device disconnected 14:23:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 357.088567][ T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 357.338710][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 357.481420][ T7] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 357.489980][ T7] usb 1-1: config 0 has no interface number 0 [ 357.496335][ T7] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0xB has invalid maxpacket 1032, setting to 64 [ 357.507666][ T7] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x5 has invalid maxpacket 511, setting to 64 [ 357.518809][ T7] usb 1-1: config 0 interface 16 altsetting 0 has an invalid endpoint with address 0x80, skipping 14:23:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x5, 0x7, r0, 0x0, &(0x7f0000000080)={0x980928, 0x4, [], @string=&(0x7f0000000040)=0x4c}}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd28, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x40098c4) connect$caif(0xffffffffffffffff, &(0x7f0000000200)=@util={0x25, "68624690be08714021132478c2247a8b"}, 0x18) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0x1, 0x101, 0x7, {0x8, 0x3f, 0x3, 0xcf5}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb0c}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) vmsplice(r0, &(0x7f0000000980)=[{&(0x7f0000000400)="d10f356714943ab745f069d6ba5ebe4ee644b09c1f1af1384cf8a69577c2b4bc9874c62340495ec6f101592d00b3d13963a4781f727cb397e21af55c2c23ad0f109264f309071c3ba1c7d0c43aeabc76a9888f4e6068ea5595decd2cd73499a1a753f344247f62c97f8f23dbc2df72940322991eb6e057ec0bb6d87a183a19539698766a0421bb840e32c68804806029dfdcb2f7c7afd83c3346b7a9be548f3d0fd7d5e59933d79a5b74290f683253c7fdf663d0abb0d84c77f0c61d50b2f9141d8cd947b0044e82c1ebd2d0e857e02d1a", 0xd1}, {&(0x7f0000000500)="1773343c593f5268919cb8c0dd28a48f2671a54c45b0c065e4f6f1a68a7df2f941a22eac2e5bccfe693b65606118af6eca43cf8ed7c558c6b536b4269d4d3a11a939efab649b97e68b96d997aefa4858be62b6effd1a0f67c8e353db4b8a709df7606c425945b47f6267441b3e31cdc3321d92451db58a1cb535", 0x7a}, {&(0x7f0000000580)="318cd0da05ea137c078044170ac60c87acda5a7de89b461fceb8dc84cd9cfce83811fc", 0x23}, {&(0x7f00000005c0)="76edf85247564ef1beadd4883c163808cb6fd0e4840a3e4a3da969ce6649817cfdd096502b05268c1d1ef0ef599f5b135d978c9717068da64f2c25a2415a153bddc64ab0bc7327bac8bdc20775552c78dfd9ff36b791093f814c8c9dc13e8d9dec999c0459175844f4d9489dece543a40194418c8b9245edae40ecb4ee217d2e18da0200ac9954cea9d8085b8ff8bb3fbd2433ea227a15bbac16150ca3735dd2e8", 0xa1}, {&(0x7f0000000680)="3ce4f68eed85c34910ab6126bd230837d1114f88e4fda0cef6f9035551a4f3c23375b23566d3c18b0606f8e623ece8140a656ec09702693fc733e11142e1f10aa7b03d06df135898a06415bc2f03e5de3ba3d558ac503748f9746e21e73fc664309f39893470ae5c5145142a9278462552fb2787556226f4fab9c9d0eae6652d10a8b84d5ad00e5cd76e65bd1dc4a05b8a15c19d36a5", 0x96}, {&(0x7f0000000740)="c289b0a83c65b96e4ba02f4ea22069c6c0bddebb6de926729ce6bcbeeb57e1be55ac188396b1794ff2ab5dd51ac3f6a2e2f911ab1e5f2409da788223d18c40649bbd80d8484beb4adf2282fd8515d2", 0x4f}, {&(0x7f00000007c0)="188a8d031269deed1ccba03bd8073fd108b6aeea503bd57429d938f05cbca8c2df94d3987a7e93c523a863133d6183df9d80fd7671c96dc910650da22ff4689e4f9a016459a62a6659c0e4c5bbcca934a4147eb8e67d46cacf22b0b1d70a0a0270e9083ab8c0de6564a42c4d6942da54c120cb9bcc6ad27d6d07a6998f075b2b5e1e014f2d2d13f314d5bee04c53b2b25684d72cc688b93f43c58630ea26184c0feda07081e246b5bb718b5cde37dc5978392545e57294dbce24e28008bc385dd0d077f4423d3be89c1887b41c1f2a6133ccb3bf317cc08da46a937493f8f65e7888547b36848d3ce8063ee82a3f245ef6e2426e8a29306795", 0xf9}, {&(0x7f00000008c0)="e6dfc0af1b1865df62f1d88671af2228562c635dd6dfd43dc0869099b5d98ea7b12d33b8b1e1b6e5a1e24414f67666d6b19b4a45ae7931d8f292d7d8bafdf000ff23a528e131c28902030e5b785052c190517297b6299d0210f3fbf90f32c83f55b388e8f2c94768db61930276e537bd554b67dcea37939e769db66c52ea67765d14a30012e529036dddba5a626ba7758f880ab07d0212c382a2df4959e7974ae7524c98d5426cec362bf779d7452ec6f71d08298ef0deaa1831204d94cec924", 0xc0}], 0x8, 0x9) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000a00)={@initdev, @dev, @initdev}, &(0x7f0000000a40)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000a80)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0xd82f}}, 0xb1a8}, 0x90) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000b40)=@ccm_128={{0x304}, "7e1e4eae9107d514", "17e9421844c9faaf5d6c4d58a1306f66", "3c47932f", "a1ea10395c789394"}, 0x28) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000b80)={0x7, 0x1b, 0x1}, 0x7) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000bc0)) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000c00)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000c40)) pipe(&(0x7f0000000c80)) [ 357.722432][ T7] usb 1-1: New USB device found, idVendor=12d1, idProduct=fb57, bcdDevice=c8.60 [ 357.731784][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.995447][ T7] usb 1-1: Product: syz [ 358.003322][ T7] usb 1-1: Manufacturer: syz [ 358.008244][ T7] usb 1-1: SerialNumber: syz [ 358.071508][ T7] usb 1-1: config 0 descriptor?? 14:23:04 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="c6583bcc174aae038212010000b29072209713bd00e40a010203e7080212000100000000"], 0x0) [ 358.268815][ T7] usb 1-1: can't set config #0, error -71 [ 358.284480][ T7] usb 1-1: USB disconnect, device number 21 14:23:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 358.909858][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 359.201587][ T7] usb 1-1: device descriptor read/64, error 18 [ 359.618419][ T7] usb 1-1: device descriptor read/64, error 18 14:23:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 359.889237][ T7] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 360.117305][ T9484] IPVS: ftp: loaded support on port[0] = 21 [ 360.168664][ T7] usb 1-1: device descriptor read/64, error 18 [ 360.558435][ T7] usb 1-1: device descriptor read/64, error 18 [ 360.679132][ T7] usb usb1-port1: attempt power cycle [ 360.965746][ T9484] chnl_net:caif_netlink_parms(): no params data found [ 361.157792][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.165433][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.175340][ T9484] device bridge_slave_0 entered promiscuous mode [ 361.249322][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.256647][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.266448][ T9484] device bridge_slave_1 entered promiscuous mode [ 361.361926][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.385254][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.430180][ T7] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 361.451931][ T9484] team0: Port device team_slave_0 added [ 361.470319][ T9484] team0: Port device team_slave_1 added [ 361.520650][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.527780][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.554341][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 14:23:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) 14:23:08 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b109a4c62e7967ac07331b29072209713bd00e40a01020301091fc4760f269d2f66c3e49c34f13a2b9448e7a6ed11ba32c3240d8be7fb7b3e0473cbfb3511c33cbb8d33783ce6d6cfd7b3324e64d05125fba9b4b8442a1e79d3fe8c24d7aca21bb7e01c9ef5a3d73bc79440884a581d90b0c0ff1df20e9d94a0718febe14ad853cc23be000000000000"], 0x0) [ 361.643797][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.651313][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.678987][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.718469][ T7] usb 1-1: device descriptor read/8, error -71 [ 361.827003][ T9484] device hsr_slave_0 entered promiscuous mode [ 361.881949][ T9484] device hsr_slave_1 entered promiscuous mode [ 361.910735][ T8850] Bluetooth: hci3: command 0x0409 tx timeout [ 361.920754][ T9484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.928875][ T9484] Cannot create hsr debugfs directory [ 361.941081][ T7] usb 1-1: device descriptor read/8, error -71 [ 362.440557][ T7] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 362.549388][ T7] usb 1-1: Invalid ep0 maxpacket: 76 [ 362.555845][ T7] usb usb1-port1: unable to enumerate USB device [ 362.597349][ T9484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.624938][ T9484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.688524][ T9484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.734000][ T9484] netdevsim netdevsim3 netdevsim3: renamed from eth3 14:23:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 363.513504][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.620274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.629712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.654649][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.679547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.689887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.699473][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.706891][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.770030][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.779955][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.789886][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.799385][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.806649][ T4733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.815961][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.827200][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.857380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.868707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.930022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.940434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.951418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.962781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.972747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.993034][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 364.011566][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.022716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.040140][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 364.115017][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 364.124438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 364.167017][ T9484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.243618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 364.254594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.354296][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.364387][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.379878][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.391366][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.415605][ T9484] device veth0_vlan entered promiscuous mode [ 364.463800][ T9484] device veth1_vlan entered promiscuous mode [ 364.574087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 364.583963][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 364.593791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.604295][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.645356][ T9484] device veth0_macvtap entered promiscuous mode [ 364.680579][ T9484] device veth1_macvtap entered promiscuous mode [ 364.742281][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.753004][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.763645][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.775172][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.785463][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.796367][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.811577][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.824341][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.835382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 364.845275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.855850][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 14:23:11 executing program 0: syz_usb_connect(0x0, 0x18c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa5, 0xb3, 0x1, 0x20, 0x413c, 0x81b6, 0x8e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x5, 0x1b, 0x93, 0x5, 0x0, [], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x80, 0x3f, [@generic={0x38, 0xf, "e723c72980dc9744cf4bacf6b05301c1ba9a8b7a1a1e98ea05419601ce683e0649feee0c14725bd5a241e1d4270957e6ba11d8c971b4"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x1, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x1, 0xa, 0x10, 0x3f, 0x1, 0x7, [@generic={0x73, 0x5, "e524f2027cedd9ef380fa90e97b34330f44296e8ef5e731be3681963dd99ae4e5145f1ff9a4f07da969d7a04093faf9185ab40b3164a0cd0fcae6272aacddf63c99c81680ad1a69f6f8feb21a5ce3ea994ecb5d8ee61b0b05b919fce0606da94ef61c8f8c06600c845196540b104bc41e8"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x101}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x1, 0x9, 0x81, [@generic={0x7b, 0x6, "b1d9901d8f96b2cb95fbeafe29b57e5cde368aa56ef460585a1375ae6d18e43676c0cad012306b4967083a9193c3bb28f2e3dee92d953a548a0e6284f9609200ad6d38cd110df5d84a6d7ae7ae1c0486dcb0150ae0a66fb14e189e747b9fb375ade1e4973b2f6d85a7d9e05f5b057b85234fae4778b1000acb"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6cfe}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0x40, 0x1f}}]}}]}}]}}, 0x0) 14:23:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 365.115244][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.126459][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.136737][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.148718][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.159242][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.169934][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.184478][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.196058][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 365.206589][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.411272][ T9718] ptrace attach of "/root/syz-executor.2"[9717] was attempted by "/root/syz-executor.2"[9718] [ 365.422012][ T9484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.422143][ T9484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.440726][ T9484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.449779][ T9484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.511819][ T17] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 365.768774][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 365.927961][ T17] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 365.936580][ T17] usb 1-1: config 0 has no interface number 0 [ 365.943063][ T17] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 365.953074][ T17] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xE5, skipping [ 365.963879][ T17] usb 1-1: config 0 interface 8 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 14:23:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 366.097403][ T5] Bluetooth: hci3: command 0x040f tx timeout 14:23:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 366.373518][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.382041][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.469110][ T17] usb 1-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=8e.39 [ 366.477109][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.479350][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.494369][ T17] usb 1-1: Product: syz [ 366.498802][ T17] usb 1-1: Manufacturer: syz [ 366.504309][ T17] usb 1-1: SerialNumber: syz [ 366.569758][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.577219][ T9742] ptrace attach of "/root/syz-executor.2"[9741] was attempted by "/root/syz-executor.2"[9742] [ 366.578872][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.597624][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 366.732954][ T17] usb 1-1: config 0 descriptor?? [ 366.761227][ T9713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 367.031263][ T17] usb 1-1: USB disconnect, device number 26 14:23:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) 14:23:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 367.676736][ T9764] ptrace attach of "/root/syz-executor.2"[9765] was attempted by "/root/syz-executor.2"[9764] 14:23:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x202280, 0x0) read(r1, &(0x7f0000000140)=""/18, 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "02e1000000060e008946e3c600fd8400"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c45", 0x79}, {&(0x7f0000000400)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {0x0}], 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="7e0bf71c8a56ab91065979a24a8b31e17317da680a6980b060d4e2da197e84efb6bff63647f3a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ca02c0717a387e82a876e1e0"], 0xa8}], 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000002600)={{}, {}, [{0x2, 0x4}, {0x2, 0x1, 0xee01}, {0x2, 0x4}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x8, 0xee00}, {0x2, 0x5}, {0x2, 0x6}], {}, [{}, {0x8, 0x2, 0xee01}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x4, 0xee01}, {0x8, 0x6}], {0x10, 0x1}}, 0xac, 0x2) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, r7, 0x2) write$P9_RATTACH(r2, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r2, 0x4, 0x40800) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="d80000001b000100000000000000000000000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000084f1c11c3366d7980eb95517eb6e5206b6f52fb8eb32d5a98978465fc50938d58b9bdbee1437b81489dacbd8d961cb6de70d69387aae8799d2b4e8cf6e63d293f84c2215f3d29cf21d1ba10168108e7bb9f17fbb580e48063941d04cc05c8a962e205cc9edab19781d0ecb03fb7770eb11b7eb16c4685c6552d490", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0xd8}}, 0x0) [ 367.848832][ T4733] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 368.112368][ T4733] usb 1-1: Using ep0 maxpacket: 32 [ 368.132338][ T9773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.148791][ T8850] Bluetooth: hci3: command 0x0419 tx timeout [ 368.261208][ T4733] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 368.269559][ T4733] usb 1-1: config 0 has no interface number 0 [ 368.275818][ T4733] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 368.285958][ T4733] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xE5, skipping [ 368.296823][ T4733] usb 1-1: config 0 interface 8 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 14:23:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) 14:23:14 executing program 0: syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 14:23:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="dabaa9045b7ce5f19f267587d8c7008e", 0x10) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = gettid() tkill(r6, 0x1004000000013) ptrace(0x10, r6) [ 368.661984][ T4733] usb 1-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=8e.39 [ 368.671366][ T4733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.692653][ T9780] ptrace attach of "/root/syz-executor.2"[9778] was attempted by "/root/syz-executor.2"[9780] [ 368.753250][ T4733] usb 1-1: config 0 descriptor?? [ 368.835351][ T4733] usb 1-1: can't set config #0, error -71 [ 368.896615][ T4733] usb 1-1: USB disconnect, device number 27 14:23:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x202280, 0x0) read(r1, &(0x7f0000000140)=""/18, 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "02e1000000060e008946e3c600fd8400"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c45", 0x79}, {&(0x7f0000000400)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {0x0}], 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="7e0bf71c8a56ab91065979a24a8b31e17317da680a6980b060d4e2da197e84efb6bff63647f3a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ca02c0717a387e82a876e1e0"], 0xa8}], 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000002600)={{}, {}, [{0x2, 0x4}, {0x2, 0x1, 0xee01}, {0x2, 0x4}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x8, 0xee00}, {0x2, 0x5}, {0x2, 0x6}], {}, [{}, {0x8, 0x2, 0xee01}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x4, 0xee01}, {0x8, 0x6}], {0x10, 0x1}}, 0xac, 0x2) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, r7, 0x2) write$P9_RATTACH(r2, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r2, 0x4, 0x40800) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="d80000001b000100000000000000000000000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000084f1c11c3366d7980eb95517eb6e5206b6f52fb8eb32d5a98978465fc50938d58b9bdbee1437b81489dacbd8d961cb6de70d69387aae8799d2b4e8cf6e63d293f84c2215f3d29cf21d1ba10168108e7bb9f17fbb580e48063941d04cc05c8a962e205cc9edab19781d0ecb03fb7770eb11b7eb16c4685c6552d490", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0xd8}}, 0x0) 14:23:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 369.381738][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:23:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffff4a, r2, 0x8, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008884}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b29072209713bdd1d30a010203010902120001000000000904000000d0123d00"], 0x0) inotify_init1(0x800) 14:23:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 369.804922][ T9801] ptrace attach of "/root/syz-executor.2"[9800] was attempted by "/root/syz-executor.2"[9801] 14:23:16 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 370.231129][ T4733] usb 1-1: new high-speed USB device number 28 using dummy_hcd 14:23:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 370.489073][ T4733] usb 1-1: Using ep0 maxpacket: 32 [ 370.658468][ T9812] IPVS: ftp: loaded support on port[0] = 21 14:23:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 370.799837][ T4733] usb 1-1: New USB device found, idVendor=1397, idProduct=d1bd, bcdDevice= a.d3 [ 370.809118][ T4733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.817239][ T4733] usb 1-1: Product: syz [ 370.821818][ T4733] usb 1-1: Manufacturer: syz [ 370.826535][ T4733] usb 1-1: SerialNumber: syz [ 370.860797][ T9825] ptrace attach of "/root/syz-executor.2"[9816] was attempted by "/root/syz-executor.2"[9825] [ 370.995025][ T4733] usb 1-1: config 0 descriptor?? [ 371.246664][ T4733] usb 1-1: USB disconnect, device number 28 14:23:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 371.596475][ T9851] IPVS: ftp: loaded support on port[0] = 21 14:23:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) 14:23:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x8, 0xff, 0x4}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d}}]}}]}}, 0x0) [ 372.458506][ T8493] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 372.698718][ T8493] usb 1-1: Using ep0 maxpacket: 32 14:23:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 372.992042][ T8493] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 373.001537][ T8493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.010156][ T8493] usb 1-1: Product: syz [ 373.014444][ T8493] usb 1-1: Manufacturer: syz [ 373.019444][ T8493] usb 1-1: SerialNumber: syz [ 373.137749][ T8493] usb 1-1: config 0 descriptor?? [ 373.193710][ T8493] usb 1-1: invalid MIDI EP [ 373.198493][ T8493] usb 1-1: snd-bcd2000: error during probing [ 373.205325][ T8493] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 373.393458][ T8493] usb 1-1: USB disconnect, device number 29 14:23:19 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:23:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 374.056470][ T9913] IPVS: ftp: loaded support on port[0] = 21 [ 374.198506][ T8493] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 374.439518][ T8493] usb 1-1: Using ep0 maxpacket: 32 [ 374.508078][ C1] hrtimer: interrupt took 210175 ns [ 374.728525][ T8493] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 374.737840][ T8493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.746958][ T8493] usb 1-1: Product: syz [ 374.751600][ T8493] usb 1-1: Manufacturer: syz [ 374.756471][ T8493] usb 1-1: SerialNumber: syz 14:23:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 374.936119][ T8493] usb 1-1: config 0 descriptor?? [ 375.000432][ T8493] usb 1-1: invalid MIDI EP [ 375.005003][ T8493] usb 1-1: snd-bcd2000: error during probing [ 375.011907][ T8493] snd-bcd2000: probe of 1-1:0.0 failed with error -22 14:23:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = getpgid(r1) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 375.362707][ T17] usb 1-1: USB disconnect, device number 30 [ 375.403347][ T9954] ptrace attach of "/root/syz-executor.2"[9950] was attempted by "/root/syz-executor.2"[9954] 14:23:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) 14:23:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = getpgid(r1) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 376.587694][ T9970] ptrace attach of "/root/syz-executor.2"[9966] was attempted by "/root/syz-executor.2"[9970] 14:23:23 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:23:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1004000000013) ptrace(0x10, r0) 14:23:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = getpgid(r1) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = gettid() tkill(r3, 0x1004000000013) ptrace(0x10, r3) [ 377.647819][ T9975] IPVS: ftp: loaded support on port[0] = 21 [ 377.679240][ T9981] ptrace attach of "/root/syz-executor.2"[9979] was attempted by "/root/syz-executor.2"[9981] 14:23:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1004000000013) ptrace(0x10, r0) 14:23:24 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:23:24 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 378.750132][T10012] ptrace attach of "/root/syz-executor.2"[10011] was attempted by "/root/syz-executor.2"[10012] [ 378.930532][T10013] IPVS: ftp: loaded support on port[0] = 21 14:23:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1004000000013) ptrace(0x10, r0) 14:23:25 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 379.755710][T10044] ptrace attach of "/root/syz-executor.2"[10045] was attempted by "/root/syz-executor.2"[10044] 14:23:26 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) 14:23:27 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 380.761772][T10055] ptrace attach of "/root/syz-executor.2"[10054] was attempted by "/root/syz-executor.2"[10055] 14:23:27 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) 14:23:28 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 381.806912][T10065] ptrace attach of "/root/syz-executor.2"[10063] was attempted by "/root/syz-executor.2"[10065] 14:23:28 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 382.415486][T10071] IPVS: ftp: loaded support on port[0] = 21 14:23:28 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) 14:23:29 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 382.933511][T10098] ptrace attach of "/root/syz-executor.2"[10097] was attempted by "/root/syz-executor.2"[10098] 14:23:29 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 383.407779][T10104] IPVS: ftp: loaded support on port[0] = 21 14:23:29 executing program 0: syz_usb_connect(0x2, 0x1b8, &(0x7f00000002c0)=ANY=[@ANYBLOB="f6f8f03503f858d1a31282e45ce4d4ed8354deadc7a0812528b427b64562284a9188d64ed6", @ANYBLOB="950e6feb0e90b772fd3685d7d4722d54b7419af7a63890222b1736e4d5247c80b25e01c66a35dfd9444f4e52d23e3afcbe78645404762879fd850edaa83244e6d6a6f3084253a9f3e0744e10d79c802bf0757f40c51b65951c4e82fb3e6d45b201b9975097f6f8db47e234f72820d9de5ae5a96bff4e128363a6e7f30b177df94705f7a71352b9", @ANYRESDEC, @ANYRESDEC], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x101000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "02e1000000060e008946e3c600fd8400"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r2, 0x4000000000000002) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000280)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "02e1000000060e008946e3c600fd8400"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x424000, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000140)={0x5, 0x80000000, 0x55f7fde2, 0x8, 0x7, 0x1}) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x4200) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000240)='^*#::\\#(\x0f^,\'\\-,\x00', 0x10) r5 = syz_open_pts(r1, 0x4000000000000002) dup3(r5, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) 14:23:29 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) 14:23:30 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 14:23:30 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 383.998797][ T8493] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 384.030180][T10135] IPVS: ftp: loaded support on port[0] = 21 [ 384.066029][T10138] ptrace attach of "/root/syz-executor.2"[10134] was attempted by "/root/syz-executor.2"[10138] [ 384.288691][ T8493] usb 1-1: device descriptor read/64, error 18 14:23:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 384.688749][ T8493] usb 1-1: device descriptor read/64, error 18 14:23:31 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 384.959265][ T8493] usb 1-1: new full-speed USB device number 32 using dummy_hcd 14:23:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 385.141747][T10171] ptrace attach of "/root/syz-executor.2"[10172] was attempted by "/root/syz-executor.2"[10171] [ 385.185498][T10169] IPVS: ftp: loaded support on port[0] = 21 [ 385.238548][ T8493] usb 1-1: device descriptor read/64, error 18 [ 385.651540][ T8493] usb 1-1: device descriptor read/64, error 18 14:23:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 385.779673][ T8493] usb usb1-port1: attempt power cycle 14:23:32 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:23:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 386.192928][T10204] ptrace attach of "/root/syz-executor.2"[10202] was attempted by "/root/syz-executor.2"[10204] 14:23:32 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:23:32 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 386.531207][ T8493] usb 1-1: new full-speed USB device number 33 using dummy_hcd 14:23:33 executing program 0: syz_usb_connect(0x6, 0xffffffffffffffcb, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x8c, 0xe1, 0x4a, 0x20, 0x13e5, 0x1, 0x24d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa7, 0x0, 0x2, 0x31, 0x6d, 0xf5, 0x0, [], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x7, 0x9, 0x85}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0x40, 0x0, [@generic={0xdc, 0xc, "7f5d337c2022efe4ce6c80bde2eb720863cefec3f5f9a90c944722937838adbcc2a440000000b2822a47b04ef232334cd24c069fbe9d51170000000000007ee65f365dc11ed544f7e6a76be568db386c4ef92690ab6ed0d154f36de418b349cc2ec4885270999d2b2c60ee9d5699e9beee99faa17a79fc813ddd96e1a48c3d68d016388ed018bfb8cb4b72ce04fd3c114412f2c230ecd859c39d3696529ae3465d316cfc66b1d1e90b629edd0e63f1f2546ba9982f07e3a68303fcd3abfaeaf7e7dceccc4e8f5e3a75d66237810949b5fdd2205c768a1e000000"}]}}]}}]}}]}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = dup3(r0, r1, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @dev}, &(0x7f0000000040)=0xc) 14:23:33 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 14:23:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 387.068362][ T8493] usb 1-1: device descriptor read/8, error -71 14:23:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 387.280966][ T8493] usb 1-1: device descriptor read/8, error -71 [ 387.316653][T10227] ptrace attach of "/root/syz-executor.2"[10223] was attempted by "/root/syz-executor.2"[10227] [ 387.428510][T10225] IPVS: ftp: loaded support on port[0] = 21 14:23:34 executing program 4: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:23:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) 14:23:34 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 14:23:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) 14:23:34 executing program 0: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) fsopen(&(0x7f0000000040)='reiserfs\x00', 0x1) [ 388.537199][T10267] ptrace attach of "/root/syz-executor.2"[10263] was attempted by "/root/syz-executor.2"[10267] [ 388.662166][T10264] IPVS: ftp: loaded support on port[0] = 21 14:23:35 executing program 0: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x8, 0x5}}, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d}}]}}]}}, 0x0) 14:23:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) 14:23:35 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 14:23:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 389.518113][ T5] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 389.690307][T10308] ptrace attach of "/root/syz-executor.2"[10304] was attempted by "/root/syz-executor.2"[10308] [ 389.776438][T10305] IPVS: ftp: loaded support on port[0] = 21 [ 389.794832][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 390.111539][ T5] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 390.125715][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.137237][ T5] usb 1-1: Product: syz [ 390.144516][ T5] usb 1-1: Manufacturer: syz [ 390.158130][ T5] usb 1-1: SerialNumber: syz 14:23:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) 14:23:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 390.475604][ T5] usb 1-1: config 0 descriptor?? [ 390.533053][ T5] usb 1-1: invalid MIDI EP [ 390.539502][ T5] usb 1-1: snd-bcd2000: error during probing [ 390.546886][ T5] snd-bcd2000: probe of 1-1:0.0 failed with error -22 14:23:37 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 390.798617][ T5] usb 1-1: USB disconnect, device number 35 [ 390.919985][T10342] ptrace attach of "/root/syz-executor.2"[10343] was attempted by "/root/syz-executor.2"[10342] [ 391.287817][T10347] IPVS: ftp: loaded support on port[0] = 21 [ 392.613952][T10379] IPVS: ftp: loaded support on port[0] = 21 [ 393.495653][T10379] chnl_net:caif_netlink_parms(): no params data found [ 394.052637][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.060664][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.071421][T10379] device bridge_slave_0 entered promiscuous mode [ 394.217436][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.226920][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.236775][T10379] device bridge_slave_1 entered promiscuous mode [ 394.468274][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 394.649915][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.796317][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.040174][T10379] team0: Port device team_slave_0 added [ 395.078193][T10379] team0: Port device team_slave_1 added [ 395.208263][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.215403][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.241791][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.333372][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.340798][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.368577][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.614856][T10379] device hsr_slave_0 entered promiscuous mode [ 395.672034][T10379] device hsr_slave_1 entered promiscuous mode [ 395.698312][T10379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.706353][T10379] Cannot create hsr debugfs directory [ 396.267101][T10379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.312823][T10379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.360283][T10379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.395936][T10379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.563336][ T2091] Bluetooth: hci4: command 0x041b tx timeout [ 396.857116][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.915309][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.924577][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.959634][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.997918][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.009435][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.010541][ T2091] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.025150][ T2091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.044651][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.069451][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.079804][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.090924][ T2091] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.098509][ T2091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.152039][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.164067][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.215025][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.225935][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.236935][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.247767][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.287496][T10379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.302136][T10379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.317555][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.328441][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.338344][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.349182][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.359182][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.435284][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.444955][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.453102][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.471469][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.550765][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.561122][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.626411][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.636715][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.650722][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.661521][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.687359][T10379] device veth0_vlan entered promiscuous mode [ 397.735628][T10379] device veth1_vlan entered promiscuous mode [ 397.840888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 397.850672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 397.860964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.871166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.908756][T10379] device veth0_macvtap entered promiscuous mode [ 397.933214][T10379] device veth1_macvtap entered promiscuous mode [ 397.995561][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.006928][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.018733][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.029670][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.039712][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.050308][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.060443][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.071628][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.085975][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.099273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.109574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.119533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.130085][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.186830][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.197961][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.208106][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.218754][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.228829][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.239445][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.249691][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.260504][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.274648][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.282829][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.293214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.337167][T10379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.346862][T10379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.356377][T10379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.365461][T10379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.631015][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 398.747645][ T331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.755881][ T331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.768586][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.876863][ T953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.885471][ T953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.893399][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.332335][T10615] IPVS: ftp: loaded support on port[0] = 21 [ 400.709760][ T9722] Bluetooth: hci4: command 0x0419 tx timeout 14:23:48 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x76, 0xe6, 0xd3, 0x40, 0x1199, 0x9001, 0x6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x0, 0x69, 0xd5, 0xd6, 0x3}}]}}]}}, 0x0) 14:23:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) 14:23:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) 14:23:48 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:23:48 executing program 4: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 402.559008][T10646] IPVS: ftp: loaded support on port[0] = 21 [ 402.580024][T10649] ptrace attach of "/root/syz-executor.2"[10651] was attempted by "/root/syz-executor.2"[10649] [ 402.648171][ T9722] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 402.856101][T10654] IPVS: ftp: loaded support on port[0] = 21 [ 403.031301][ T9722] usb 1-1: config 0 has an invalid interface number: 178 but max is 0 [ 403.039985][ T9722] usb 1-1: config 0 has no interface number 0 14:23:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) [ 403.199238][ T9722] usb 1-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice= 0.6d [ 403.208605][ T9722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.216854][ T9722] usb 1-1: Product: syz [ 403.221385][ T9722] usb 1-1: Manufacturer: syz [ 403.226088][ T9722] usb 1-1: SerialNumber: syz 14:23:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 403.394308][ T9722] usb 1-1: config 0 descriptor?? 14:23:50 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 403.727907][ T9722] usb 1-1: USB disconnect, device number 36 [ 403.777544][T10714] ptrace attach of "/root/syz-executor.2"[10712] was attempted by "/root/syz-executor.2"[10714] 14:23:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:23:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = gettid() tkill(r4, 0x1004000000013) ptrace(0x10, r4) 14:23:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 404.468739][ T17] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 404.831466][ T17] usb 1-1: config 0 has an invalid interface number: 178 but max is 0 [ 404.840077][ T17] usb 1-1: config 0 has no interface number 0 [ 404.985895][T10735] ptrace attach of "/root/syz-executor.2"[10734] was attempted by "/root/syz-executor.2"[10735] [ 405.039077][ T17] usb 1-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice= 0.6d [ 405.048509][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.056637][ T17] usb 1-1: Product: syz [ 405.061601][ T17] usb 1-1: Manufacturer: syz [ 405.066359][ T17] usb 1-1: SerialNumber: syz 14:23:51 executing program 4: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 405.168973][ T17] usb 1-1: config 0 descriptor?? 14:23:51 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100b29072209713bd00e40a010203010902120001000000000904000000d0123d00"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000040)={0x0, 0x4, 0x8}) 14:23:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:23:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 405.680332][ T17] usb 1-1: USB disconnect, device number 37 [ 406.079497][T10759] ptrace attach of "/root/syz-executor.2"[10757] was attempted by "/root/syz-executor.2"[10759] [ 406.239744][ T8492] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 406.489405][ T8492] usb 1-1: Using ep0 maxpacket: 32 14:23:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:23:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1004000000013) ptrace(0x10, r1) [ 406.812084][ T8492] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 406.823163][ T8492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.832267][ T8492] usb 1-1: Product: syz [ 406.836573][ T8492] usb 1-1: Manufacturer: syz [ 406.841415][ T8492] usb 1-1: SerialNumber: syz [ 406.953930][ T8492] usb 1-1: config 0 descriptor?? [ 407.031529][ T8492] usb 1-1: invalid MIDI EP [ 407.036110][ T8492] usb 1-1: snd-bcd2000: error during probing [ 407.043008][ T8492] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 407.217492][T10771] ptrace attach of "/root/syz-executor.2"[10770] was attempted by "/root/syz-executor.2"[10771] [ 407.256279][ T50] usb 1-1: USB disconnect, device number 38 14:23:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:23:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 408.041032][ T50] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 408.266919][T10787] ptrace attach of "/root/syz-executor.2"[10786] was attempted by "/root/syz-executor.2"[10787] [ 408.288473][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 408.569421][ T50] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 408.579199][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.587320][ T50] usb 1-1: Product: syz [ 408.591874][ T50] usb 1-1: Manufacturer: syz [ 408.596606][ T50] usb 1-1: SerialNumber: syz [ 408.754520][ T50] usb 1-1: config 0 descriptor?? [ 408.810240][ T50] usb 1-1: invalid MIDI EP [ 408.814877][ T50] usb 1-1: snd-bcd2000: error during probing [ 408.821990][ T50] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 409.024590][ T50] usb 1-1: USB disconnect, device number 39 [ 409.100932][T10720] IPVS: ftp: loaded support on port[0] = 21 [ 409.125971][T10740] IPVS: ftp: loaded support on port[0] = 21 14:23:56 executing program 3: getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 14:23:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:23:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) 14:23:56 executing program 0: syz_usb_connect(0x2, 0x61, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x97, 0xc1, 0xef, 0x20, 0x12d1, 0xbb9e, 0xc86d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb9, 0x0, 0x0, 0xff, 0x4, 0x1c}}]}}]}}, 0x0) 14:23:56 executing program 4: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 410.209231][T10854] ptrace attach of "/root/syz-executor.2"[10849] was attempted by "/root/syz-executor.2"[10854] 14:23:56 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100b29072209713bd00e40a010203010902120001000000000904000000d0123d00"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000040)={0x0, 0x4, 0x8}) [ 410.444123][T10858] ptrace attach of "/root/syz-executor.3"[10857] was attempted by "/root/syz-executor.3"[10858] [ 410.455954][ T8492] usb 1-1: new full-speed USB device number 40 using dummy_hcd 14:23:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 411.128335][ T8492] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.248611][T10865] ptrace attach of "/root/syz-executor.2"[10864] was attempted by "/root/syz-executor.2"[10865] [ 411.277880][ T8492] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 411.285726][ T8492] usb 1-1: can't read configurations, error -71 14:23:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 411.993896][ T8492] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 412.274761][T10844] IPVS: ftp: loaded support on port[0] = 21 [ 412.275230][T10857] IPVS: ftp: loaded support on port[0] = 21 [ 412.417077][ T8492] usb 1-1: unable to get BOS descriptor or descriptor too short 14:23:58 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d}}]}}]}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000004c0)="28fecbf0ef9d30eac610a7743c38f54355", 0x11}, {&(0x7f0000000500)="d4d52afc8c82c99e54305411b888399ca72eb246d4a8d9be294fdb675349109f8bc5189ac26dad39b9c5bd3f389976fc219c633afe12ec621c7757e9df787bb338731e9fdf3c784fca89cd3e46cdc06a708bbb218d25f610e9d2e7144dd025ccab856ad4df", 0x65}, {&(0x7f0000000580)="334d61ce5446783286fcbf3cc61f91e5d9a768085e0ec5da02639fe72e973fe70ff0f21af016d49572e707af04dab5560dcf606d5224aefa7ffb87b905b3e84161994680b45bd2cfe226c61dcda3f55367ba1bc2f19797079a1012491f59faecc2618ecae2d33740890380419f9b9efb31dae114ed2cb8c07afd2ef7fe5fa4b419395ac06798d1fd2f0577bc6d704ff72bcea1df54e5a0f342d6c8466362f8a5dfb51d1ed256127a9d6c78ac5606961afbb24707762d35aa7c0e92d01cbb3eda5eb54c035f64fa7e0088d15e008dcef299d441f88a653b0511", 0xd9}, {&(0x7f0000000680)="5806f3290f8bdc1996ebd63bbd7e75ee067db24ae865f4a727ac1c877af9daea13a7c4b5e50aa132126d8ea3c62c5cbb33d206e24182c6a932f7f4bc8a7f3f99e1734713b641fe4840274ba1dffdbcfa30f6d9134d1c0e14d58c702820e61299bd11ab95b058db33a5f4891fe1da3e297be8b126cf40e1d7e8b24729a65696b451c22c149efa26b109c1f68d77", 0x8d}, {&(0x7f0000000740)="bc9e06bad8beb7e28aec6daea5a5df6f2fab689f0a4403e7fc192e626ce74bfbc8bd14c286fe5656b5eeaa37301f0e0dc666479c09d2af365a476cc319f6c0abdb9fe5b7a77d49253dab614d02f3e74423bde1ac86306fa93fe89d44e6d54ece57dc51abece6793c1e8cb0b3e323716de1e8973537cce56af655562aa341908f9dff7a306204cf32ae6451ab10e77a0270d01c077a3d77ad2f6148c3b62d3fae93ec66ee05c072f57b220d1a68dec71f29e10bbfa8ffc1fe42a9f31559eeb93dacced5638a0d2adec0bcda8415fd9d9b36a946a49d1a5b54", 0xd8}], 0x5, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r2}}}], 0x40}, 0x888) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/netfilter\x00') getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r5, 0x7aa, &(0x7f0000000400)={{@my=0x0, 0x4da2}, 0x3f, 0xffffff9a}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x27, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040029bd7000ffdbdf25080000005c0001800800030000000000140002006c6f0000000000000000000000000000140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="46557fcf", @ANYRES32=r6, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4040080) ioctl$sock_ifreq(r3, 0x8948, &(0x7f00000003c0)={'batadv_slave_1\x00', @ifru_hwaddr=@remote}) [ 412.575985][ T8492] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 412.583837][ T8492] usb 1-1: can't read configurations, error -71 [ 412.602277][ T8492] usb usb1-port1: attempt power cycle 14:23:59 executing program 3: getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) [ 413.338096][ T8492] usb 1-1: new high-speed USB device number 42 using dummy_hcd 14:23:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 413.413283][T10933] ptrace attach of "/root/syz-executor.3"[10931] was attempted by "/root/syz-executor.3"[10933] [ 413.449604][ T8492] usb 1-1: Using ep0 maxpacket: 32 [ 413.758307][ T8492] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 413.767513][ T8492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.776056][ T8492] usb 1-1: Product: syz [ 413.782785][ T8492] usb 1-1: Manufacturer: syz [ 413.787522][ T8492] usb 1-1: SerialNumber: syz [ 413.920000][ T8492] usb 1-1: config 0 descriptor?? [ 413.968230][ T8492] usb 1-1: invalid MIDI EP [ 413.973939][ T8492] usb 1-1: snd-bcd2000: error during probing [ 413.981675][ T8492] snd-bcd2000: probe of 1-1:0.0 failed with error -22 [ 414.325289][ T8492] usb 1-1: USB disconnect, device number 42 14:24:00 executing program 0: syz_usb_connect(0x0, 0x138, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/312], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @random="b149835076c7"}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fc12cad6bdc4bddbdf251c00", @ANYRES32=r5, @ANYBLOB="0c0099000600000060000000"], 0x28}, 0x1, 0x0, 0x0, 0x5a618bf12a381e3d}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @random="b149835076c7"}]}, 0x48}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @random="b149835076c7"}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x75}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x22}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xb7}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400c0}, 0x10) [ 414.958383][ T8492] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 415.028689][ T2091] Bluetooth: hci5: command 0x0409 tx timeout [ 415.227832][ T8492] usb 1-1: device descriptor read/64, error 18 14:24:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 415.647855][ T8492] usb 1-1: device descriptor read/64, error 18 [ 415.967973][ T8492] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 416.240916][ T8492] usb 1-1: device descriptor read/64, error 18 14:24:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0x10, r2) [ 416.669028][ T8492] usb 1-1: device descriptor read/64, error 18 [ 416.789364][ T8492] usb usb1-port1: attempt power cycle 14:24:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 417.107757][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 417.590460][T10931] IPVS: ftp: loaded support on port[0] = 21 [ 417.608093][ T8492] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 417.761140][T10926] IPVS: ftp: loaded support on port[0] = 21 14:24:04 executing program 0: syz_usb_connect(0x6, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d}}]}}]}}, 0x0) [ 417.988385][ T8492] usb 1-1: device descriptor read/8, error -71 [ 418.218430][ T8492] usb 1-1: device descriptor read/8, error -71 14:24:04 executing program 4: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 418.624800][T10926] chnl_net:caif_netlink_parms(): no params data found [ 418.947039][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.954485][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.964367][T10926] device bridge_slave_0 entered promiscuous mode [ 418.978725][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.986007][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.996241][T10926] device bridge_slave_1 entered promiscuous mode [ 419.056753][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.078873][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.170692][T10926] team0: Port device team_slave_0 added [ 419.190564][ T9722] Bluetooth: hci5: command 0x040f tx timeout [ 419.198303][T10926] team0: Port device team_slave_1 added [ 419.287083][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.294392][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.322907][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.422401][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.429999][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.456268][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.673179][T10926] device hsr_slave_0 entered promiscuous mode [ 419.715528][T10926] device hsr_slave_1 entered promiscuous mode [ 419.740216][T10926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.748253][T10926] Cannot create hsr debugfs directory [ 420.442992][T10926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.478598][T10926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.526623][T10926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.568974][T10926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 421.075594][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.155058][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.164902][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.192009][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.229070][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.239897][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.250082][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.257385][ T9722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.283976][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.304713][ T17] Bluetooth: hci5: command 0x0419 tx timeout [ 421.327789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.338971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.349745][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.357021][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.366426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.398684][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.469489][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.480744][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.539783][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.550728][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.562088][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.643573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.654167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.664831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.675950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.693516][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.780424][T11057] IPVS: ftp: loaded support on port[0] = 21 [ 421.795848][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.803955][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.856276][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.021371][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.032109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.151150][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 422.161449][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.215399][T10926] device veth0_vlan entered promiscuous mode [ 422.228104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.237283][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.305514][T10926] device veth1_vlan entered promiscuous mode [ 422.501218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 422.512247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 422.522325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 422.533163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 422.569486][T10926] device veth0_macvtap entered promiscuous mode [ 422.596912][T10926] device veth1_macvtap entered promiscuous mode [ 422.650919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 422.661528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 422.702718][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.715631][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.726077][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.736882][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.747171][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.759084][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.769268][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.780661][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.791049][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.801900][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.816551][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.825307][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 422.835982][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 422.888251][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.898901][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.909067][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.919734][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.929930][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.940771][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.951032][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.961847][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.973075][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.983881][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.998597][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.006817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.017708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.046580][T10926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.056227][T10926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.066002][T10926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.075023][T10926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.500370][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.510972][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.527320][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 423.619719][ T953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.627915][ T953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.641126][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.260184][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 424.517725][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 424.838533][ T5] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 424.848998][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.857168][ T5] usb 6-1: Product: syz [ 424.862052][ T5] usb 6-1: Manufacturer: syz [ 424.866830][ T5] usb 6-1: SerialNumber: syz [ 424.883532][ T5] usb 6-1: config 0 descriptor?? [ 424.936809][ T5] usb 6-1: invalid MIDI EP [ 424.944807][ T5] usb 6-1: snd-bcd2000: error during probing [ 424.952652][ T5] snd-bcd2000: probe of 6-1:0.0 failed with error -22 [ 425.150582][ T5] usb 6-1: USB disconnect, device number 2 14:24:12 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, 0x0, 0x62d5aaf9a8bfa6a) 14:24:12 executing program 3: getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 14:24:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(0x0, 0x1004000000013) ptrace(0x10, r2) 14:24:12 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x90, 0x72, 0x20, 0x1397, 0xbd, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x12, 0x3d}}]}}]}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x20048000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0x27, [], 0x2, &(0x7f0000000200)=[{}, {}], &(0x7f0000000240)=""/39}, &(0x7f0000000300)=0x78) 14:24:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:24:12 executing program 4: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$pidfd(0xffffff9c, &(0x7f0000000880)='/proc/self\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000a40)='/dev/loop0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='fuseblk\x00', 0x0, &(0x7f0000000b00)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 14:24:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(0x0, 0x1004000000013) ptrace(0x10, r2) [ 426.030750][T11286] ptrace attach of "/root/syz-executor.3"[11285] was attempted by "/root/syz-executor.3"[11286] [ 426.031462][T11285] IPVS: ftp: loaded support on port[0] = 21 [ 426.117884][T11240] usb 1-1: new high-speed USB device number 47 using dummy_hcd 14:24:12 executing program 4: migrate_pages(0x0, 0x166, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x1) 14:24:12 executing program 5: socketpair(0xa, 0x3, 0x7, 0x0) [ 426.368331][T11240] usb 1-1: Using ep0 maxpacket: 32 14:24:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(0x0, 0x1004000000013) ptrace(0x10, r2) 14:24:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 426.649448][T11240] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 426.659148][T11240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.667266][T11240] usb 1-1: Product: syz [ 426.672471][T11240] usb 1-1: Manufacturer: syz [ 426.677193][T11240] usb 1-1: SerialNumber: syz 14:24:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x0) ptrace(0x10, r2) 14:24:13 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0xc87ffb1c78fed326) shmdt(0x0) 14:24:13 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 426.997093][T11240] usb 1-1: config 0 descriptor?? [ 427.068628][T11240] usb 1-1: invalid MIDI EP [ 427.073217][T11240] usb 1-1: snd-bcd2000: error during probing [ 427.080132][T11240] snd-bcd2000: probe of 1-1:0.0 failed with error -22 14:24:13 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @dev, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x0, [@private, @remote, @multicast1, @multicast1, @loopback]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}}}, 0x0) [ 427.294070][T11240] usb 1-1: USB disconnect, device number 47 [ 427.616405][T11342] IPVS: ftp: loaded support on port[0] = 21 [ 428.048028][ T8493] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 428.287637][ T8493] usb 1-1: Using ep0 maxpacket: 32 [ 428.568517][ T8493] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.e4 [ 428.580699][ T8493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.589363][ T8493] usb 1-1: Product: syz [ 428.593648][ T8493] usb 1-1: Manufacturer: syz [ 428.598568][ T8493] usb 1-1: SerialNumber: syz [ 428.668697][ T8493] usb 1-1: config 0 descriptor?? [ 428.719933][ T8493] usb 1-1: invalid MIDI EP [ 428.724515][ T8493] usb 1-1: snd-bcd2000: error during probing [ 428.733900][ T8493] snd-bcd2000: probe of 1-1:0.0 failed with error -22 14:24:15 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="125a6abcb116a6617441ed93bd00e40a0102030109021212"], 0x0) 14:24:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x0) ptrace(0x10, r2) 14:24:15 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 14:24:15 executing program 5: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 14:24:15 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 428.933397][ T8493] usb 1-1: USB disconnect, device number 48 14:24:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x0) ptrace(0x10, r2) [ 429.291377][T11386] IPVS: ftp: loaded support on port[0] = 21 14:24:15 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) [ 429.717784][ T2990] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 430.027593][ T2990] usb 1-1: device descriptor read/64, error 18 14:24:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) 14:24:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 14:24:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0xffffffffffffffff, r2) 14:24:16 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 14:24:16 executing program 4: syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb6607", 0x1c, 0x6, 0x0, @dev, @rand_addr=' \x01\x00', {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 430.418178][ T2990] usb 1-1: device descriptor read/64, error 18 [ 430.584643][T11429] IPVS: ftp: loaded support on port[0] = 21 [ 430.698402][ T2990] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 431.047893][ T2990] usb 1-1: device descriptor read/64, error 18 [ 431.458926][ T2990] usb 1-1: device descriptor read/64, error 18 [ 431.580965][ T2990] usb usb1-port1: attempt power cycle [ 432.298512][ T2990] usb 1-1: new high-speed USB device number 51 using dummy_hcd 14:24:18 executing program 0: syz_usb_connect(0x0, 0x94, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc0, 0xa6, 0xbb, 0x20, 0x9c0, 0x203, 0x177a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x0, 0x15, 0xa4, 0x59, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "1804"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xa84, 0x3, 0x5, 0x2}, [@obex={0x5, 0x24, 0x15, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x80, 0x7}, @country_functional={0x12, 0x24, 0x7, 0x3f, 0xff, [0x0, 0x9, 0xffff, 0x3, 0x1000, 0xffe0]}, @acm={0x4, 0x24, 0x2, 0x6}]}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x7e4, 0x3, "bbf37940db5d"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x1, 0x1, 0x2, "a1e1ce", "810070"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x2, 0x7, "", 'K-f'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0xf6, 0x81, 'R', "33c641"}]}]}}]}}]}}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) 14:24:18 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000001480)) 14:24:18 executing program 4: syz_emit_ethernet(0x76, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0x16, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "287ef6"}}}}}}, 0x0) 14:24:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0xffffffffffffffff, r2) 14:24:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 432.448446][ T2990] usb 1-1: device descriptor read/8, error -71 [ 432.667678][ T2990] usb 1-1: device descriptor read/8, error -71 14:24:19 executing program 4: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2c, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @current}, {@current, @random="2f4a17464f99"}}}}}, 0x0) 14:24:19 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 14:24:19 executing program 4: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xffffffffffffffa0, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 433.157863][ T2990] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 433.269712][ T2990] usb 1-1: Using ep0 maxpacket: 32 14:24:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1004000000013) ptrace(0xffffffffffffffff, r2) 14:24:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgid(r3) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() tkill(r5, 0x1004000000013) ptrace(0x10, r5) [ 433.408340][ T2990] usb 1-1: config 0 has an invalid interface number: 197 but max is 0 [ 433.416696][ T2990] usb 1-1: config 0 has no interface number 0 14:24:19 executing program 3: r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xeaa2f000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 433.608367][ T2990] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=17.7a [ 433.617706][ T2990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.625846][ T2990] usb 1-1: Product: syz [ 433.630448][ T2990] usb 1-1: Manufacturer: syz [ 433.635167][ T2990] usb 1-1: SerialNumber: syz 14:24:20 executing program 4: semtimedop(0x0, &(0x7f0000000000)=[{}], 0x45, 0x0) semtimedop(0x0, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) [ 433.794356][ T2990] usb 1-1: config 0 descriptor?? [ 433.846104][ T2990] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 434.068698][ T2990] gp8psk: usb in 128 operation failed. [ 434.074481][ T2990] ===================================================== [ 434.081532][ T2990] BUG: KMSAN: uninit-value in gp8psk_power_ctrl+0x4dc/0x1740 [ 434.088949][ T2990] CPU: 0 PID: 2990 Comm: kworker/0:2 Not tainted 5.10.0-rc4-syzkaller #0 [ 434.097383][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.107770][ T2990] Workqueue: usb_hub_wq hub_event [ 434.112842][ T2990] Call Trace: [ 434.116279][ T2990] dump_stack+0x21c/0x280 [ 434.120782][ T2990] kmsan_report+0xf7/0x1e0 [ 434.125352][ T2990] __msan_warning+0x5f/0xa0 [ 434.129910][ T2990] gp8psk_power_ctrl+0x4dc/0x1740 [ 434.135149][ T2990] ? __kmalloc+0x37f/0x530 [ 434.139633][ T2990] ? gp8psk_frontend_attach+0x350/0x350 [ 434.145764][ T2990] dvb_usb_device_init+0x16ea/0x3350 [ 434.151138][ T2990] gp8psk_usb_probe+0xa2/0x1a0 [ 434.156032][ T2990] ? vp702x_fe_refresh_state+0x570/0x570 [ 434.161709][ T2990] usb_probe_interface+0xfcc/0x1520 [ 434.167053][ T2990] ? usb_register_driver+0x900/0x900 [ 434.172435][ T2990] really_probe+0xebd/0x2420 [ 434.177078][ T2990] driver_probe_device+0x293/0x390 [ 434.182238][ T2990] __device_attach_driver+0x63f/0x830 [ 434.187886][ T2990] bus_for_each_drv+0x2ca/0x3f0 [ 434.192794][ T2990] ? state_synced_show+0x130/0x130 [ 434.197959][ T2990] __device_attach+0x538/0x860 [ 434.202772][ T2990] device_initial_probe+0x4a/0x60 [ 434.208197][ T2990] bus_probe_device+0x177/0x3d0 [ 434.213099][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.218953][ T2990] device_add+0x399e/0x3f20 [ 434.223509][ T2990] usb_set_configuration+0x39cf/0x4010 [ 434.229013][ T2990] ? kmsan_get_metadata+0x116/0x180 [ 434.234244][ T2990] ? usb_set_configuration+0xa61/0x4010 [ 434.239821][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.245925][ T2990] ? usb_choose_configuration+0xc72/0xf00 [ 434.252823][ T2990] usb_generic_driver_probe+0x138/0x300 [ 434.258414][ T2990] ? usb_choose_configuration+0xf00/0xf00 [ 434.264174][ T2990] usb_probe_device+0x317/0x570 [ 434.269060][ T2990] ? usb_register_device_driver+0x590/0x590 [ 434.274990][ T2990] really_probe+0xebd/0x2420 [ 434.279617][ T2990] driver_probe_device+0x293/0x390 [ 434.284755][ T2990] __device_attach_driver+0x63f/0x830 [ 434.290163][ T2990] bus_for_each_drv+0x2ca/0x3f0 [ 434.295044][ T2990] ? state_synced_show+0x130/0x130 [ 434.300192][ T2990] __device_attach+0x538/0x860 [ 434.304992][ T2990] device_initial_probe+0x4a/0x60 [ 434.310068][ T2990] bus_probe_device+0x177/0x3d0 [ 434.315060][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.320901][ T2990] device_add+0x399e/0x3f20 [ 434.325469][ T2990] usb_new_device+0x1bd6/0x2a30 [ 434.330438][ T2990] hub_event+0x5bc9/0x8890 [ 434.334920][ T2990] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 434.341111][ T2990] ? kmsan_get_metadata+0x116/0x180 [ 434.347743][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.353590][ T2990] ? led_work+0x780/0x780 [ 434.358007][ T2990] process_one_work+0x121c/0x1fc0 [ 434.363280][ T2990] worker_thread+0x10cc/0x2740 [ 434.368078][ T2990] ? kmsan_get_metadata+0x116/0x180 [ 434.373356][ T2990] kthread+0x51c/0x560 [ 434.376830][T11503] IPVS: ftp: loaded support on port[0] = 21 [ 434.377444][ T2990] ? process_one_work+0x1fc0/0x1fc0 [ 434.377461][ T2990] ? kthread_blkcg+0x110/0x110 [ 434.377478][ T2990] ret_from_fork+0x1f/0x30 [ 434.377486][ T2990] [ 434.377494][ T2990] Local variable ----status@gp8psk_power_ctrl created at: [ 434.377509][ T2990] gp8psk_power_ctrl+0x62/0x1740 [ 434.377522][ T2990] gp8psk_power_ctrl+0x62/0x1740 [ 434.377527][ T2990] ===================================================== [ 434.377533][ T2990] Disabling lock debugging due to kernel taint [ 434.377543][ T2990] Kernel panic - not syncing: panic_on_warn set ... [ 434.377564][ T2990] CPU: 0 PID: 2990 Comm: kworker/0:2 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 434.377627][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.458686][ T2990] Workqueue: usb_hub_wq hub_event [ 434.463736][ T2990] Call Trace: [ 434.467437][ T2990] dump_stack+0x21c/0x280 [ 434.471952][ T2990] panic+0x4c8/0xea7 [ 434.475948][ T2990] ? add_taint+0x17c/0x210 [ 434.481180][ T2990] kmsan_report+0x1da/0x1e0 [ 434.485724][ T2990] __msan_warning+0x5f/0xa0 [ 434.490255][ T2990] gp8psk_power_ctrl+0x4dc/0x1740 [ 434.495327][ T2990] ? __kmalloc+0x37f/0x530 [ 434.499866][ T2990] ? gp8psk_frontend_attach+0x350/0x350 [ 434.505445][ T2990] dvb_usb_device_init+0x16ea/0x3350 [ 434.510781][ T2990] gp8psk_usb_probe+0xa2/0x1a0 [ 434.515603][ T2990] ? vp702x_fe_refresh_state+0x570/0x570 [ 434.522307][ T2990] usb_probe_interface+0xfcc/0x1520 [ 434.527552][ T2990] ? usb_register_driver+0x900/0x900 [ 434.533004][ T2990] really_probe+0xebd/0x2420 [ 434.537637][ T2990] driver_probe_device+0x293/0x390 [ 434.542771][ T2990] __device_attach_driver+0x63f/0x830 [ 434.548370][ T2990] bus_for_each_drv+0x2ca/0x3f0 [ 434.553263][ T2990] ? state_synced_show+0x130/0x130 [ 434.558416][ T2990] __device_attach+0x538/0x860 [ 434.563559][ T2990] device_initial_probe+0x4a/0x60 [ 434.568626][ T2990] bus_probe_device+0x177/0x3d0 [ 434.573896][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.583378][ T2990] device_add+0x399e/0x3f20 [ 434.587911][ T2990] usb_set_configuration+0x39cf/0x4010 [ 434.593567][ T2990] ? kmsan_get_metadata+0x116/0x180 [ 434.598797][ T2990] ? usb_set_configuration+0xa61/0x4010 [ 434.604368][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.610318][ T2990] ? usb_choose_configuration+0xc72/0xf00 [ 434.616067][ T2990] usb_generic_driver_probe+0x138/0x300 [ 434.621726][ T2990] ? usb_choose_configuration+0xf00/0xf00 [ 434.627477][ T2990] usb_probe_device+0x317/0x570 [ 434.632477][ T2990] ? usb_register_device_driver+0x590/0x590 [ 434.638402][ T2990] really_probe+0xebd/0x2420 [ 434.643021][ T2990] driver_probe_device+0x293/0x390 [ 434.648158][ T2990] __device_attach_driver+0x63f/0x830 [ 434.653592][ T2990] bus_for_each_drv+0x2ca/0x3f0 [ 434.662033][ T2990] ? state_synced_show+0x130/0x130 [ 434.667170][ T2990] __device_attach+0x538/0x860 [ 434.671965][ T2990] device_initial_probe+0x4a/0x60 [ 434.677025][ T2990] bus_probe_device+0x177/0x3d0 [ 434.681902][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.687828][ T2990] device_add+0x399e/0x3f20 [ 434.692364][ T2990] usb_new_device+0x1bd6/0x2a30 [ 434.697240][ T2990] hub_event+0x5bc9/0x8890 [ 434.701894][ T2990] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 434.707988][ T2990] ? kmsan_get_metadata+0x116/0x180 [ 434.713316][ T2990] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 434.719247][ T2990] ? led_work+0x780/0x780 [ 434.723672][ T2990] process_one_work+0x121c/0x1fc0 [ 434.728740][ T2990] worker_thread+0x10cc/0x2740 [ 434.733519][ T2990] ? kmsan_get_metadata+0x116/0x180 [ 434.738741][ T2990] kthread+0x51c/0x560 [ 434.742823][ T2990] ? process_one_work+0x1fc0/0x1fc0 [ 434.748065][ T2990] ? kthread_blkcg+0x110/0x110 [ 434.752983][ T2990] ret_from_fork+0x1f/0x30 [ 434.758540][ T2990] Kernel Offset: disabled [ 434.763409][ T2990] Rebooting in 86400 seconds..