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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 427.530849][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.568437][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:20:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) [ 427.622421][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.655331][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.701212][T10279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.731782][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.753372][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.774581][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 22:20:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) 22:20:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 427.802681][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.851102][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.884954][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:20:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) [ 427.907045][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.930988][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:20:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 427.963806][T10279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.977737][ T5157] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 428.023756][T10279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.034286][T10279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.050565][T10279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.063354][T10279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 22:20:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) [ 428.078312][ T5114] Bluetooth: hci3: command 0x040f tx timeout 22:20:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 428.241476][ T5157] usb 5-1: Using ep0 maxpacket: 32 22:20:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) [ 428.287465][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.295339][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:20:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80085504, &(0x7f0000000140)) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) [ 428.372465][ T5075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.386241][ T5075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.398098][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 22:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) [ 428.458575][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.488910][ T5157] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 428.504969][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 428.544107][ T5157] usb 5-1: config 0 descriptor?? [ 428.601636][ T5157] hub 5-1:0.0: USB hub found 22:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) 22:20:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) 22:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:20:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 428.878215][ T5157] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) 22:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 429.017731][ T5157] usbhid 5-1:0.0: can't add hid device: -71 [ 429.037089][ T5157] usbhid: probe of 5-1:0.0 failed with error -71 22:20:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 429.099710][ T5157] usb 5-1: USB disconnect, device number 62 22:20:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) 22:20:14 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 22:20:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:14 executing program 1: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) [ 429.388226][ T5156] usb 3-1: USB disconnect, device number 64 22:20:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) 22:20:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) 22:20:15 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, &(0x7f0000000180)={'wlan1\x00'}) [ 429.747516][ T5075] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 429.762177][ T28] audit: type=1804 audit(1706998815.244:99): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/451/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 22:20:15 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) 22:20:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x109, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}}, 0x0) [ 429.845651][ T28] audit: type=1804 audit(1706998815.304:100): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/451/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 22:20:15 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89fd, &(0x7f0000000180)={'wlan1\x00'}) [ 429.967712][ T5156] usb 3-1: new high-speed USB device number 65 using dummy_hcd 22:20:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000002c0)) [ 430.018188][ T5075] usb 5-1: Using ep0 maxpacket: 32 22:20:15 executing program 0: r0 = socket(0x2, 0x1, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 22:20:15 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f00000066c0), 0x2, 0x0) [ 430.137914][ T5075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.167185][ T5075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.168840][ T5114] Bluetooth: hci3: command 0x0419 tx timeout 22:20:15 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) [ 430.226458][ T5075] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.298485][ T5075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.333840][ T5075] usb 5-1: config 0 descriptor?? 22:20:15 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 22:20:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x802c550a, &(0x7f0000000140)) [ 430.347700][ T5156] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 430.363203][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.402798][ T5156] usb 3-1: config 0 descriptor?? [ 430.419356][ T5075] hub 5-1:0.0: USB hub found 22:20:16 executing program 1: r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 22:20:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 430.879651][ T5075] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 430.908188][ T5156] gs_usb 3-1:0.0: Configuring for 21 interfaces [ 430.914492][ T5156] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 430.938986][ T28] audit: type=1804 audit(1706998816.424:101): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/452/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 430.967430][ T5156] gs_usb: probe of 3-1:0.0 failed with error -22 [ 431.007738][ T28] audit: type=1804 audit(1706998816.454:102): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/452/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 431.047622][ T5075] usbhid 5-1:0.0: can't add hid device: -71 [ 431.053695][ T5075] usbhid: probe of 5-1:0.0 failed with error -71 [ 431.108647][ T5075] usb 5-1: USB disconnect, device number 63 22:20:16 executing program 0: r0 = socket(0x1, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0) 22:20:16 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 22:20:16 executing program 1: syz_clone(0x0, 0x0, 0x0, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="99") 22:20:16 executing program 0: r0 = socket(0x1, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0) 22:20:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="ea", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 22:20:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 22:20:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x109}, 0x14}}, 0x0) 22:20:17 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) [ 431.797615][ T44] usb 5-1: new high-speed USB device number 64 using dummy_hcd 22:20:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x8038550a, &(0x7f0000000140)) 22:20:17 executing program 1: r0 = socket(0x29, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 22:20:17 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000088c0)={0x18}, 0x18) 22:20:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 432.057579][ T44] usb 5-1: Using ep0 maxpacket: 32 22:20:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 432.187741][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.207462][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.217568][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.226634][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.260960][ T44] usb 5-1: config 0 descriptor?? [ 432.325492][ T44] hub 5-1:0.0: USB hub found 22:20:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:18 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108907, 0x0) [ 432.531147][ T5157] usb 3-1: USB disconnect, device number 65 22:20:18 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b00)={&(0x7f0000000000), 0xc, &(0x7f0000000ac0)={0x0}}, 0x0) [ 432.634461][ T28] audit: type=1804 audit(1706998818.114:103): pid=10610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/453/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 432.692331][ T28] audit: type=1804 audit(1706998818.174:104): pid=10610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/453/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:20:18 executing program 1: socket$packet(0x11, 0x59b6eac7e241897c, 0x300) [ 432.757575][ T44] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) 22:20:18 executing program 1: r0 = socket$inet(0x2, 0x803, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) [ 432.867663][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 432.873734][ T44] usbhid: probe of 5-1:0.0 failed with error -71 [ 432.924424][ T44] usb 5-1: USB disconnect, device number 64 22:20:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x90) [ 433.038218][ T5157] usb 3-1: new high-speed USB device number 66 using dummy_hcd 22:20:18 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f0000000180)={'wlan1\x00'}) 22:20:18 executing program 0: r0 = socket(0xa, 0x3, 0x81) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8913, &(0x7f0000000000)={'wlan0\x00'}) 22:20:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0xc00c5512, &(0x7f0000000140)) 22:20:18 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b0d61078b089b3f073763090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d50070d07070936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 22:20:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x5}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gretap0\x00'}]}, 0x38}}, 0x0) 22:20:18 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 22:20:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x3c}}, 0x0) 22:20:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, 0x0, 0x0}, 0x90) [ 433.478177][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 433.487293][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:19 executing program 1: r0 = syz_io_uring_setup(0x4ba7, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) [ 433.543452][ T5157] usb 3-1: config 0 descriptor?? 22:20:19 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x410400, 0x0) [ 433.637880][ T5156] usb 5-1: new high-speed USB device number 65 using dummy_hcd 22:20:19 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) 22:20:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 22:20:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0, 0x14}}, 0x0) 22:20:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f000000ac00)={0x0, 0x0, 0x0, 0xfffffffb, 0x0, "7fba710a828e753bd37e9109e200497caa0413"}) [ 433.877486][ T5156] usb 5-1: Using ep0 maxpacket: 32 22:20:19 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89f6, &(0x7f0000000180)={'wlan1\x00'}) [ 434.008150][ T5156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.028184][ T5157] gs_usb 3-1:0.0: Configuring for 21 interfaces [ 434.034506][ T5157] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 434.042646][ T5156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:20:19 executing program 1: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002340), 0x80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000024c0)={0xffffffffffffffff, 0x58, &(0x7f0000002440)}, 0x10) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x8, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002b80)={0x29, 0x4, 0x0, {0x3, 0x0, 0x1, 0x0, [0x0]}}, 0x29) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002e40)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:19 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) [ 434.042704][ T5156] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 434.042732][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.087694][ T5157] gs_usb: probe of 3-1:0.0 failed with error -22 [ 434.091500][ T5156] usb 5-1: config 0 descriptor?? 22:20:19 executing program 0: io_uring_setup(0x3034, &(0x7f0000000000)={0x0, 0x0, 0x1000}) [ 434.181639][ T5156] hub 5-1:0.0: USB hub found 22:20:19 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 22:20:19 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 22:20:19 executing program 1: accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:20:19 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[], 0x108}}, 0x90) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4081) 22:20:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) 22:20:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000280)) 22:20:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) [ 434.621873][ T28] audit: type=1804 audit(1706998820.104:105): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/454/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 434.627734][ T5156] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 434.667060][ T28] audit: type=1804 audit(1706998820.144:106): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/454/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 434.797823][ T5156] usbhid 5-1:0.0: can't add hid device: -71 [ 434.815128][ T5156] usbhid: probe of 5-1:0.0 failed with error -71 [ 434.878001][ T5156] usb 5-1: USB disconnect, device number 65 22:20:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 22:20:21 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 22:20:21 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89fe, &(0x7f0000000180)={'wlan1\x00'}) 22:20:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 435.599056][ T5157] usb 3-1: USB disconnect, device number 66 22:20:21 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x20001, 0x0) 22:20:21 executing program 0: semop(0x0, &(0x7f0000000200)=[{0x0, 0x4}], 0x1) 22:20:21 executing program 1: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000180)={'wlan1\x00'}) 22:20:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000003c0)={'syzkaller0\x00'}) 22:20:21 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x87, 0x0, 0x0) 22:20:21 executing program 0: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x108}}, 0x0) 22:20:21 executing program 1: syz_io_uring_setup(0x65e7, &(0x7f00000029c0)={0x0, 0x0, 0x2}, &(0x7f0000002a40), &(0x7f0000002a80)) [ 435.998531][ T784] usb 5-1: new high-speed USB device number 66 using dummy_hcd 22:20:21 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x2}], 0x1, 0x0) [ 436.147791][ T5157] usb 3-1: new high-speed USB device number 67 using dummy_hcd 22:20:21 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f0000000180)={'wlan1\x00'}) [ 436.257470][ T784] usb 5-1: Using ep0 maxpacket: 32 22:20:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005b80)={'wlan0\x00'}) [ 436.377651][ T28] audit: type=1804 audit(1706998821.844:107): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/455/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) [ 436.410977][ T28] audit: type=1804 audit(1706998821.854:108): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/455/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 436.438059][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.469772][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.511247][ T784] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.528190][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.538204][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 436.547299][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:22 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, &(0x7f0000000180)={'wlan1\x00'}) [ 436.576720][ T784] usb 5-1: config 0 descriptor?? [ 436.590610][ T5157] usb 3-1: config 0 descriptor?? [ 436.619761][ T784] hub 5-1:0.0: USB hub found 22:20:22 executing program 1: socket$inet(0x2, 0x80002, 0x0) 22:20:22 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108906, 0x0) 22:20:22 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) landlock_restrict_self(r0, 0x0) 22:20:22 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), 0x4) 22:20:22 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000) 22:20:22 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000043c0)={0x31, 0x6, 0x0, {0x4, 0x0, 0x8, 0x0, 'group_id'}}, 0x31) mount$fuseblk(0x0, 0x0, 0x0, 0x1000800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006700)={0x2020}, 0x2020) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 22:20:22 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, &(0x7f0000000180)={'wlan1\x00'}) [ 437.058575][ T5157] gs_usb 3-1:0.0: Configuring for 21 interfaces [ 437.064913][ T5157] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 437.073348][ T784] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 437.097650][ T5157] gs_usb: probe of 3-1:0.0 failed with error -22 22:20:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 22:20:22 executing program 1: io_uring_setup(0x1af6, &(0x7f0000000040)={0x0, 0x0, 0x200}) [ 437.207642][ T784] usbhid 5-1:0.0: can't add hid device: -71 [ 437.237597][ T784] usbhid: probe of 5-1:0.0 failed with error -71 22:20:22 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 22:20:22 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x10}, 0x10}], 0x1, 0x0) [ 437.308464][ T784] usb 5-1: USB disconnect, device number 66 22:20:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:22 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8920, &(0x7f0000000180)={'wlan1\x00'}) 22:20:22 executing program 1: r0 = socket(0x2, 0x1, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 22:20:23 executing program 0: mount$fuseblk(0x0, &(0x7f0000002100)='./file0\x00', 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000004440)='./file0\x00', 0x0, 0x0, 0x0) [ 437.884775][ T28] audit: type=1804 audit(1706998823.364:109): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/456/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 437.938960][ T28] audit: type=1804 audit(1706998823.404:110): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/456/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:20:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:24 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)='-', 0x1, r0}, 0x68) 22:20:24 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b0d61078b089b3f073763090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d50070d07070936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 22:20:24 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140), 0x805020, &(0x7f00000041c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}], [{@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}, {@obj_role}, {@subj_type={'subj_type', 0x3d, '/dev/cuse\x00'}}, {@flag='lazytime'}, {@euid_eq={'euid', 0x3d, r1}}, {@subj_type={'subj_type', 0x3d, '/dev/cuse\x00'}}]}}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000004340)={0x2d, 0x6, 0x0, {0x0, 0x6, 0x4, 0x0, 'euid'}}, 0x2d) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004380), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000043c0)={0x31, 0x6, 0x0, {0x0, 0x5, 0x8, 0x0, 'group_id'}}, 0x31) r4 = getuid() mount$fuseblk(&(0x7f0000004400), &(0x7f0000004440)='./file0\x00', &(0x7f0000004480), 0x1000800, &(0x7f0000006500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fowner_eq}, {@dont_hash}, {@euid_gt}]}}) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000006700)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000006640)='./file1\x00', &(0x7f0000006680), 0xa10027, &(0x7f0000008740)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}, {@blksize}], [{@subj_user={'subj_user', 0x3d, 'allow_other'}}, {@smackfsroot={'smackfsroot', 0x3d, 'rootmode'}}, {@subj_user={'subj_user', 0x3d, 'max_read'}}, {@uid_gt={'uid>', r4}}]}}) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000008900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f000000a940)={0x18, 0xfffffffffffffffe, r6, {0x6}}, 0x18) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f000000a980), 0x2, 0x0) write$FUSE_IOCTL(r7, 0x0, 0x0) write$FUSE_ATTR(r5, &(0x7f000000aa00)={0x78, 0xfffffffffffffff5, 0x0, {0xffffffffffffffff, 0x3ff, 0x0, {0x4, 0x86, 0x0, 0x9, 0x7, 0xf0, 0x101, 0x81, 0x6, 0x8000, 0x8000, 0x0, r2, 0x101, 0x2}}}, 0x78) write$FUSE_NOTIFY_DELETE(r5, &(0x7f000000aa80)={0x2e, 0x6, 0x0, {0x1, 0x5, 0x5, 0x0, 'fuse\x00'}}, 0x2e) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f000000ab00)) write$FUSE_NOTIFY_DELETE(r3, &(0x7f000000ab40)={0x30, 0x6, 0x0, {0x1, 0x4, 0x7, 0x0, 'user_id'}}, 0x30) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f000000ac00)={0x0, 0x0, 0x0, 0xfffffffb, 0x6, "7fba710a828e753bd37e9109e200497caa0413"}) clock_getres(0x2, &(0x7f000000ac80)) [ 438.732732][ T5163] usb 3-1: USB disconnect, device number 67 22:20:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 22:20:24 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000540), 0x1, 0x0) 22:20:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 22:20:24 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8905, &(0x7f0000000180)={'wlan1\x00'}) 22:20:24 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, &(0x7f0000000180)={'wlan1\x00'}) 22:20:24 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8) 22:20:24 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "133dbfcf49ffb3b8eb0283a817a029c3776097e9c3a77a549e6ffedff826802bdc6a7b61d4bc0492f71ceefad9c822a2c96f5706c6c26b7196a2a88971821659"}, 0x48}}, 0x0) 22:20:24 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) [ 439.087698][ T44] usb 5-1: new high-speed USB device number 67 using dummy_hcd 22:20:24 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8936, &(0x7f0000000180)={'wlan1\x00'}) 22:20:24 executing program 1: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4004131, 0xffffffffffffffff, 0x0) [ 439.217524][ T5163] usb 3-1: new high-speed USB device number 68 using dummy_hcd 22:20:24 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x1, &(0x7f0000000740)=@raw=[@call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) 22:20:24 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) [ 439.348041][ T44] usb 5-1: Using ep0 maxpacket: 32 22:20:24 executing program 1: r0 = socket(0xa, 0x5, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "57eb63b2addb5b66bffc57715391de1dbb2ccd540890ee0f9b815fe0ac64ff5efc7f9d600b93ffe78b8d007f4801669eee0e935651a14a4b80abd14e0f120e"}, 0x60) 22:20:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 439.479848][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.502844][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.515112][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 22:20:25 executing program 1: r0 = socket(0x11, 0x3, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @remote}}, 0x1e) [ 439.528190][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.550238][ T44] usb 5-1: config 0 descriptor?? [ 439.607676][ T5163] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 439.618929][ T44] hub 5-1:0.0: USB hub found [ 439.628449][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.656089][ T5163] usb 3-1: config 0 descriptor?? 22:20:25 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) [ 439.810899][ T28] audit: type=1804 audit(1706998825.294:111): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/457/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:20:25 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000140), 0x6) [ 439.856994][ T28] audit: type=1804 audit(1706998825.294:112): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/457/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:20:25 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x108}, 0x2}, 0x0) 22:20:25 executing program 1: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, 0x0) 22:20:25 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, 0x0) [ 440.108187][ T44] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 440.137876][ T5163] gs_usb 3-1:0.0: Configuring for 21 interfaces [ 440.144273][ T5163] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 440.156597][ T5163] gs_usb: probe of 3-1:0.0 failed with error -22 22:20:25 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89f4, &(0x7f0000000180)={'wlan1\x00'}) [ 440.227990][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 440.234022][ T44] usbhid: probe of 5-1:0.0 failed with error -71 22:20:25 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8991, &(0x7f0000000180)={'wlan1\x00'}) [ 440.280852][ T44] usb 5-1: USB disconnect, device number 67 22:20:25 executing program 1: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) [ 440.334694][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.342285][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 22:20:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='!', 0x1, 0x8004, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="ea", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 22:20:26 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10) 22:20:26 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000200)='syzkaller\x00'}, 0x90) 22:20:26 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b0d61078b089b3f073763090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d50070d07070936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 22:20:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045519, &(0x7f0000000000)) [ 440.947465][ T44] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 441.187454][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 441.317661][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.333107][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.343043][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 441.352356][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.368053][ T44] usb 5-1: config 0 descriptor?? [ 441.420920][ T44] hub 5-1:0.0: USB hub found 22:20:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 22:20:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:27 executing program 1: bind$isdn(0xffffffffffffffff, 0x0, 0x0) [ 441.801917][ T5163] usb 3-1: USB disconnect, device number 68 22:20:27 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f0000000180)={'wlan1\x00'}) [ 441.882903][ T44] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 441.936577][ T28] audit: type=1804 audit(1706998827.414:113): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/458/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:20:27 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8993, &(0x7f0000000180)={'wlan1\x00'}) [ 441.968915][ T28] audit: type=1804 audit(1706998827.444:114): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/458/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:20:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x103981) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b']) [ 442.050076][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 442.056169][ T44] usbhid: probe of 5-1:0.0 failed with error -71 22:20:27 executing program 1: r0 = socket(0x28, 0x5, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 442.141638][ T44] usb 5-1: USB disconnect, device number 68 22:20:27 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10}, 0x10}}, 0x40) 22:20:27 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="b8", 0x1}], 0x1, &(0x7f0000000500)={0x10}, 0x10}], 0x1, 0x40040d4) [ 442.277784][ T5163] usb 3-1: new high-speed USB device number 69 using dummy_hcd 22:20:27 executing program 1: landlock_create_ruleset(&(0x7f0000000000)={0x420, 0x3}, 0x10, 0x0) 22:20:27 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_getres(0x2, &(0x7f000000ac80)) 22:20:27 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000"], 0x0, 0x0, 0x0}, 0x0) 22:20:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 442.647710][ T5163] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 442.665329][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.682616][ T5163] usb 3-1: config 0 descriptor?? 22:20:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 22:20:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) epoll_pwait(r2, &(0x7f00000014c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 442.747681][ T5157] usb 5-1: new high-speed USB device number 69 using dummy_hcd 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 442.968756][ T28] audit: type=1804 audit(1706998828.454:115): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/459/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 443.007509][ T5157] usb 5-1: Using ep0 maxpacket: 32 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 443.017289][ T28] audit: type=1804 audit(1706998828.454:116): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/459/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 443.138579][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.154995][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.166203][ T5157] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 443.167751][ T5163] gs_usb 3-1:0.0: Configuring for 21 interfaces 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 443.175907][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.191277][ T5163] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 443.206166][ T5163] gs_usb: probe of 3-1:0.0 failed with error -22 [ 443.217830][ T5157] usb 5-1: config 0 descriptor?? [ 443.280669][ T5157] hub 5-1:0.0: USB hub found 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 443.737597][ T5157] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 443.857606][ T5157] usbhid 5-1:0.0: can't add hid device: -71 [ 443.863708][ T5157] usbhid: probe of 5-1:0.0 failed with error -71 [ 443.898354][ T5157] usb 5-1: USB disconnect, device number 69 22:20:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:30 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rthdrdstopts={{0x14}}, @rthdrdstopts={{0x14, 0x29, 0x3e}}], 0x28}}], 0x1, 0x0) 22:20:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 22:20:30 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b0d61078b089b3f073763090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d50070d07070936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000"], 0x0, 0x0, 0x0}, 0x0) [ 444.891628][ T44] usb 3-1: USB disconnect, device number 69 22:20:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1, 0x723}, 0x14}}, 0x0) 22:20:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1, 0x723}, 0x14}}, 0x0) 22:20:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 445.115029][ T28] audit: type=1804 audit(1706998830.584:117): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/460/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1, 0x723}, 0x14}}, 0x0) [ 445.176001][ T28] audit: type=1804 audit(1706998830.584:118): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/460/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1, 0x723}, 0x14}}, 0x0) [ 445.238617][ T5163] usb 5-1: new high-speed USB device number 70 using dummy_hcd 22:20:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, 0x0, 0x723}, 0x14}}, 0x0) 22:20:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 445.408094][ T44] usb 3-1: new high-speed USB device number 70 using dummy_hcd 22:20:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, 0x0, 0x723}, 0x14}}, 0x0) [ 445.517561][ T5163] usb 5-1: Using ep0 maxpacket: 32 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, 0x0, 0x723}, 0x14}}, 0x0) 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 445.639398][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.664627][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 445.682175][ T5163] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 445.694731][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:31 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r0, 0x723}, 0x14}}, 0x0) [ 445.739768][ T5163] usb 5-1: config 0 descriptor?? [ 445.768174][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 445.787455][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.809304][ T5163] hub 5-1:0.0: USB hub found 22:20:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 445.829823][ T44] usb 3-1: config 0 descriptor?? 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:31 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r0, 0x723}, 0x14}}, 0x0) 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 22:20:31 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r0, 0x723}, 0x14}}, 0x0) 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 22:20:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1, 0x723}, 0x14}}, 0x0) [ 446.102646][ T28] audit: type=1804 audit(1706998831.584:119): pid=10938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/461/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) [ 446.137174][ T28] audit: type=1804 audit(1706998831.584:120): pid=10938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/461/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 22:20:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1, 0x723}, 0x14}}, 0x0) 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 446.247875][ T5163] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 446.287810][ T44] gs_usb 3-1:0.0: Configuring for 21 interfaces 22:20:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 446.296043][ T44] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 446.319072][ T44] gs_usb: probe of 3-1:0.0 failed with error -22 [ 446.377612][ T5163] usbhid 5-1:0.0: can't add hid device: -71 [ 446.398432][ T5163] usbhid: probe of 5-1:0.0 failed with error -71 [ 446.449191][ T5163] usb 5-1: USB disconnect, device number 70 22:20:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:20:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1, 0x723}, 0x14}}, 0x0) 22:20:33 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000"], 0x0, 0x0, 0x0}, 0x0) 22:20:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 447.980030][ T5163] usb 3-1: USB disconnect, device number 70 22:20:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:20:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r0, 0x723}, 0x14}}, 0x0) 22:20:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:20:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r0, 0x723}, 0x14}}, 0x0) [ 448.182185][ T28] audit: type=1804 audit(1706998833.664:121): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/462/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 448.248041][ T28] audit: type=1804 audit(1706998833.724:122): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/462/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r0, 0x723}, 0x14}}, 0x0) [ 448.307527][ T44] usb 5-1: new high-speed USB device number 71 using dummy_hcd 22:20:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x0) 22:20:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 448.417563][ T5163] usb 3-1: new high-speed USB device number 71 using dummy_hcd 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x0) 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) [ 448.569066][ T44] usb 5-1: Using ep0 maxpacket: 32 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x0) 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) [ 448.687909][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.709822][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.734375][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.744377][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) [ 448.782560][ T44] usb 5-1: config 0 descriptor?? [ 448.797868][ T5163] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 448.817562][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.859532][ T44] hub 5-1:0.0: USB hub found [ 448.865901][ T5163] usb 3-1: config 0 descriptor?? 22:20:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) [ 449.099155][ T28] audit: type=1804 audit(1706998834.584:123): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/463/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) [ 449.149092][ T28] audit: type=1804 audit(1706998834.584:124): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/463/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_b, @random="257fb3c46170"}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 22:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, 0x0, 0x723}, 0x14}}, 0x0) 22:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 449.317750][ T44] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 449.357769][ T5163] gs_usb 3-1:0.0: Couldn't get device config: (err=-32) [ 449.379059][ T5163] gs_usb: probe of 3-1:0.0 failed with error -32 [ 449.437572][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 449.451223][ T44] usbhid: probe of 5-1:0.0 failed with error -71 [ 449.499196][ T44] usb 5-1: USB disconnect, device number 71 22:20:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 22:20:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, 0x0, 0x723}, 0x14}}, 0x0) 22:20:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:36 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000000c"], 0x0, 0x0, 0x0}, 0x0) [ 451.058266][ T5163] usb 3-1: USB disconnect, device number 71 22:20:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 22:20:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, 0x0, 0x723}, 0x14}}, 0x0) 22:20:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 451.236637][ T28] audit: type=1804 audit(1706998836.704:125): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/464/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:20:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1}, 0x14}}, 0x0) [ 451.281802][ T28] audit: type=1804 audit(1706998836.744:126): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/464/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:20:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1}, 0x14}}, 0x0) [ 451.427546][ T5157] usb 5-1: new high-speed USB device number 72 using dummy_hcd 22:20:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r1}, 0x14}}, 0x0) [ 451.557461][ T5163] usb 3-1: new high-speed USB device number 72 using dummy_hcd 22:20:37 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "dc"}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x9, 0x3f}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:20:37 executing program 0: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*-\x7f\'}&(.+}$,:\x16+*\xf0.\x1f\x00', 0xfffffffffffffffe) [ 451.698306][ T5157] usb 5-1: Using ep0 maxpacket: 32 22:20:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) 22:20:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rthdrdstopts={{0x14}}, @rthdrdstopts={{0x14, 0x29, 0x43}}], 0x28}}], 0x1, 0x0) 22:20:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xfff) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 451.828195][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.844095][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.856928][ T5157] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 451.892168][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.925578][ T5157] usb 5-1: config 0 descriptor?? 22:20:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 451.941182][ T5163] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 451.964997][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.979331][ T5157] hub 5-1:0.0: USB hub found [ 451.979474][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 451.997245][ T5163] usb 3-1: config 0 descriptor?? 22:20:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xfff) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 452.189302][ T28] audit: type=1804 audit(1706998837.674:127): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/465/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 452.223768][ T5157] hub 5-1:0.0: config failed, hub has too many ports! (err -19) 22:20:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xfff) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 452.234369][ T28] audit: type=1804 audit(1706998837.674:128): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/465/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 452.347889][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.374693][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.384685][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 22:20:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xfff) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 452.394836][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.406336][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 452.477822][ T5163] gs_usb 3-1:0.0: Couldn't get device config: (err=-32) [ 452.485667][ T5163] gs_usb: probe of 3-1:0.0 failed with error -32 [ 452.517875][ T5157] usbhid 5-1:0.0: can't add hid device: -71 [ 452.526310][ T5157] usbhid: probe of 5-1:0.0 failed with error -71 22:20:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000), 0x4) [ 452.571345][ T5157] usb 5-1: USB disconnect, device number 72 [ 452.647717][ T24] usb 2-1: string descriptor 0 read error: -22 [ 452.655525][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.665512][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 22:20:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000), 0x4) [ 452.957764][ T24] cdc_ncm 2-1:1.0: bind() failure 22:20:38 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000000c"], 0x0, 0x0, 0x0}, 0x0) 22:20:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) [ 453.000267][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 453.034848][ T24] cdc_ncm 2-1:1.1: bind() failure [ 453.053520][ T24] usb 2-1: USB disconnect, device number 4 22:20:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001140)={0x38, 0x1c, 0x401, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x1, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x4, 0x1, 0x0, 0x0, @fd}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x38}], 0x1}, 0x0) [ 453.311227][ T28] audit: type=1804 audit(1706998838.794:129): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/466/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 453.311669][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:20:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast2}}}], 0x20}}], 0x1, 0x0) [ 453.348267][ T28] audit: type=1804 audit(1706998838.834:130): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/466/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 453.388994][ T5157] usb 5-1: new high-speed USB device number 73 using dummy_hcd 22:20:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x20, 0x29, 0x43, {@private1}}}], 0x20}}], 0x1, 0x0) 22:20:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 22:20:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rthdrdstopts={{0x14}}, @rthdrdstopts={{0x14}}], 0x28}}], 0x1, 0x0) 22:20:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 22:20:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) connect(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) [ 453.657578][ T5157] usb 5-1: Using ep0 maxpacket: 32 22:20:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x20, 0x29, 0x32, {@private1}}}], 0x20}}], 0x1, 0x0) 22:20:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@mcast2}, 0x14) [ 453.797725][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.836547][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.872626][ T5157] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.904788][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.941250][ T5157] usb 5-1: config 0 descriptor?? [ 454.018085][ T5157] hub 5-1:0.0: USB hub found 22:20:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) [ 454.169523][ T5075] usb 3-1: USB disconnect, device number 72 [ 454.251218][ T5157] hub 5-1:0.0: config failed, hub has too many ports! (err -19) 22:20:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 454.503128][ T28] audit: type=1804 audit(1706998839.974:131): pid=11111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/467/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 454.557611][ T5157] usbhid 5-1:0.0: can't add hid device: -71 [ 454.571909][ T28] audit: type=1804 audit(1706998839.974:132): pid=11111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/467/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 454.579071][ T5157] usbhid: probe of 5-1:0.0 failed with error -71 22:20:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 454.627753][ T5075] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 454.709124][ T5157] usb 5-1: USB disconnect, device number 73 22:20:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rthdrdstopts={{0x14}}, @rthdrdstopts={{0x14, 0x29, 0x3b}}], 0x28}}], 0x1, 0x0) 22:20:40 executing program 1: inotify_init1(0x0) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x9}, 0x0, 0x0, 0x0) 22:20:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000290000003200000000000080000000429a47d09087cdfa1fdb"], 0x20}}], 0x1, 0x0) 22:20:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) [ 455.009187][ T5075] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 22:20:40 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000000c"], 0x0, 0x0, 0x0}, 0x0) [ 455.049405][ T5075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.090710][ T5075] usb 3-1: config 0 descriptor?? 22:20:40 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x2, 0x0) 22:20:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 22:20:40 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) 22:20:40 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 455.377516][ T5163] usb 5-1: new high-speed USB device number 74 using dummy_hcd 22:20:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 455.513251][ T28] audit: type=1804 audit(1706998840.994:133): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/468/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 22:20:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 455.545652][ T28] audit: type=1804 audit(1706998840.994:134): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/468/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 455.587624][ T5075] gs_usb 3-1:0.0: Couldn't get device config: (err=-32) [ 455.594735][ T5075] gs_usb: probe of 3-1:0.0 failed with error -32 22:20:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 455.627607][ T5163] usb 5-1: Using ep0 maxpacket: 32 22:20:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 455.748436][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.773648][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:20:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 455.793193][ T5163] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 455.814663][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.846353][ T5163] usb 5-1: config 0 descriptor?? 22:20:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 455.902521][ T5163] hub 5-1:0.0: USB hub found 22:20:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) 22:20:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:41 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80045007, 0x0) 22:20:41 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) [ 456.117822][ T5163] hub 5-1:0.0: config failed, hub has too many ports! (err -19) 22:20:41 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80045007, 0x0) 22:20:41 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) 22:20:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 22:20:41 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80045007, 0x0) [ 456.419387][ T5163] usbhid 5-1:0.0: can't add hid device: -71 [ 456.437636][ T5163] usbhid: probe of 5-1:0.0 failed with error -71 [ 456.468393][ T5163] usb 5-1: USB disconnect, device number 74 [ 456.501324][ T28] audit: type=1804 audit(1706998841.984:135): pid=11176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/469/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 456.530096][ T28] audit: type=1804 audit(1706998842.014:136): pid=11176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/469/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:20:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:42 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) 22:20:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) 22:20:42 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000000c02"], 0x0, 0x0, 0x0}, 0x0) [ 457.261146][ T5157] usb 3-1: USB disconnect, device number 73 22:20:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 22:20:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) 22:20:42 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 457.561546][ T28] audit: type=1804 audit(1706998843.044:137): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/470/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 457.625647][ T28] audit: type=1804 audit(1706998843.044:138): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/470/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:43 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 457.678471][ T784] usb 5-1: new high-speed USB device number 75 using dummy_hcd 22:20:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) [ 457.762639][ T5157] usb 3-1: new high-speed USB device number 74 using dummy_hcd 22:20:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045007, 0x0) 22:20:43 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:43 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80045007, 0x0) [ 457.983559][ T784] usb 5-1: Using ep0 maxpacket: 32 22:20:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:43 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80045007, 0x0) [ 458.117665][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.145190][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:20:43 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80045007, 0x0) [ 458.162047][ T784] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 458.175118][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 458.191288][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.205878][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.229493][ T5157] usb 3-1: config 0 descriptor?? [ 458.240952][ T784] usb 5-1: config 0 descriptor?? 22:20:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="21c0bbe6", @ANYRES16=0xffffffffffffffff, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x8040001}, 0x4810) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xbf92}, 0x1c) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r8 = accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x4, 0x0, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_UID={0x8, 0xe, 0xee00}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0xb4, r10, 0x20, 0x70bd2d, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r10, 0x400, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002a80)=ANY=[@ANYBLOB="4803040000000000f468df46c5e04ab5696e15556a2c7ec6e4cd4ff6ea52fa2ac84923b7230d623537c86f4ee879ad361f079bde8dd9df78fb4fb2e8000c65b51289c8d2329708a416f5707e", @ANYRES64=0x0, @ANYBLOB="030000000000000000000000000000000000000000000000a3000000000000000000000003000000000000000000000000000000000000000010000000000000000000000000000005050000000000000000000000000000090000009ff200", @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000ff7f0000000000000200000000000000000000000000000001000000ff0700"/114, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a000000000000002f6465762f70746d780000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000900"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000ff0700"/20], 0x348) write$FUSE_INIT(r1, 0x0, 0x0) [ 458.299639][ T784] hub 5-1:0.0: USB hub found 22:20:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 22:20:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 458.508076][ T784] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 458.528425][ T28] audit: type=1804 audit(1706998844.014:139): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/471/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 458.564423][ T28] audit: type=1804 audit(1706998844.014:140): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/471/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 458.729085][ T5157] gs_usb 3-1:0.0: Couldn't get device config: (err=-32) [ 458.742941][ T5157] gs_usb: probe of 3-1:0.0 failed with error -32 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 458.822782][ T784] usbhid 5-1:0.0: can't add hid device: -71 [ 458.830095][ T784] usbhid: probe of 5-1:0.0 failed with error -71 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 458.868536][ T784] usb 5-1: USB disconnect, device number 75 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) [ 459.227339][T11225] dccp_close: ABORT with 36 bytes unread 22:20:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:45 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000000c02"], 0x0, 0x0, 0x0}, 0x0) 22:20:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="21c0bbe6", @ANYRES16=0xffffffffffffffff, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x8040001}, 0x4810) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xbf92}, 0x1c) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r8 = accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x4, 0x0, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_UID={0x8, 0xe, 0xee00}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0xb4, r10, 0x20, 0x70bd2d, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r10, 0x400, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002a80)=ANY=[@ANYBLOB="4803040000000000f468df46c5e04ab5696e15556a2c7ec6e4cd4ff6ea52fa2ac84923b7230d623537c86f4ee879ad361f079bde8dd9df78fb4fb2e8000c65b51289c8d2329708a416f5707e", @ANYRES64=0x0, @ANYBLOB="030000000000000000000000000000000000000000000000a3000000000000000000000003000000000000000000000000000000000000000010000000000000000000000000000005050000000000000000000000000000090000009ff200", @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=r2, @ANYBLOB="000000000200000000000000010000000000000000000000000000000a000000060000002f6465762f70746d78000000000900000400000000000000000000000000000000000000000000000000000000000000000000004a0500000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff004be5000000000001000000000000000000000000a0000000000000d3dc90a5528b0a8cc961921a6472c158601b36ab40d6090f4f59b620ef63a3f5f9ba28406c991d5b0751bc8a9e12138ae61ce552370761d49b049d6deb7507afd32d4733eca52825c1608f76a9951c06c37352a0f74dd13a88cf1354215836c20a4e64bb871ec5a5883ea4", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000ff7f0000000000000200000000000000000000000000000001000000ff0700"/114, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a000000000000002f6465762f70746d780000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000900"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000ff0700"/20], 0x348) write$FUSE_INIT(r1, 0x0, 0x0) 22:20:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 22:20:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) [ 460.375774][ T44] usb 3-1: USB disconnect, device number 74 22:20:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) [ 460.564444][ T28] audit: type=1804 audit(1706998846.034:141): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/472/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 460.625949][ T28] audit: type=1804 audit(1706998846.044:142): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/472/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) [ 460.759813][ T5163] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 460.868177][ T44] usb 3-1: new high-speed USB device number 75 using dummy_hcd 22:20:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) [ 461.027536][ T5163] usb 5-1: Using ep0 maxpacket: 32 22:20:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) [ 461.178250][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.190364][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.212430][ T5163] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 461.226437][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.243976][ T5163] usb 5-1: config 0 descriptor?? [ 461.268185][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 22:20:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="21c0bbe6", @ANYRES16=0xffffffffffffffff, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x8040001}, 0x4810) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xbf92}, 0x1c) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r8 = accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x4, 0x0, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_UID={0x8, 0xe, 0xee00}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0xb4, r10, 0x20, 0x70bd2d, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r10, 0x400, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002a80)=ANY=[@ANYBLOB="4803040000000000f468df46c5e04ab5696e15556a2c7ec6e4cd4ff6ea52fa2ac84923b7230d623537c86f4ee879ad361f079bde8dd9df78fb4fb2e8000c65b51289c8d2329708a416f5707e", @ANYRES64=0x0, @ANYBLOB="030000000000000000000000000000000000000000000000a3000000000000000000000003000000000000000000000000000000000000000010000000000000000000000000000005050000000000000000000000000000090000009ff200", @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000ff7f0000000000000200000000000000000000000000000001000000ff0700"/114, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a000000000000002f6465762f70746d780000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000900"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000ff0700"/20], 0x348) write$FUSE_INIT(r1, 0x0, 0x0) [ 461.294665][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.305690][ T5163] hub 5-1:0.0: USB hub found [ 461.333665][ T44] usb 3-1: config 0 descriptor?? 22:20:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) [ 461.507905][ T5163] hub 5-1:0.0: config failed, hub has too many ports! (err -19) 22:20:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) [ 461.603175][ T28] audit: type=1804 audit(1706998847.084:143): pid=11292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/473/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 461.634320][ T28] audit: type=1804 audit(1706998847.094:144): pid=11292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/473/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) [ 461.828297][ T5163] usbhid 5-1:0.0: can't add hid device: -71 [ 461.836036][ T5163] usbhid: probe of 5-1:0.0 failed with error -71 [ 461.879040][ T5163] usb 5-1: USB disconnect, device number 76 [ 461.887933][ T44] gs_usb 3-1:0.0: Couldn't get device config: (err=-32) [ 461.896311][ T44] gs_usb: probe of 3-1:0.0 failed with error -32 22:20:47 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:20:47 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b0d61078b089b3f073763090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d50070d07070936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff36}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058123"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="00020c0000000c02"], 0x0, 0x0, 0x0}, 0x0) 22:20:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="21c0bbe6", @ANYRES16=0xffffffffffffffff, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x8040001}, 0x4810) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xbf92}, 0x1c) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r8 = accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x4, 0x0, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_UID={0x8, 0xe, 0xee00}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0xb4, r10, 0x20, 0x70bd2d, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r10, 0x400, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002a80)=ANY=[@ANYBLOB="4803040000000000f468df46c5e04ab5696e15556a2c7ec6e4cd4ff6ea52fa2ac84923b7230d623537c86f4ee879ad361f079bde8dd9df78fb4fb2e8000c65b51289c8d2329708a416f5707e", @ANYRES64=0x0, @ANYBLOB="030000000000000000000000000000000000000000000000a3000000000000000000000003000000000000000000000000000000000000000010000000000000000000000000000005050000000000000000000000000000090000009ff200", @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000ff7f0000000000000200000000000000000000000000000001000000ff0700"/114, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a000000000000002f6465762f70746d780000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000900"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000ff0700"/20], 0x348) write$FUSE_INIT(r1, 0x0, 0x0) 22:20:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) [ 462.429734][ T5157] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 462.537301][ T28] audit: type=1804 audit(1706998848.014:145): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/474/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 462.568914][ T28] audit: type=1804 audit(1706998848.054:146): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/474/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 462.615081][ T5163] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 462.687521][ T5157] usb 1-1: Using ep0 maxpacket: 16 [ 462.807707][ T5157] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.877652][ T5163] usb 5-1: Using ep0 maxpacket: 32 [ 463.027859][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.043508][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.054896][ T5163] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 463.057894][ T5157] usb 1-1: string descriptor 0 read error: -22 [ 463.068219][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.079675][ T5157] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 463.081657][ T5163] usb 5-1: config 0 descriptor?? [ 463.102936][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.139060][ T5163] hub 5-1:0.0: USB hub found 22:20:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="21c0bbe6", @ANYRES16=0xffffffffffffffff, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x8040001}, 0x4810) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xbf92}, 0x1c) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r8 = accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x4, 0x0, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_UID={0x8, 0xe, 0xee00}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0xb4, r10, 0x20, 0x70bd2d, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r10, 0x400, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002a80)=ANY=[@ANYBLOB="4803040000000000f468df46c5e04ab5696e15556a2c7ec6e4cd4ff6ea52fa2ac84923b7230d623537c86f4ee879ad361f079bde8dd9df78fb4fb2e8000c65b51289c8d2329708a416f5707e", @ANYRES64=0x0, @ANYBLOB="030000000000000000000000000000000000000000000000a3000000000000000000000003000000000000000000000000000000000000000010000000000000000000000000000005050000000000000000000000000000090000009ff200", @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000ff7f0000000000000200000000000000000000000000000001000000ff0700"/114, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a000000000000002f6465762f70746d780000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000900"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000ff0700"/20], 0x348) write$FUSE_INIT(r1, 0x0, 0x0) [ 463.162901][ T5157] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 22:20:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 463.370497][ T5163] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 463.402899][ T4505] bcm5974 1-1:1.0: could not read from device [ 463.430543][ T5157] usb 1-1: USB disconnect, device number 4 [ 463.448307][ T4505] bcm5974 1-1:1.0: could not read from device 22:20:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 463.472111][ T24] usb 3-1: USB disconnect, device number 75 [ 463.656841][ T28] audit: type=1804 audit(1706998849.134:147): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/475/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 463.687570][ T5163] usbhid 5-1:0.0: can't add hid device: -71 [ 463.693664][ T28] audit: type=1804 audit(1706998849.144:148): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/475/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 463.722028][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.724662][ T5163] usbhid: probe of 5-1:0.0 failed with error -71 [ 463.746436][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.764019][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.774614][ T5163] usb 5-1: USB disconnect, device number 77 [ 463.788065][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.809249][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.825039][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.842273][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. 22:20:49 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 463.856747][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.872038][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.885561][T11320] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.027591][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd 22:20:49 executing program 4: r0 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x80201) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000940)={0x0, 0x0}) r8 = getegid() r9 = openat$uhid(0xffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc01cf509, &(0x7f00000009c0)={r3, 0x101, 0x2, 0x2000000000}) r10 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) recvmsg(r5, &(0x7f00000027c0)={&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000002780)=[{&(0x7f00000024c0)=""/229, 0xe5}, {&(0x7f0000000300)}, {&(0x7f00000025c0)=""/166, 0xa6}, {&(0x7f0000002680)=""/238, 0xee}], 0x4}, 0x40002000) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r13, r11, 0x0, 0x0, 0x0, 0x8, {0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3571f9025eb8061cea01def1a9db290de2fb31b06b07574690a0c9f6e4129273"}}) r14 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) r15 = openat$vnet(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000e80)="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", 0x142}, {&(0x7f00000001c0)="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", 0xfb}, {&(0x7f0000000340)="e4aacac8d8c350b8eec0bacf8de5092c327ce5cab9af1ff851e991145a52a75de48ab863f7797c18db11cf2dd0d254417f7f113a64afb9aba4c53d5511c1ad9a96b5df673cf7dd68709803c7193335be79da730f367c57572276f4a53ef6cafdee0deaf50423c23fe07a6d6a", 0x6c}], 0x3, 0x0, 0x0, 0x4004080}}, {{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r12, @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32=r8, @ANYBLOB="300000000100000001000200", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=r10, @ANYRES32=r14, @ANYRESHEX=r6, @ANYRES32=r15], 0x48, 0x20001000}}], 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000100)={0x78, 0x0, r1, {0x4, 0x5e7, 0x0, {0x6, 0x5, 0x7, 0x7fff, 0x800, 0x4, 0x9, 0x8, 0x4, 0x0, 0x3, r2, r8, 0x5, 0x2}}}, 0x78) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, r17, 0x5, 0x0, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='^'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) 22:20:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x8030ae7c, 0x0) [ 464.227761][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd 22:20:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x8030ae7c, 0x0) 22:20:49 executing program 4: r0 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x80201) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000940)={0x0, 0x0}) r8 = getegid() r9 = openat$uhid(0xffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc01cf509, &(0x7f00000009c0)={r3, 0x101, 0x2, 0x2000000000}) r10 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) recvmsg(r5, &(0x7f00000027c0)={&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000002780)=[{&(0x7f00000024c0)=""/229, 0xe5}, {&(0x7f0000000300)}, {&(0x7f00000025c0)=""/166, 0xa6}, {&(0x7f0000002680)=""/238, 0xee}], 0x4}, 0x40002000) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r13, r11, 0x0, 0x0, 0x0, 0x8, {0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3571f9025eb8061cea01def1a9db290de2fb31b06b07574690a0c9f6e4129273"}}) r14 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) r15 = openat$vnet(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000e80)="c86b43d856dd0b0de38441eb63c21ea728f11ddec84e900b3432457b0f6a2dd2c1f0abd92417069748c8e2649ce99c4fe5980e18efea20748282d25223e36c2ba9484620624eef91fdc72fdfa3885d31df344255b92464f4733772c294a364b22b68b6b506184b4304cdb3280aaad72a7a5de99da4022c6cbe6a5e5057a458584800cc11d4197c9f1fa4febcef155d398eabc973c49dd4bc080bbc38ed07fefef2619417f20a1a616a82eb3b988d17af37f058aabb9dd060ec0633d80e96769ff88049cba3459dde8ece7203265b039c3cacf6e574bfe970ae4e28fd0c32ca29d346a16bd9d55d03e671799a744dab9e7c090ee26bb0c758ae0bef4328d83ad975d563a4b141ad07b9820905d510f525d74da34872aa6fe73476145e7f6d7a4c0365e9e7b34b3fae449e3cdc388e2c691baf97c5238ecf84de767a3a1a03fe91fdba", 0x142}, {&(0x7f00000001c0)="3b81e77a38a1afff738dd44a2dc79a898073f01040d40d66e60cd61780707b5b9606ae000b715923f5be18bc43fbdc9ec6efa24a4899b206b95c5f8fa50f95bddd1ef097e11528d3d8b1964db25ad0c8dc249854ba238d32619eeb2294942bbb8c8bd8e18bf8329034ce7335599fb0b2dca1348806bfd30338a9ce29dcfd54dc0934332fdfb444054fc0a39ae469fe0fa6dfac2b96eebc0a5d84941fdefdc4ced9d034de6ae035797e91c85056a0f484bd89b4ea12e7868d3d9b6310e643ed65e4d71bce250255e3e77d7dfc0d8a50e58bf0b6669a9d66bcc8e636f0e3fd7afda8d3a3077ac8dde0a4e42ddf7207a163e3451c271b6f9429ca1e85", 0xfb}, {&(0x7f0000000340)="e4aacac8d8c350b8eec0bacf8de5092c327ce5cab9af1ff851e991145a52a75de48ab863f7797c18db11cf2dd0d254417f7f113a64afb9aba4c53d5511c1ad9a96b5df673cf7dd68709803c7193335be79da730f367c57572276f4a53ef6cafdee0deaf50423c23fe07a6d6a", 0x6c}], 0x3, 0x0, 0x0, 0x4004080}}, {{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r12, @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32=r8, @ANYBLOB="300000000100000001000200", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=r10, @ANYRES32=r14, @ANYRESHEX=r6, @ANYRES32=r15], 0x48, 0x20001000}}], 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000100)={0x78, 0x0, r1, {0x4, 0x5e7, 0x0, {0x6, 0x5, 0x7, 0x7fff, 0x800, 0x4, 0x9, 0x8, 0x4, 0x0, 0x3, r2, r8, 0x5, 0x2}}}, 0x78) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, r17, 0x5, 0x0, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='^'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) [ 464.430409][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 464.454715][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 464.481212][ T24] usb 3-1: config 0 descriptor?? 22:20:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x8030ae7c, 0x0) 22:20:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045003, 0x0) [ 464.517448][ T44] usb 1-1: Using ep0 maxpacket: 16 22:20:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = dup(r1) getpid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 464.639264][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.751163][T11345] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 464.764245][ T28] audit: type=1804 audit(1706998850.244:149): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/476/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x8030ae7c, 0x0) [ 464.820018][ T28] audit: type=1804 audit(1706998850.274:150): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/476/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 464.977648][ T44] usb 1-1: string descriptor 0 read error: -22 [ 464.987673][ T24] gs_usb 3-1:0.0: Couldn't get device config: (err=-32) [ 464.998884][ T44] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 465.028981][ T24] gs_usb: probe of 3-1:0.0 failed with error -32 [ 465.045173][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 22:20:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="66b81c010f00d0f30f0966baf80cb83c869089ef66bafc0cb8f7ffffffefc4e2893ad6ea000000008000c4e19573f198660f3881a200000100660fed98d9a70000b8010000000f01c1f3837c5800b6", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 465.179712][ T44] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 465.381142][ T4505] bcm5974 1-1:1.0: could not read from device 22:20:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 465.457832][ T4505] bcm5974 1-1:1.0: could not read from device [ 465.479749][ T44] usb 1-1: USB disconnect, device number 5 [ 465.539998][ T4505] bcm5974 1-1:1.0: could not read from device 22:20:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = dup(r1) getpid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 465.785983][ T28] audit: type=1804 audit(1706998851.264:151): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/477/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 465.830286][ T5157] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 465.838052][ T28] audit: type=1804 audit(1706998851.304:152): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/477/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 465.863995][ C1] vkms_vblank_simulate: vblank timer overrun 22:20:51 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 466.227850][ T5157] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 466.254174][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.286970][ T5157] usb 2-1: config 0 descriptor?? [ 466.307464][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd 22:20:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = dup(r1) getpid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 22:20:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 466.584060][ T44] usb 3-1: USB disconnect, device number 76 [ 466.590185][ T24] usb 1-1: Using ep0 maxpacket: 16 22:20:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 466.740349][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.787588][ T5157] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 466.892529][ T28] audit: type=1804 audit(1706998852.374:153): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/478/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 466.919069][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.930427][ T28] audit: type=1804 audit(1706998852.374:154): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/478/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 467.047623][ T44] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 467.067872][ T24] usb 1-1: string descriptor 0 read error: -22 [ 467.101092][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 467.135096][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.210077][ T5075] usb 2-1: USB disconnect, device number 5 [ 467.220666][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 467.448325][ T5156] usb 1-1: USB disconnect, device number 6 [ 467.467591][ T4505] bcm5974 1-1:1.0: could not read from device [ 467.477708][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 467.489788][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:53 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 467.498939][T10183] bcm5974 1-1:1.0: could not read from device [ 467.561058][ T44] usb 3-1: config 0 descriptor?? 22:20:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x2, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) 22:20:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:53 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:20:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 468.048189][ T44] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 468.057630][ T28] audit: type=1804 audit(1706998853.524:155): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/479/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 468.084100][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.102178][ T44] gs_usb: probe of 3-1:0.0 failed with error -121 [ 468.123735][ T5157] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 468.141734][ T28] audit: type=1804 audit(1706998853.544:156): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/479/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 468.167684][ C1] vkms_vblank_simulate: vblank timer overrun 22:20:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 468.408009][ T44] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 468.542005][ T5157] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 468.571481][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:20:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 468.598425][ T5157] usb 2-1: config 0 descriptor?? [ 468.711413][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 468.739862][T11399] __nla_validate_parse: 311 callbacks suppressed [ 468.739883][T11399] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. 22:20:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 468.870584][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:20:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 469.045309][ T28] audit: type=1804 audit(1706998854.524:157): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/480/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 469.071779][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.089272][ T5157] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 469.121077][ T28] audit: type=1804 audit(1706998854.564:158): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/480/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 469.147072][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.156141][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.173712][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.188788][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.198563][ T44] usb 1-1: string descriptor 0 read error: -22 [ 469.204876][ T44] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 469.214451][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 22:20:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 469.229917][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.250288][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.272033][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.286297][ T44] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 469.336151][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.394321][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. 22:20:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 469.439032][T11428] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.507551][ T4505] bcm5974 1-1:1.0: could not read from device [ 469.546418][ T44] usb 1-1: USB disconnect, device number 7 [ 469.552541][ T4505] bcm5974 1-1:1.0: could not read from device [ 469.555765][ T5157] usb 2-1: USB disconnect, device number 6 [ 469.584726][ T4505] bcm5974 1-1:1.0: could not read from device [ 469.609362][ T4505] bcm5974 1-1:1.0: could not read from device 22:20:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 469.729476][ T5156] usb 3-1: USB disconnect, device number 77 22:20:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52e"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 470.102839][ T28] audit: type=1804 audit(1706998855.584:159): pid=11457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/481/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:55 executing program 0: [ 470.202987][ T28] audit: type=1804 audit(1706998855.624:160): pid=11457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/481/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:55 executing program 0: 22:20:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 470.317658][ T5156] usb 3-1: new high-speed USB device number 78 using dummy_hcd 22:20:55 executing program 0: 22:20:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:56 executing program 0: syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 470.538029][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd 22:20:56 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 470.707818][ T5156] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 470.716923][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.752722][ T5156] usb 3-1: config 0 descriptor?? 22:20:56 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:56 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52e"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 470.947674][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 470.968239][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.989709][ T24] usb 2-1: config 0 descriptor?? [ 471.131470][ T28] audit: type=1804 audit(1706998856.614:161): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/482/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:56 executing program 0: syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 471.170380][ T28] audit: type=1804 audit(1706998856.614:162): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/482/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 471.245047][ T5156] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 471.272801][ T5156] gs_usb: probe of 3-1:0.0 failed with error -121 22:20:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 471.497660][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces 22:20:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:57 executing program 0: syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:20:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52e"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 471.940136][ T5157] usb 2-1: USB disconnect, device number 7 [ 472.078059][ T28] audit: type=1804 audit(1706998857.564:163): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/483/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 472.128426][ T28] audit: type=1804 audit(1706998857.564:164): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/483/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 22:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:57 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) 22:20:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 472.827561][ T784] usb 1-1: new high-speed USB device number 8 using dummy_hcd 22:20:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 472.873600][ T44] usb 3-1: USB disconnect, device number 78 [ 472.898336][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd 22:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 473.017714][ T784] usb 1-1: device descriptor read/64, error -71 [ 473.139466][ T28] audit: type=1804 audit(1706998858.624:165): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/484/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 473.196663][ T28] audit: type=1804 audit(1706998858.664:166): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/484/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 22:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 473.328825][ T784] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 473.367753][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 473.389464][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.398233][ T44] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 473.426184][ T24] usb 2-1: config 0 descriptor?? 22:20:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 473.537683][ T784] usb 1-1: device descriptor read/64, error -71 [ 473.658342][ T784] usb usb1-port1: attempt power cycle 22:20:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1, 0x0, 0x1}]}) [ 473.777573][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 473.786695][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.804989][ T44] usb 3-1: config 0 descriptor?? 22:20:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:20:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) [ 473.929774][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 474.052565][ T28] audit: type=1804 audit(1706998859.534:167): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/485/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 22:20:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) [ 474.082041][ T28] audit: type=1804 audit(1706998859.534:168): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/485/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 474.109130][ T784] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 474.197779][ T784] usb 1-1: device descriptor read/8, error -71 [ 474.298036][ T44] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 474.305151][ T44] gs_usb: probe of 3-1:0.0 failed with error -121 22:20:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) [ 474.409461][ T5157] usb 2-1: USB disconnect, device number 8 [ 474.490877][ T784] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 474.607719][ T784] usb 1-1: device descriptor read/8, error -71 22:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) [ 474.745456][ T784] usb usb1-port1: unable to enumerate USB device 22:21:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) 22:21:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 475.141412][ T28] audit: type=1804 audit(1706998860.624:169): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/486/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 [ 475.185691][ T28] audit: type=1804 audit(1706998860.624:170): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/486/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 22:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) [ 475.327772][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd 22:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x0, 0x0, 0x1}]}) 22:21:01 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:21:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x0, 0x0, 0x1}]}) [ 475.708114][ T44] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 475.734125][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.775390][ T44] usb 2-1: config 0 descriptor?? 22:21:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x0, 0x0, 0x1}]}) [ 475.927575][ T5157] usb 1-1: new high-speed USB device number 12 using dummy_hcd 22:21:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 476.000904][ T784] usb 3-1: USB disconnect, device number 79 [ 476.085469][ T28] audit: type=1804 audit(1706998861.554:171): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/487/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 476.138645][ T5157] usb 1-1: device descriptor read/64, error -71 [ 476.143795][ T28] audit: type=1804 audit(1706998861.564:172): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/487/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1}]}) [ 476.273342][ T44] gs_usb 2-1:0.0: Configuring for 1 interfaces 22:21:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1}]}) [ 476.427536][ T5157] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 476.500926][ T44] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 476.510481][ T44] gs_usb: probe of 2-1:0.0 failed with error -71 [ 476.517836][ T784] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 476.533415][ T44] usb 2-1: USB disconnect, device number 9 22:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{}, {0x1}]}) [ 476.638076][ T5157] usb 1-1: device descriptor read/64, error -71 22:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x0, 0x1}]}) [ 476.779047][ T5157] usb usb1-port1: attempt power cycle 22:21:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x0, 0x1}]}) [ 476.888828][ T784] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 476.910429][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.935109][ T784] usb 3-1: config 0 descriptor?? 22:21:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 477.041454][ T28] audit: type=1804 audit(1706998862.524:173): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/488/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x0, 0x1}]}) [ 477.087016][ T28] audit: type=1804 audit(1706998862.524:174): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/488/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 477.208186][ T5157] usb 1-1: new high-speed USB device number 14 using dummy_hcd 22:21:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) [ 477.297752][ T5157] usb 1-1: device descriptor read/8, error -71 22:21:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 22:21:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) [ 477.397559][ T5163] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 477.437940][ T784] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 477.452252][ T784] gs_usb: probe of 3-1:0.0 failed with error -121 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) [ 477.580871][ T5157] usb 1-1: new high-speed USB device number 15 using dummy_hcd 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) [ 477.687750][ T5157] usb 1-1: device descriptor read/8, error -71 22:21:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5015, 0x0) [ 477.818357][ T5157] usb usb1-port1: unable to enumerate USB device [ 477.827599][ T5163] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 477.836693][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.882223][ T5163] usb 2-1: config 0 descriptor?? 22:21:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5015, 0x0) 22:21:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5015, 0x0) [ 478.029734][ T28] audit: type=1804 audit(1706998863.514:175): pid=11699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/489/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) [ 478.103194][ T28] audit: type=1804 audit(1706998863.514:176): pid=11699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/489/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 22:21:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) [ 478.379005][ T5163] gs_usb 2-1:0.0: Configuring for 1 interfaces 22:21:03 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5015, 0x0) 22:21:04 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5015, 0x0) 22:21:04 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:21:04 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5015, 0x0) [ 478.597704][ T5163] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 478.607817][ T5163] gs_usb: probe of 2-1:0.0 failed with error -71 [ 478.623617][ T5163] usb 2-1: USB disconnect, device number 10 22:21:04 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000032000/0x3000)=nil, 0x3000, 0x18) 22:21:04 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) 22:21:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:04 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) 22:21:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 479.136877][ T5163] usb 3-1: USB disconnect, device number 80 [ 479.138883][ T5157] usb 1-1: new high-speed USB device number 16 using dummy_hcd 22:21:04 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) 22:21:04 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) [ 479.306549][ T28] audit: type=1804 audit(1706998864.784:177): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/490/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:21:04 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) [ 479.340424][ T28] audit: type=1804 audit(1706998864.784:178): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/490/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 479.377726][ T5157] usb 1-1: device descriptor read/64, error -71 22:21:04 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) 22:21:05 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) [ 479.537615][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd 22:21:05 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) 22:21:05 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) [ 479.637530][ T5163] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 479.658761][ T5157] usb 1-1: new high-speed USB device number 17 using dummy_hcd 22:21:05 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001c6000/0x2000)=nil) 22:21:05 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00001c6000/0x2000)=nil) 22:21:05 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00001c6000/0x2000)=nil) [ 479.857977][ T5157] usb 1-1: device descriptor read/64, error -71 [ 479.897627][ T7] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 22:21:05 executing program 4: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00001c6000/0x2000)=nil) 22:21:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 479.915966][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.942999][ T7] usb 2-1: config 0 descriptor?? [ 479.988915][ T5157] usb usb1-port1: attempt power cycle [ 480.047995][ T5163] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 480.064517][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:21:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 480.093304][ T5163] usb 3-1: config 0 descriptor?? 22:21:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 480.280308][ T28] audit: type=1804 audit(1706998865.764:179): pid=11767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/491/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 480.311562][ T28] audit: type=1804 audit(1706998865.774:180): pid=11767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/491/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:21:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xeae}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) [ 480.417517][ T5157] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 480.437737][ T7] gs_usb 2-1:0.0: Configuring for 1 interfaces 22:21:06 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x20}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x0, 0x3f}}}}}}}]}}, 0x0) [ 480.507564][ T5157] usb 1-1: device descriptor read/8, error -71 [ 480.578151][ T5163] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 480.590901][ T5163] gs_usb: probe of 3-1:0.0 failed with error -121 [ 480.657665][ T7] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 480.666403][ T7] gs_usb: probe of 2-1:0.0 failed with error -71 [ 480.678385][ T7] usb 2-1: USB disconnect, device number 11 [ 480.787707][ T5157] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 480.847698][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 480.877772][ T5157] usb 1-1: device descriptor read/8, error -71 22:21:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 480.998627][ T5157] usb usb1-port1: unable to enumerate USB device 22:21:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 481.217511][ T28] audit: type=1804 audit(1706998866.694:181): pid=11777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/492/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 481.247723][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.265152][ T28] audit: type=1804 audit(1706998866.694:182): pid=11777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/492/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 481.272126][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.323526][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.333927][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 481.349633][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 481.547599][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.557932][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.567861][ T24] usb 5-1: Product: syz [ 481.572237][ T24] usb 5-1: Manufacturer: syz [ 481.577027][ T24] usb 5-1: SerialNumber: syz [ 481.597553][ T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd 22:21:07 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 481.881482][ T24] cdc_ncm 5-1:1.0: bind() failure [ 481.895570][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 481.903122][ T24] cdc_ncm 5-1:1.1: bind() failure [ 481.916833][ T24] usb 5-1: USB disconnect, device number 78 22:21:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 481.989481][ T44] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 481.998976][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.018145][ T44] usb 2-1: config 0 descriptor?? [ 482.195864][ T28] audit: type=1804 audit(1706998867.674:183): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/493/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 482.223619][ T5157] usb 1-1: new high-speed USB device number 20 using dummy_hcd 22:21:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 482.252409][ T28] audit: type=1804 audit(1706998867.674:184): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/493/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 482.254692][ T5075] usb 3-1: USB disconnect, device number 81 [ 482.294966][T11786] __nla_validate_parse: 20 callbacks suppressed [ 482.294985][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:07 executing program 4: r0 = add_key$keyring(&(0x7f0000005580), &(0x7f00000055c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)='|*%\x11\x00') [ 482.382715][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.403448][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.425845][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:07 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) [ 482.467764][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.491324][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.497476][ T5157] usb 1-1: Using ep0 maxpacket: 16 [ 482.527745][ T44] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 482.534178][ T44] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 482.547776][ T44] gs_usb: probe of 2-1:0.0 failed with error -22 [ 482.555696][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.575020][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.591965][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.608857][T11786] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:08 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) [ 482.627617][ T5157] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 22:21:08 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) [ 482.722764][ T5075] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 482.749638][ T784] usb 2-1: USB disconnect, device number 12 22:21:08 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) [ 482.877846][ T5157] usb 1-1: string descriptor 0 read error: -22 [ 482.886067][ T5157] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 482.897687][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 22:21:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 482.959932][ T5157] bcm5974 1-1:1.0: Unexpected non-int endpoint [ 482.967013][ T5157] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 22:21:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x0) [ 483.088932][ T5075] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 483.117561][ T5075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.128252][ T5075] usb 3-1: config 0 descriptor?? 22:21:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0xd8, 0x120, 0x0, {0x0, 0x5803}, [@common=@unspec=@time={{0x38}}, @common=@unspec=@cluster={{0x30}, {0x25}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'geneve1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x255) [ 483.152521][ T24] usb 1-1: USB disconnect, device number 20 22:21:08 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 483.222176][T11809] xt_cluster: you have exceeded the maximum number of cluster nodes (37 > 32) [ 483.247236][ T28] audit: type=1804 audit(1706998868.724:185): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/494/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:08 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 483.298850][ T28] audit: type=1804 audit(1706998868.724:186): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/494/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 483.598135][ T5075] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 483.606616][ T5075] gs_usb: probe of 3-1:0.0 failed with error -121 22:21:09 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 483.660277][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd 22:21:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 484.017522][ T5075] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 484.067910][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 484.077020][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.090027][ T24] usb 2-1: config 0 descriptor?? 22:21:09 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 484.277435][ T5075] usb 1-1: Using ep0 maxpacket: 16 [ 484.397849][ T5075] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 484.557920][ T24] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 484.570496][ T24] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 484.581967][ T24] gs_usb: probe of 2-1:0.0 failed with error -22 [ 484.677756][ T5075] usb 1-1: string descriptor 0 read error: -22 [ 484.690567][ T5075] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 484.703720][ T5075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.770150][ T24] usb 2-1: USB disconnect, device number 13 [ 484.792667][ T5075] bcm5974 1-1:1.0: Unexpected non-int endpoint [ 484.825547][ T5075] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 22:21:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 485.004881][ T5075] usb 1-1: USB disconnect, device number 21 22:21:10 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 485.207572][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 485.207590][ T28] audit: type=1804 audit(1706998870.684:189): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/496/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 485.255920][ T28] audit: type=1804 audit(1706998870.694:190): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/496/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB='@0'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 485.406855][ T5157] usb 3-1: USB disconnect, device number 82 22:21:11 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 485.747583][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 485.907835][ T784] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 485.917631][ T5157] usb 3-1: new high-speed USB device number 83 using dummy_hcd 22:21:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 486.117790][ T7] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 486.120036][ T28] audit: type=1804 audit(1706998871.604:191): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/497/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 486.126896][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.165594][ T28] audit: type=1804 audit(1706998871.654:192): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/497/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 486.187443][ T784] usb 1-1: Using ep0 maxpacket: 16 22:21:11 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 486.233877][ T7] usb 2-1: config 0 descriptor?? [ 486.327596][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 486.336781][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.345450][ T784] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 486.367269][ T5157] usb 3-1: config 0 descriptor?? [ 486.607667][ T784] usb 1-1: string descriptor 0 read error: -22 [ 486.616872][ T784] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 486.626089][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.679775][ T784] bcm5974 1-1:1.0: Unexpected non-int endpoint [ 486.686859][ T784] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 486.737634][ T7] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 486.744039][ T7] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 486.753688][ T7] gs_usb: probe of 2-1:0.0 failed with error -22 [ 486.847585][ T5157] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 486.854711][ T5157] gs_usb: probe of 3-1:0.0 failed with error -121 [ 486.898370][ T5157] usb 1-1: USB disconnect, device number 22 22:21:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 486.944790][ T24] usb 2-1: USB disconnect, device number 14 [ 487.169621][ T28] audit: type=1804 audit(1706998872.654:193): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/498/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:12 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) [ 487.197731][ T28] audit: type=1804 audit(1706998872.664:194): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/498/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:12 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:21:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:13 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) [ 487.867863][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 487.887706][ T5157] usb 2-1: new high-speed USB device number 15 using dummy_hcd 22:21:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 488.147920][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 488.259608][ T5157] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 488.277140][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.292101][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.305477][ T5157] usb 2-1: config 0 descriptor?? [ 488.306219][ T28] audit: type=1804 audit(1706998873.784:195): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/499/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 488.393867][ T28] audit: type=1804 audit(1706998873.784:196): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/499/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:13 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) 22:21:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB='@0'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 488.482497][ T7] usb 3-1: USB disconnect, device number 83 [ 488.627568][ T24] usb 1-1: string descriptor 0 read error: -22 [ 488.634257][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 488.645969][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.721555][ T24] usbhid 1-1:1.0: can't add hid device: -22 [ 488.733545][ T24] usbhid: probe of 1-1:1.0 failed with error -22 [ 488.817687][ T5157] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 488.825448][ T5157] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 488.836214][ T5157] gs_usb: probe of 2-1:0.0 failed with error -22 [ 488.916269][ T24] usb 1-1: USB disconnect, device number 23 [ 488.977550][ T7] usb 3-1: new high-speed USB device number 84 using dummy_hcd 22:21:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 489.025981][ T44] usb 2-1: USB disconnect, device number 15 22:21:14 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 489.247197][ T28] audit: type=1804 audit(1706998874.724:197): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/500/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 489.288647][ T28] audit: type=1804 audit(1706998874.764:198): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/500/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 489.357748][ T7] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 489.367129][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.390217][ T7] usb 3-1: config 0 descriptor?? 22:21:14 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:21:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 489.757799][ T5157] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 489.867599][ T7] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 489.875126][ T7] gs_usb: probe of 3-1:0.0 failed with error -121 [ 489.893143][ T5228] usb 2-1: new high-speed USB device number 16 using dummy_hcd 22:21:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 489.997593][ T5157] usb 1-1: Using ep0 maxpacket: 16 22:21:15 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 490.137575][ T5157] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.267771][ T5228] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 490.277268][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.293619][ T5228] usb 2-1: config 0 descriptor?? [ 490.387636][ T5157] usb 1-1: string descriptor 0 read error: -22 [ 490.394112][ T5157] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 490.409886][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.469872][ T5157] usbhid 1-1:1.0: can't add hid device: -22 [ 490.477176][ T5157] usbhid: probe of 1-1:1.0 failed with error -22 [ 490.667775][ T5075] usb 1-1: USB disconnect, device number 24 [ 490.777872][ T5228] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 490.784574][ T5228] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 490.793063][ T5228] gs_usb: probe of 2-1:0.0 failed with error -22 22:21:16 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:21:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 490.989054][ T5075] usb 2-1: USB disconnect, device number 16 [ 491.134529][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 491.134545][ T28] audit: type=1804 audit(1706998876.614:201): pid=11882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/502/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:16 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 491.171571][ T28] audit: type=1804 audit(1706998876.614:202): pid=11882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/502/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:17 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 491.538498][ T44] usb 1-1: new high-speed USB device number 25 using dummy_hcd 22:21:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB='@0'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 491.601041][ T5075] usb 3-1: USB disconnect, device number 84 [ 491.797542][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 491.859828][ T5156] usb 2-1: new high-speed USB device number 17 using dummy_hcd 22:21:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 491.938300][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.137873][ T5075] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 492.183303][ T28] audit: type=1804 audit(1706998877.664:203): pid=11894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/503/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 492.227805][ T44] usb 1-1: string descriptor 0 read error: -22 [ 492.244445][ T44] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 492.258112][ T28] audit: type=1804 audit(1706998877.664:204): pid=11894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/503/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 492.270284][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.292537][ T5156] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 492.305793][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.323081][ T5156] usb 2-1: config 0 descriptor?? 22:21:17 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 492.342313][ T44] usbhid 1-1:1.0: can't add hid device: -22 [ 492.356761][ T44] usbhid: probe of 1-1:1.0 failed with error -22 [ 492.517790][ T5075] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 492.534678][ T5075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.549220][ T5157] usb 1-1: USB disconnect, device number 25 [ 492.579503][ T5075] usb 3-1: config 0 descriptor?? [ 492.804255][ T5156] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 492.811175][ T5156] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 492.828335][ T5156] gs_usb: probe of 2-1:0.0 failed with error -22 22:21:18 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:18 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 493.025552][ T24] usb 2-1: USB disconnect, device number 17 [ 493.057878][ T5075] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 493.068121][ T5075] gs_usb: probe of 3-1:0.0 failed with error -121 [ 493.187067][ T28] audit: type=1804 audit(1706998878.664:205): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/504/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 493.237745][ T28] audit: type=1804 audit(1706998878.704:206): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/504/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:21:19 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 493.517659][ T5075] usb 1-1: new high-speed USB device number 26 using dummy_hcd 22:21:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:21:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:21:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 493.777580][ T5075] usb 1-1: Using ep0 maxpacket: 16 22:21:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 493.901624][ T5075] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.920667][ T5075] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:21:19 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 494.137151][ T28] audit: type=1804 audit(1706998879.614:207): pid=11920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/505/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 494.182505][ T28] audit: type=1804 audit(1706998879.644:208): pid=11920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/505/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 494.183447][ T5075] usb 1-1: string descriptor 0 read error: -22 [ 494.215125][ T5075] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 494.224427][ T5075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.284320][ T5075] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 494.497634][ T4505] bcm5974 1-1:1.0: could not read from device 22:21:20 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 494.547696][ T4505] bcm5974 1-1:1.0: could not read from device [ 494.588738][ T4505] bcm5974 1-1:1.0: could not read from device [ 494.603808][ T5075] usb 1-1: USB disconnect, device number 26 [ 494.628795][ T4505] bcm5974 1-1:1.0: could not read from device 22:21:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 494.735807][ T5157] usb 3-1: USB disconnect, device number 85 22:21:20 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:20 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 495.125217][ T28] audit: type=1804 audit(1706998880.604:209): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/506/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 495.167269][ T28] audit: type=1804 audit(1706998880.644:210): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/506/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 495.239106][ T5157] usb 3-1: new high-speed USB device number 86 using dummy_hcd 22:21:20 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 495.397424][ T784] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 495.637563][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 495.646706][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.655032][ T784] usb 1-1: Using ep0 maxpacket: 16 [ 495.674474][ T5157] usb 3-1: config 0 descriptor?? [ 495.787567][ T784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.798697][ T784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:21:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:21 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:21:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:21 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 496.067614][ T784] usb 1-1: string descriptor 0 read error: -22 [ 496.076120][ T784] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 22:21:21 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 496.111887][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.140095][ T5157] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 496.192272][ T784] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 22:21:21 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 496.358733][ T5157] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 496.369325][ T5157] gs_usb: probe of 3-1:0.0 failed with error -121 [ 496.407550][ T4505] bcm5974 1-1:1.0: could not read from device [ 496.448200][ T784] usb 1-1: USB disconnect, device number 27 [ 496.461568][ T4505] bcm5974 1-1:1.0: could not read from device [ 496.564911][ T7] usb 3-1: USB disconnect, device number 86 22:21:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c2100", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:22 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:21:22 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 497.158343][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 497.158361][ T28] audit: type=1804 audit(1706998882.644:213): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/508/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 497.255168][ T28] audit: type=1804 audit(1706998882.674:214): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/508/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 497.302486][T11967] __nla_validate_parse: 168 callbacks suppressed [ 497.302506][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.318964][ T7] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 497.398307][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.438556][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.470225][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.513087][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.523680][ T5228] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 497.558502][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.574168][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.589332][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 497.604141][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.608294][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 497.638009][T11967] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.757659][ T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 497.757728][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.778615][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.788522][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 22:21:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c2100", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 497.927873][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 497.938424][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.956320][ T5228] usb 3-1: config 0 descriptor?? [ 497.987688][ T44] usb 2-1: device descriptor read/64, error -71 [ 498.057772][ T7] usb 1-1: string descriptor 0 read error: -22 [ 498.064136][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 498.086318][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.131241][ T28] audit: type=1804 audit(1706998883.614:215): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/509/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 498.174225][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11 22:21:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c2100", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 498.277460][ T44] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 498.288436][ T28] audit: type=1804 audit(1706998883.644:216): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/509/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 22:21:23 executing program 4: socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 498.376550][ T24] usb 1-1: USB disconnect, device number 28 [ 498.388127][ T4505] bcm5974 1-1:1.0: could not read from device [ 498.407607][ T4505] bcm5974 1-1:1.0: could not read from device [ 498.425264][T10183] bcm5974 1-1:1.0: could not read from device [ 498.437840][ T5228] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 498.453032][ T4505] bcm5974 1-1:1.0: could not read from device [ 498.479619][ T28] audit: type=1804 audit(1706998883.964:217): pid=11983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/510/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 498.487537][ T44] usb 2-1: device descriptor read/64, error -71 [ 498.551310][ T28] audit: type=1804 audit(1706998883.994:218): pid=11983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/510/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 498.649426][ T5228] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 498.661234][ T5228] gs_usb: probe of 3-1:0.0 failed with error -121 [ 498.679900][ T44] usb usb2-port1: attempt power cycle [ 498.850896][ T5228] usb 3-1: USB disconnect, device number 87 22:21:24 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 22:21:24 executing program 4: socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 499.107618][ T44] usb 2-1: new high-speed USB device number 20 using dummy_hcd 22:21:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 499.207515][ T44] usb 2-1: device descriptor read/8, error -71 [ 499.327463][ T7] usb 1-1: new high-speed USB device number 29 using dummy_hcd 22:21:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 499.405053][ T28] audit: type=1804 audit(1706998884.884:219): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/511/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 499.448092][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.468944][ T28] audit: type=1804 audit(1706998884.884:220): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/511/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 499.506194][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.522277][ T44] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 499.547530][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.567420][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.586557][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.595094][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 499.614035][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.627672][ T44] usb 2-1: device descriptor read/8, error -71 [ 499.638777][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. 22:21:25 executing program 4: socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 499.657260][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.691367][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.706857][T11994] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 499.738076][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.749283][ T44] usb usb2-port1: unable to enumerate USB device [ 499.763208][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.791780][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.804936][ T5228] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 499.997752][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 500.013871][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.022693][ T7] usb 1-1: Product: syz [ 500.027214][ T7] usb 1-1: Manufacturer: syz [ 500.034177][ T7] usb 1-1: SerialNumber: syz [ 500.084702][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 22:21:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 500.208211][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 500.237020][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.272227][ T5228] usb 3-1: config 0 descriptor?? [ 500.288390][ T7] usb 1-1: USB disconnect, device number 29 [ 500.303583][ T4505] bcm5974 1-1:1.0: could not read from device [ 500.316623][T10183] bcm5974 1-1:1.0: could not read from device 22:21:25 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 500.506850][ T28] audit: type=1804 audit(1706998885.984:221): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/512/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 500.568704][ T28] audit: type=1804 audit(1706998885.984:222): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/512/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 500.747584][ T5228] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:21:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) 22:21:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x4000800) [ 500.937492][ T44] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 500.963723][ T5228] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) 22:21:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) write$binfmt_aout(r0, 0x0, 0x0) [ 500.991537][ T5228] gs_usb: probe of 3-1:0.0 failed with error -121 22:21:26 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 501.137548][ T44] usb 2-1: device descriptor read/64, error -71 [ 501.165756][ T5156] usb 3-1: USB disconnect, device number 88 22:21:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 501.418433][ T44] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 501.620010][ T44] usb 2-1: device descriptor read/64, error -71 22:21:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:27 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 501.753490][ T44] usb usb2-port1: attempt power cycle [ 501.778404][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786456][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 22:21:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, &(0x7f0000000080)) 22:21:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x40) 22:21:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4010) [ 502.112791][ T5228] usb 3-1: new high-speed USB device number 89 using dummy_hcd 22:21:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 22:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x14}, 0x14}}, 0x4) [ 502.247441][ T44] usb 2-1: new high-speed USB device number 24 using dummy_hcd 22:21:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 502.337637][ T44] usb 2-1: device descriptor read/8, error -71 22:21:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x404c051) 22:21:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2) write$P9_RSYMLINK(r0, 0x0, 0x0) 22:21:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$inet_nvme(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x22) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001d0023"], 0x14}}, 0x0) [ 502.528008][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 502.546054][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.574641][ T5228] usb 3-1: config 0 descriptor?? [ 502.608654][ T44] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 502.633349][ T28] kauditd_printk_skb: 2 callbacks suppressed 22:21:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x844) [ 502.633367][ T28] audit: type=1804 audit(1706998888.094:225): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/514/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 502.680405][T12043] __nla_validate_parse: 281 callbacks suppressed [ 502.680444][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:28 executing program 0: openat$tun(0xffffff9c, &(0x7f0000000040), 0x1c3200, 0x0) [ 502.731998][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.741770][ T28] audit: type=1804 audit(1706998888.094:226): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/514/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 22:21:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x181801) write$9p(r0, 0x0, 0x0) [ 502.787745][ T44] usb 2-1: device descriptor read/8, error -71 [ 502.805239][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.831345][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.847018][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.871438][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.898028][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.913069][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.928417][ T44] usb usb2-port1: unable to enumerate USB device 22:21:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xb, 0x0, &(0x7f0000000000)) 22:21:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x24058094) [ 502.942276][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.968079][T12043] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:28 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x4a) [ 503.077715][ T5228] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:21:28 executing program 0: keyctl$get_security(0x13, 0x0, 0x0, 0x100000) r0 = add_key$keyring(&(0x7f0000005580), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000005500), &(0x7f0000005540)={'syz', 0x3}, 0x0, 0x0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r3 = getgid() keyctl$chown(0x4, r1, r2, r3) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)={0x0, 0x0, @c}, 0x29, r0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 22:21:28 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10880) write$P9_RSTATu(r0, 0x0, 0x0) [ 503.287534][ T5228] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 503.299526][ T5228] gs_usb: probe of 3-1:0.0 failed with error -32 22:21:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x44) 22:21:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:28 executing program 0: r0 = socket(0x11, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:21:28 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:28 executing program 0: r0 = socket(0x2, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0}}, 0x0) 22:21:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 503.557991][T12078] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 22:21:29 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) [ 503.660065][ T28] audit: type=1804 audit(1706998889.144:227): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/515/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:21:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14}, 0x14}}, 0xf1bb1f77f6f66886) [ 503.710707][ T28] audit: type=1804 audit(1706998889.174:228): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/515/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:21:29 executing program 0: r0 = socket(0x1, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, 0x0, 0x0) 22:21:29 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10880) write$P9_RMKDIR(r0, 0x0, 0x0) 22:21:29 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2) write$P9_RWALK(r0, 0x0, 0x0) 22:21:29 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10880) write$P9_RXATTRWALK(r0, 0x0, 0x0) [ 504.087997][ T5228] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 504.307479][ T5228] usb 2-1: device descriptor read/64, error -71 [ 504.597487][ T5228] usb 2-1: new high-speed USB device number 27 using dummy_hcd 22:21:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:30 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 22:21:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:30 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 504.765239][ T5223] usb 3-1: USB disconnect, device number 89 [ 504.792889][ T5228] usb 2-1: device descriptor read/64, error -71 22:21:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x20040000) [ 504.905883][ T28] audit: type=1804 audit(1706998890.384:229): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/516/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 504.936743][ T5228] usb usb2-port1: attempt power cycle [ 504.954184][ T28] audit: type=1804 audit(1706998890.414:230): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/516/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14}, 0x14}}, 0x800) 22:21:30 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x13065e30) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:21:30 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x13065e30) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:21:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x60) [ 505.267765][ T5223] usb 3-1: new high-speed USB device number 90 using dummy_hcd 22:21:30 executing program 0: msgrcv(0x0, 0x0, 0x52, 0x3, 0x1800) 22:21:30 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) [ 505.447533][ T5228] usb 2-1: new high-speed USB device number 28 using dummy_hcd 22:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x4) 22:21:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x4000) [ 505.557567][ T5228] usb 2-1: device descriptor read/8, error -71 22:21:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c0", @ANYRES16, @ANYBLOB="15"], 0x40}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000ec0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="657290302e9f8c1be5c0000000000000", @ANYRES32=0x0, @ANYBLOB="00077800000000010000000747ec005c006700003a2f9078e0000001e000000144088fc000000000890bdaffffffffe00000018806b203094189178cffffffffac141421ffffffffe0000001ac14143044143473ffffffff00000001ac1e0001000000c294040000"]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x10, 0x8, 0x8, 0x2, {{0x34, 0x4, 0x0, 0x2b, 0xd0, 0x64, 0x0, 0xff, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x21, 0x3, [{0x2, 0xc, "e3283e3806e5271c5661"}, {0x1, 0x4, "18b4"}, {0x7, 0xb, "bc857ea188dfd72f42"}]}, @timestamp={0x44, 0x10, 0xb3, 0x0, 0x8, [0x8, 0x6, 0x6]}, @ssrr={0x89, 0xf, 0xa4, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @ssrr={0x89, 0x17, 0x96, [@rand_addr=0x64010101, @multicast1, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @lsrr={0x83, 0x1f, 0x23, [@local, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x24, 0x49, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x401}, {@broadcast, 0x401}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}]}, @rr={0x7, 0x17, 0xce, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x1, [0x1]}]}}}}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x41b, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_PORT={0x3}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x7c, r8, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x7c}}, 0x8000) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3f8, 0x200, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x70) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001000)={0x100, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffff1f, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r6}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8c0}, 0xc044) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r13, 0xc4089434, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r13, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x401}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xe55a}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80d0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r14, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', r12, 0x1, 0x700, 0x1, 0x5, {{0x55, 0x4, 0x3, 0x23, 0x154, 0x68, 0x0, 0x6, 0x29, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0x3c, 0xf4, 0x1, 0x2, [{@private=0xa010101, 0x7}, {@multicast2, 0x4}, {@local, 0x4c}, {@multicast1, 0x9}, {@empty, 0x1}, {@multicast1, 0x7dbd}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @timestamp_addr={0x44, 0x34, 0xc8, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x4}, {@multicast2, 0x248f05f1}, {@loopback, 0x5}, {@multicast2, 0x7}, {@multicast2, 0x5}]}, @lsrr={0x83, 0xb, 0x77, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x5c, 0x3, 0x3, [{@local, 0xbed}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0xb9, 0x3, 0x7, [{@empty, 0x101}, {@remote, 0x2}, {@loopback, 0x9048}, {@local, 0x15}, {@rand_addr=0x64010102, 0x80000001}, {@local, 0x44}, {@private=0xa010101, 0xfffffffc}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x5d}, {@broadcast, 0x1000}]}, @cipso={0x86, 0x4b, 0x1, [{0x0, 0xc, "e4694d2dbe1d8c4dd0eb"}, {0x0, 0xa, "6496090a7c9b3700"}, {0x5, 0x2}, {0x0, 0x8, "9c0c8d6b1f1a"}, {0x6, 0x6, 'H`+{'}, {0x2, 0x10, "bed1d21bb88f98bc7c13880b5b34"}, {0x0, 0x8, "5b2d32cb5f82"}, {0x7, 0x7, "653726fa85"}]}, @rr={0x7, 0x13, 0x20, [@loopback, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @remote]}, @rr={0x7, 0x3, 0xd5}]}}}}}) 22:21:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 505.677625][ T5223] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 505.686733][ T5223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.715116][ T5223] usb 3-1: config 0 descriptor?? 22:21:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 22:21:31 executing program 0: r0 = getpgid(0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 22:21:31 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10880) write$P9_RCLUNK(r0, 0x0, 0x0) 22:21:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14}, 0x14}}, 0x20040000) [ 505.837863][ T5228] usb 2-1: new high-speed USB device number 29 using dummy_hcd 22:21:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x4000000) [ 505.937909][ T5228] usb 2-1: device descriptor read/8, error -71 22:21:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 506.016575][ T28] audit: type=1804 audit(1706998891.494:231): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/517/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:31 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) [ 506.065512][ T28] audit: type=1804 audit(1706998891.494:232): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/517/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:31 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10880) write$P9_RLCREATE(r0, 0x0, 0x0) [ 506.121428][ T5228] usb usb2-port1: unable to enumerate USB device 22:21:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 506.198498][ T5223] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 506.417578][ T5223] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 506.425974][ T5223] gs_usb: probe of 3-1:0.0 failed with error -32 22:21:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x48080) 22:21:32 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:32 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:21:32 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:32 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) 22:21:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 506.983137][ T28] audit: type=1804 audit(1706998892.464:233): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/518/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 507.010224][ T28] audit: type=1804 audit(1706998892.484:234): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/518/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 507.097461][ T5223] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 507.137461][ T5156] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 507.307613][ T5223] usb 2-1: device descriptor read/64, error -71 [ 507.499892][ T5156] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.587661][ T5223] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 507.667647][ T5156] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 507.682770][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.691631][ T5156] usb 1-1: Product: syz [ 507.697011][ T5156] usb 1-1: Manufacturer: syz [ 507.706702][ T5156] usb 1-1: SerialNumber: syz [ 507.723887][ T5156] usb 1-1: config 0 descriptor?? [ 507.770041][ T5156] dm9601: probe of 1-1:0.0 failed with error -22 [ 507.787632][ T5223] usb 2-1: device descriptor read/64, error -71 22:21:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:33 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 507.841390][ T5228] usb 3-1: USB disconnect, device number 90 [ 507.918678][ T5223] usb usb2-port1: attempt power cycle [ 507.956521][ T28] audit: type=1804 audit(1706998893.434:235): pid=12173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/519/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 507.976125][ T5156] usb 1-1: USB disconnect, device number 30 [ 507.996755][ T28] audit: type=1804 audit(1706998893.444:236): pid=12173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/519/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:33 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 508.337544][ T5228] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 508.358826][ T5223] usb 2-1: new high-speed USB device number 32 using dummy_hcd 22:21:34 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) [ 508.462893][ T5223] usb 2-1: device descriptor read/8, error -71 22:21:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 508.717816][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 508.726923][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.743095][ T5228] usb 3-1: config 0 descriptor?? [ 508.757660][ T5223] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 508.817577][ T5156] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 508.872076][ T5223] usb 2-1: device descriptor read/8, error -71 [ 508.905960][ T28] audit: type=1804 audit(1706998894.384:237): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/520/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 508.934544][ T28] audit: type=1804 audit(1706998894.384:238): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/520/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 508.998023][ T5223] usb usb2-port1: unable to enumerate USB device [ 509.198659][ T5156] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 22:21:34 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 509.247781][ T5228] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 509.377999][ T5156] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 509.387521][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.396777][ T5156] usb 1-1: Product: syz [ 509.402541][ T5156] usb 1-1: Manufacturer: syz [ 509.410197][ T5156] usb 1-1: SerialNumber: syz [ 509.422926][ T5156] usb 1-1: config 0 descriptor?? [ 509.463311][ T5228] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 509.469249][ T5156] dm9601: probe of 1-1:0.0 failed with error -22 [ 509.474635][ T5228] gs_usb: probe of 3-1:0.0 failed with error -32 22:21:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 509.730098][ T5223] usb 1-1: USB disconnect, device number 31 [ 509.926813][ T28] audit: type=1804 audit(1706998895.404:239): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/521/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 509.958000][ T28] audit: type=1804 audit(1706998895.444:240): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/521/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:21:35 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 510.199173][ T5228] usb 2-1: new high-speed USB device number 34 using dummy_hcd 22:21:35 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) [ 510.397675][ T5228] usb 2-1: device descriptor read/64, error -71 [ 510.607634][ T5156] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 510.667450][ T5228] usb 2-1: new high-speed USB device number 35 using dummy_hcd 22:21:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 510.857933][ T5228] usb 2-1: device descriptor read/64, error -71 22:21:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 510.967518][ T5156] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.972558][ T5157] usb 3-1: USB disconnect, device number 91 [ 510.998077][ T5228] usb usb2-port1: attempt power cycle [ 511.063066][ T28] audit: type=1804 audit(1706998896.544:241): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/522/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 511.092538][ T28] audit: type=1804 audit(1706998896.574:242): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/522/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 511.157742][ T5156] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 511.171470][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.185166][ T5156] usb 1-1: Product: syz [ 511.191512][ T5156] usb 1-1: Manufacturer: syz [ 511.196479][ T5156] usb 1-1: SerialNumber: syz [ 511.219139][ T5156] usb 1-1: config 0 descriptor?? [ 511.289001][ T5156] dm9601: probe of 1-1:0.0 failed with error -22 22:21:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 511.437531][ T5157] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 511.457599][ T5228] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 511.547544][ T5228] usb 2-1: device descriptor read/8, error -71 [ 511.583938][ T5223] usb 1-1: USB disconnect, device number 32 22:21:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 511.818746][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 511.838062][ T5228] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 511.845844][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.872466][ T5157] usb 3-1: config 0 descriptor?? [ 511.947645][ T5228] usb 2-1: device descriptor read/8, error -71 [ 511.991627][ T28] audit: type=1804 audit(1706998897.474:243): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/523/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 512.021226][ T28] audit: type=1804 audit(1706998897.474:244): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/523/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 512.081411][ T5228] usb usb2-port1: unable to enumerate USB device 22:21:37 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) 22:21:37 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:21:37 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 512.357729][ T5157] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:21:37 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:21:38 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 512.557720][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 512.578780][ T5157] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 512.598053][ T5157] gs_usb: probe of 3-1:0.0 failed with error -32 22:21:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 512.949376][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.986003][ T28] audit: type=1804 audit(1706998898.464:245): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/524/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 513.053282][ T28] audit: type=1804 audit(1706998898.464:246): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/524/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 513.198447][ T7] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 513.219020][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.227174][ T7] usb 1-1: Product: syz [ 513.239595][ T7] usb 1-1: Manufacturer: syz [ 513.244758][ T7] usb 1-1: SerialNumber: syz [ 513.268311][ T7] usb 1-1: config 0 descriptor?? [ 513.277840][ T784] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 513.333229][ T7] dm9601: probe of 1-1:0.0 failed with error -22 22:21:38 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 513.487703][ T784] usb 2-1: device descriptor read/64, error -71 [ 513.564418][ T7] usb 1-1: USB disconnect, device number 33 22:21:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 513.757519][ T784] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 513.921772][ T28] audit: type=1804 audit(1706998899.404:247): pid=12232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/525/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 513.960260][ T784] usb 2-1: device descriptor read/64, error -71 [ 513.986665][ T28] audit: type=1804 audit(1706998899.404:248): pid=12232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/525/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:39 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 514.055051][ T5157] usb 3-1: USB disconnect, device number 92 [ 514.092941][ T784] usb usb2-port1: attempt power cycle 22:21:39 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) [ 514.457445][ T44] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 514.527420][ T784] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 514.597424][ T5157] usb 3-1: new high-speed USB device number 93 using dummy_hcd 22:21:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 514.637600][ T784] usb 2-1: device descriptor read/8, error -71 22:21:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 514.828348][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.894403][ T28] audit: type=1804 audit(1706998900.374:249): pid=12244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/526/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 514.922596][ T28] audit: type=1804 audit(1706998900.374:250): pid=12244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/526/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 514.928140][ T784] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 515.017625][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 515.032042][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.038474][ T44] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 515.051667][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.058244][ T784] usb 2-1: device descriptor read/8, error -71 [ 515.072612][ T5157] usb 3-1: config 0 descriptor?? [ 515.080091][ T44] usb 1-1: Product: syz [ 515.089719][ T44] usb 1-1: Manufacturer: syz [ 515.094622][ T44] usb 1-1: SerialNumber: syz [ 515.105174][ T44] usb 1-1: config 0 descriptor?? [ 515.148828][ T44] dm9601: probe of 1-1:0.0 failed with error -22 [ 515.177968][ T784] usb usb2-port1: unable to enumerate USB device [ 515.356227][ T44] usb 1-1: USB disconnect, device number 34 [ 515.550515][ T5157] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:21:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 515.760744][ T5157] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 515.785235][ T5157] gs_usb: probe of 3-1:0.0 failed with error -32 22:21:41 executing program 0: 22:21:41 executing program 0: 22:21:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d41400"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 515.950301][ T28] audit: type=1804 audit(1706998901.424:251): pid=12251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/527/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:41 executing program 0: [ 516.011030][ T28] audit: type=1804 audit(1706998901.464:252): pid=12251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/527/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:41 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) 22:21:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 516.447701][ T44] usb 2-1: new high-speed USB device number 42 using dummy_hcd 22:21:42 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) 22:21:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 516.747637][ T44] usb 2-1: no configurations [ 516.752670][ T44] usb 2-1: can't read configurations, error -22 [ 516.917496][ T44] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 516.934264][ T28] audit: type=1804 audit(1706998902.414:253): pid=12265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/528/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 516.977615][ T28] audit: type=1804 audit(1706998902.454:254): pid=12265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/528/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:21:42 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) [ 517.193903][ T5075] usb 3-1: USB disconnect, device number 93 [ 517.248435][ T44] usb 2-1: no configurations [ 517.253312][ T44] usb 2-1: can't read configurations, error -22 [ 517.272219][ T44] usb usb2-port1: attempt power cycle [ 517.629497][ T5075] usb 3-1: new high-speed USB device number 94 using dummy_hcd 22:21:43 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 517.687673][ T44] usb 2-1: new high-speed USB device number 44 using dummy_hcd 22:21:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:43 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) [ 517.827633][ T44] usb 2-1: no configurations [ 517.840207][ T44] usb 2-1: can't read configurations, error -22 [ 517.987611][ T5075] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 517.996955][ T5075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.008741][ T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 518.020756][ T5075] usb 3-1: config 0 descriptor?? 22:21:43 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) [ 518.147762][ T44] usb 2-1: no configurations [ 518.161374][ T44] usb 2-1: can't read configurations, error -22 [ 518.168282][ T44] usb usb2-port1: unable to enumerate USB device [ 518.177926][ T784] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 518.387568][ T784] usb 1-1: device descriptor read/64, error -71 [ 518.520221][ T5075] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:21:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) 22:21:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 518.657728][ T784] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 518.727963][ T5075] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 518.756281][ T5075] gs_usb: probe of 3-1:0.0 failed with error -32 [ 518.857573][ T784] usb 1-1: device descriptor read/64, error -71 [ 518.946646][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 518.946665][ T28] audit: type=1804 audit(1706998904.424:257): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/530/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 518.989653][ T784] usb usb1-port1: attempt power cycle 22:21:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d41400"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 519.059645][ T28] audit: type=1804 audit(1706998904.464:258): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/530/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:21:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) [ 519.407458][ T784] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 519.507860][ T784] usb 1-1: device descriptor read/8, error -71 [ 519.567632][ T56] usb 2-1: new high-speed USB device number 46 using dummy_hcd 22:21:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:45 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 519.799785][ T784] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 519.847785][ T56] usb 2-1: no configurations [ 519.864495][ T56] usb 2-1: can't read configurations, error -22 [ 519.917568][ T784] usb 1-1: device descriptor read/8, error -71 [ 519.921257][ T28] audit: type=1804 audit(1706998905.404:259): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/531/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 519.985045][ T28] audit: type=1804 audit(1706998905.434:260): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/531/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 520.038610][ T784] usb usb1-port1: unable to enumerate USB device [ 520.039697][ T56] usb 2-1: new high-speed USB device number 47 using dummy_hcd 22:21:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 520.260928][ T784] usb 3-1: USB disconnect, device number 94 [ 520.327643][ T56] usb 2-1: no configurations [ 520.332310][ T56] usb 2-1: can't read configurations, error -22 [ 520.352734][ T56] usb usb2-port1: attempt power cycle 22:21:45 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 520.731038][ T784] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 520.767557][ T56] usb 2-1: new high-speed USB device number 48 using dummy_hcd 22:21:46 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) [ 520.840482][ T28] audit: type=1804 audit(1706998906.324:261): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/532/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 520.937599][ T56] usb 2-1: no configurations [ 520.942538][ T56] usb 2-1: can't read configurations, error -22 [ 520.952329][ T28] audit: type=1804 audit(1706998906.354:262): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/532/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 22:21:46 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 521.140363][ T784] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 521.147488][ T56] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 521.156734][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.169473][ T784] usb 3-1: config 0 descriptor?? [ 521.287601][ T56] usb 2-1: no configurations [ 521.292374][ T56] usb 2-1: can't read configurations, error -22 [ 521.307008][ T56] usb usb2-port1: unable to enumerate USB device [ 521.307612][ T5157] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 521.517834][ T5157] usb 1-1: device descriptor read/64, error -71 22:21:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 521.662330][ T784] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 521.745010][ T28] audit: type=1804 audit(1706998907.224:263): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/533/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 521.797610][ T28] audit: type=1804 audit(1706998907.254:264): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/533/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 22:21:47 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 521.857496][ T5157] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 521.888219][ T784] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 521.902100][ T784] gs_usb: probe of 3-1:0.0 failed with error -121 [ 522.057555][ T5157] usb 1-1: device descriptor read/64, error -71 22:21:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d41400"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 522.178374][ T5157] usb usb1-port1: attempt power cycle 22:21:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:48 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 522.628971][ T784] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 522.657537][ T5157] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 522.712102][ T28] audit: type=1804 audit(1706998908.194:265): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/534/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 522.762199][ T28] audit: type=1804 audit(1706998908.194:266): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/534/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 522.827641][ T5157] usb 1-1: device descriptor read/8, error -71 [ 522.987620][ T784] usb 2-1: no configurations [ 522.996040][ T784] usb 2-1: can't read configurations, error -22 [ 523.107745][ T5157] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 523.189917][ T784] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 523.218114][ T5157] usb 1-1: device descriptor read/8, error -71 22:21:48 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 523.366516][ T5223] usb 3-1: USB disconnect, device number 95 [ 523.373657][ T5157] usb usb1-port1: unable to enumerate USB device 22:21:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 523.547592][ T784] usb 2-1: no configurations [ 523.557664][ T784] usb 2-1: can't read configurations, error -22 [ 523.567957][ T784] usb usb2-port1: attempt power cycle [ 523.838079][ T5223] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 523.977475][ T784] usb 2-1: new high-speed USB device number 52 using dummy_hcd 22:21:49 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) [ 524.107764][ T784] usb 2-1: no configurations [ 524.112439][ T784] usb 2-1: can't read configurations, error -22 22:21:49 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 524.287516][ T784] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 524.307869][ T5223] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 524.317264][ T5223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.328687][ T5223] usb 3-1: config 0 descriptor?? [ 524.447608][ T784] usb 2-1: no configurations [ 524.452362][ T784] usb 2-1: can't read configurations, error -22 [ 524.468471][ T784] usb usb2-port1: unable to enumerate USB device 22:21:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 524.509680][ T5157] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 524.719880][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 524.719898][ T28] audit: type=1804 audit(1706998910.204:269): pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/536/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 524.752774][ T5157] usb 1-1: device descriptor read/64, error -71 [ 524.765766][ T28] audit: type=1804 audit(1706998910.204:270): pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/536/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 524.831160][ T5223] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 525.047851][ T5223] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 525.056759][ T5223] gs_usb: probe of 3-1:0.0 failed with error -121 [ 525.063888][ T5157] usb 1-1: new high-speed USB device number 44 using dummy_hcd 22:21:50 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:21:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d4140000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 525.277945][ T5157] usb 1-1: device descriptor read/64, error -71 [ 525.413641][ T5157] usb usb1-port1: attempt power cycle 22:21:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 525.704019][ T28] audit: type=1804 audit(1706998911.184:271): pid=12349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/537/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 525.733481][ T28] audit: type=1804 audit(1706998911.184:272): pid=12349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/537/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 525.797491][ T5223] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 525.827580][ T5157] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 525.918553][ T5157] usb 1-1: device descriptor read/8, error -71 22:21:51 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 526.187547][ T5223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.202260][ T5223] usb 2-1: config 0 has no interfaces? [ 526.208463][ T5157] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 526.225772][ T5223] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 526.236694][ T5223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.255268][ T5223] usb 2-1: config 0 descriptor?? [ 526.327765][ T5157] usb 1-1: device descriptor read/8, error -71 22:21:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 526.447997][ T5157] usb usb1-port1: unable to enumerate USB device [ 526.457066][ T56] usb 3-1: USB disconnect, device number 96 22:21:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 526.695789][ T28] audit: type=1804 audit(1706998912.174:273): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/538/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 22:21:52 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 526.738933][ T28] audit: type=1804 audit(1706998912.174:274): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/538/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 526.937569][ T56] usb 3-1: new high-speed USB device number 97 using dummy_hcd 22:21:52 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) 22:21:52 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 527.308149][ T56] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 527.321182][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.337117][ T56] usb 3-1: config 0 descriptor?? 22:21:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 527.567448][ T5157] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 527.731332][ T28] audit: type=1804 audit(1706998913.214:275): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/539/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 527.767939][ T5157] usb 1-1: device descriptor read/64, error -71 [ 527.792196][ T28] audit: type=1804 audit(1706998913.214:276): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/539/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 527.817868][ T56] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:21:53 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 528.039063][ T56] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 528.067437][ T5157] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 528.073771][ T56] gs_usb: probe of 3-1:0.0 failed with error -121 [ 528.267576][ T5157] usb 1-1: device descriptor read/64, error -71 22:21:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d4140000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 528.397977][ T5157] usb usb1-port1: attempt power cycle [ 528.413580][ T56] usb 2-1: USB disconnect, device number 54 22:21:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 528.702522][ T28] audit: type=1804 audit(1706998914.184:277): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/540/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 528.737773][ T28] audit: type=1804 audit(1706998914.214:278): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/540/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 22:21:54 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) [ 528.837625][ T5157] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 528.868177][ T56] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 528.937575][ T5157] usb 1-1: device descriptor read/8, error -71 [ 529.227721][ T5157] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 529.237541][ T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.249827][ T56] usb 2-1: config 0 has no interfaces? [ 529.255480][ T56] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 529.264796][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.277882][ T56] usb 2-1: config 0 descriptor?? [ 529.337579][ T5157] usb 1-1: device descriptor read/8, error -71 22:21:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 529.458632][ T5157] usb usb1-port1: unable to enumerate USB device 22:21:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x14, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 529.570083][ T5157] usb 3-1: USB disconnect, device number 97 22:21:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xe1c83, 0x0) 22:21:55 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x200840, 0xc5) 22:21:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) 22:21:55 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2) write$cgroup_subtree(r0, 0x0, 0x0) 22:21:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x2500, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}}}) [ 530.017562][ T5157] usb 3-1: new high-speed USB device number 98 using dummy_hcd 22:21:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8971, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 22:21:55 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) 22:21:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}}, 0x0) [ 530.417664][ T5157] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 530.426773][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.441790][ T5157] usb 3-1: config 0 descriptor?? [ 530.455440][T12405] infiniband syz0: set down 22:21:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 530.466624][T12405] infiniband syz0: added ipvlan0 [ 530.573456][T12405] RDS/IB: syz0: added [ 530.579127][T12405] smc: adding ib device syz0 with port count 1 [ 530.585701][T12405] smc: ib device syz0 port 1 has pnetid [ 530.627402][ T5223] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 530.655144][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 530.655161][ T28] audit: type=1804 audit(1706998916.134:281): pid=12409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/542/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 530.695224][ T28] audit: type=1804 audit(1706998916.134:282): pid=12409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/542/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 530.849857][ T5223] usb 1-1: device descriptor read/64, error -71 [ 530.947675][ T5157] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 531.137556][ T5223] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 531.167887][ T5157] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 531.190247][ T5157] gs_usb: probe of 3-1:0.0 failed with error -121 [ 531.347596][ T5223] usb 1-1: device descriptor read/64, error -71 22:21:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d4140000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 531.467969][ T5223] usb usb1-port1: attempt power cycle [ 531.502624][ T5157] usb 2-1: USB disconnect, device number 55 [ 531.622753][ T28] audit: type=1804 audit(1706998917.104:283): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/543/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 531.661365][ T28] audit: type=1804 audit(1706998917.134:284): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/543/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 22:21:57 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}}, 0x0) 22:21:57 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x84042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f0000000300)='./bus\x00', 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() mknodat$loop(r0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./bus\x00', 0x0, 0xee01) execveat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000c6"], 0x8, 0x0) [ 531.878564][T12417] syz0: rxe_newlink: already configured on ipvlan0 [ 531.897582][ T5223] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 531.964098][ T28] audit: type=1800 audit(1706998917.444:285): pid=12419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 531.997608][ T5223] usb 1-1: device descriptor read/8, error -71 [ 532.007496][ T5157] usb 2-1: new high-speed USB device number 56 using dummy_hcd 22:21:57 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) rt_sigreturn() utime(&(0x7f00000002c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/37, 0x25}], 0x1}}], 0x1, 0x0, 0x0) rt_sigreturn() openat$cgroup_ro(r0, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./bus\x00', 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='\\', 0x1}], 0x1) [ 532.172464][ T28] audit: type=1800 audit(1706998917.654:286): pid=12422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0 22:21:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) [ 532.267518][ T5223] usb 1-1: new high-speed USB device number 54 using dummy_hcd 22:21:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8917, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) [ 532.358114][ T5223] usb 1-1: device descriptor read/8, error -71 22:21:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 532.408051][ T5157] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.447841][ T5157] usb 2-1: config 0 has no interfaces? 22:21:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891c, 0x0) [ 532.456037][ T5157] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 532.477121][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.498055][ T5223] usb usb1-port1: unable to enumerate USB device [ 532.513711][ T5157] usb 2-1: config 0 descriptor?? 22:21:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000040)) 22:21:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x14, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 532.590976][ T28] audit: type=1804 audit(1706998918.074:287): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/544/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:21:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) [ 532.664774][ T44] usb 3-1: USB disconnect, device number 98 [ 532.675526][ T28] audit: type=1804 audit(1706998918.104:288): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/544/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:21:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 22:21:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0xffffffffffffff5a) 22:21:58 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 22:21:58 executing program 4: socketpair(0x26, 0x5, 0x0, &(0x7f0000000200)) 22:21:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000040)="cd667e6851dabe2596a86bf35a94b849b5f70cb8af3e740cdb26e8220651a0769add9e5c518a746108445953e3c9f264609acef7eb7fc0a735f197470ce3a2a09f7d959f29eea7563a0b53034484dafd5b86aa3109847823a7b98d778595bef69b2e76c8a0e2e3f5edb84b6d2249eff7d63b1bc187e993d15abc946cf1558275528fe05e5122a33ce7b6e86420e7643d1d4654117cf1103ea919b95277a23063dbdde71c2bbd1df4bab45349c60b9336f1b7f7f39d49dc2bcc00bdaf8260fe79a1cb8ca050da3620fa6955466eafa6bafbc8b1dd94e21a7f06a5cabbfb5b2117ee50d5d7e03b42b105aa09", 0xeb}, {&(0x7f0000000280)="d83dd4fbe06eae59cc84555f70f51e5670aa9f2fd355cd903cbec48734ad320487a9ca5bb439d146f73a563263ec3df5d755ce4ce76adb118ed1b15ed68bbce1a59ab19f88d13aefe94cebf65c5a83408cb33af44f06cf4733aa49b4da9b1804c90ae8bd5edb7f3edbeb9cb4e5ff9a2c38f2f33cd73601753e5d3fc6f946328d035e54bb8e0a361d1dc48b798520132c59a613121dff1deb7941fd422d25b371f5cc", 0xa2}, {&(0x7f0000000340)="d9ac8123fae17e1ebb769985ce1bad4e5de81a12f4c72bd016dc0fe343ff734acf6b1933bdf88e1270254c266df367cd02d107538b894e4b841bb33622539ba3af8189d6afef8ca084914e543142cc8b67a48f941b3290f77ac226678f523dc6819d819b21008870c31654eb061db50317931eb525de98e8186b4b73619e001aa1bb4bf98d9883adcb569df7e13d82a46931ddfea778cb", 0x97}, {&(0x7f00000001c0)="2518dda76fc281487a6ddf5b25c0dfcf153589", 0x13}, {&(0x7f0000000200)="e96b08e7", 0x4}, {&(0x7f0000000400)="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", 0x29a}], 0x6, &(0x7f0000001340)=[@dstopts_2292={{0xe8, 0x29, 0x4, {0x0, 0x1a, '\x00', [@generic={0x0, 0xce, "e0171c815399a619d909f93726d35c9f27768a0a6b87ed8c6d1ccca4986d02f723dc22255b99fdaa818e68af1d74a029b2431eabc0388b499b0c0a4fee5f216f264dec86cb87e68b28c76d720df3c363e025495dd85ed5246446d8b554265976569ab53742381c4fa5acc28ed6317f81229e2e79731cd55171097b588f372167f1f23ada622d23d42f820d9c7388f3061b89fa104807854d468b71c22052cf761ddff7cb84387b557f5cde865a8d87823fbcd8514f8d30ac5b613460d689e60d33843dd81b8880faff593f539988"}]}}}], 0xe8}}], 0x1, 0x0) 22:21:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 22:21:58 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) [ 533.137492][ T44] usb 3-1: new high-speed USB device number 99 using dummy_hcd 22:21:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891f, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 22:21:58 executing program 4: unshare(0x28000400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 22:21:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:21:58 executing program 4: unshare(0x28000400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 22:21:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x401c5820, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) [ 533.517879][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 533.527890][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.555421][ T44] usb 3-1: config 0 descriptor?? 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 533.586330][ T28] audit: type=1804 audit(1706998919.064:289): pid=12462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/545/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 533.623759][ T28] audit: type=1804 audit(1706998919.064:290): pid=12462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/545/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 533.688029][ T5157] usb 1-1: new high-speed USB device number 55 using dummy_hcd 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 533.877868][ T5157] usb 1-1: device descriptor read/64, error -71 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 534.047669][ T44] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:21:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 534.167491][ T5157] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 534.259555][ T44] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 534.274521][ T44] gs_usb: probe of 3-1:0.0 failed with error -121 [ 534.368787][ T5157] usb 1-1: device descriptor read/64, error -71 [ 534.497778][ T5157] usb usb1-port1: attempt power cycle 22:22:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:00 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 534.594890][ T44] usb 2-1: USB disconnect, device number 56 22:22:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:00 executing program 4: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:00 executing program 4: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 534.917465][ T5157] usb 1-1: new high-speed USB device number 57 using dummy_hcd 22:22:00 executing program 4: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 535.027641][ T5157] usb 1-1: device descriptor read/8, error -71 [ 535.077890][ T44] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 535.307606][ T5157] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 535.422921][ T5157] usb 1-1: device descriptor read/8, error -71 [ 535.447856][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.461219][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 535.471051][ T44] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 535.484238][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.503762][ T44] usb 2-1: config 0 descriptor?? [ 535.558386][ T5157] usb usb1-port1: unable to enumerate USB device 22:22:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x14, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 535.740502][ T44] usb 3-1: USB disconnect, device number 99 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 535.907232][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 535.907249][ T28] audit: type=1804 audit(1706998921.384:293): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/547/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 535.961202][ T28] audit: type=1804 audit(1706998921.424:294): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/547/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:01 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01"], 0x0) 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 536.207637][ T44] usb 3-1: new high-speed USB device number 100 using dummy_hcd 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:01 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 536.567602][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 536.585010][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.611085][ T44] usb 3-1: config 0 descriptor?? 22:22:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3f", 0x29}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 536.727543][ T784] usb 1-1: new high-speed USB device number 59 using dummy_hcd 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3f", 0x29}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 536.887756][ T28] audit: type=1804 audit(1706998922.364:295): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/548/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3f", 0x29}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 536.917896][ T28] audit: type=1804 audit(1706998922.364:296): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/548/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873", 0x3d}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873", 0x3d}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 537.038162][ T784] usb 1-1: no configurations [ 537.042832][ T784] usb 1-1: can't read configurations, error -22 [ 537.077692][ T44] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873", 0x3d}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5", 0x47}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 537.207490][ T784] usb 1-1: new high-speed USB device number 60 using dummy_hcd 22:22:02 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5", 0x47}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 537.293778][ T44] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 537.309562][ T44] gs_usb: probe of 3-1:0.0 failed with error -121 [ 537.547673][ T784] usb 1-1: no configurations [ 537.558154][ T784] usb 1-1: can't read configurations, error -22 [ 537.569216][ T784] usb usb1-port1: attempt power cycle 22:22:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:03 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5", 0x47}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 537.691634][ T5223] usb 2-1: USB disconnect, device number 57 22:22:03 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a3", 0x4c}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:03 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a3", 0x4c}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 537.849190][ T28] audit: type=1804 audit(1706998923.334:297): pid=12557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/549/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:03 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a3", 0x4c}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 537.905906][ T28] audit: type=1804 audit(1706998923.334:298): pid=12557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/549/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:03 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9", 0x4f}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 538.007536][ T784] usb 1-1: new high-speed USB device number 61 using dummy_hcd 22:22:03 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9", 0x4f}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 538.188075][ T784] usb 1-1: no configurations [ 538.197538][ T5223] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 538.206506][ T784] usb 1-1: can't read configurations, error -22 [ 538.377580][ T784] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 538.527795][ T784] usb 1-1: no configurations [ 538.532576][ T784] usb 1-1: can't read configurations, error -22 [ 538.541991][ T784] usb usb1-port1: unable to enumerate USB device [ 538.587539][ T5223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.617584][ T5223] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.626638][ T5223] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 538.665737][ T5223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.690129][ T5223] usb 2-1: config 0 descriptor?? 22:22:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9", 0x4f}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x1e, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 538.828007][ T56] usb 3-1: USB disconnect, device number 100 22:22:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb", 0x50}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb", 0x50}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 539.079346][ T28] audit: type=1804 audit(1706998924.554:299): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/550/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 539.169891][ T28] audit: type=1804 audit(1706998924.564:300): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/550/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 22:22:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb", 0x50}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:04 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01"], 0x0) 22:22:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 539.357544][ T56] usb 3-1: new high-speed USB device number 101 using dummy_hcd 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 539.717632][ T56] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 539.726748][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.766271][ T56] usb 3-1: config 0 descriptor?? 22:22:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 539.837615][ T5223] usb 1-1: new high-speed USB device number 63 using dummy_hcd 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 540.081675][ T28] audit: type=1804 audit(1706998925.564:301): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/551/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 540.124164][ T28] audit: type=1804 audit(1706998925.564:302): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/551/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 540.167687][ T5223] usb 1-1: no configurations [ 540.172350][ T5223] usb 1-1: can't read configurations, error -22 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 540.257700][ T56] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 540.348493][ T5223] usb 1-1: new high-speed USB device number 64 using dummy_hcd 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:05 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 540.479753][ T56] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 540.499881][ T56] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 540.638913][ T5223] usb 1-1: no configurations [ 540.651237][ T5223] usb 1-1: can't read configurations, error -22 [ 540.669696][ T5223] usb usb1-port1: attempt power cycle 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 540.790736][ T5156] usb 2-1: USB disconnect, device number 58 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_\x00'], 0x28}}, 0x0) [ 541.083962][ T28] audit: type=1804 audit(1706998926.564:303): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/552/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 541.111354][ T5223] usb 1-1: new high-speed USB device number 65 using dummy_hcd 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 541.125670][ T28] audit: type=1804 audit(1706998926.564:304): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/552/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 541.257625][ T5223] usb 1-1: no configurations [ 541.262310][ T5223] usb 1-1: can't read configurations, error -22 [ 541.267674][ T5156] usb 2-1: new high-speed USB device number 59 using dummy_hcd 22:22:06 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 541.427451][ T5223] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 541.577828][ T5223] usb 1-1: no configurations [ 541.582499][ T5223] usb 1-1: can't read configurations, error -22 [ 541.590392][ T5223] usb usb1-port1: unable to enumerate USB device [ 541.637532][ T5156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.648539][ T5156] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.658386][ T5156] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 541.669161][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.682334][ T5156] usb 2-1: config 0 descriptor?? 22:22:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x1e, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 22:22:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 541.923372][ T5156] usb 3-1: USB disconnect, device number 101 22:22:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 22:22:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) [ 542.093266][ T28] audit: type=1804 audit(1706998927.574:305): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/553/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) [ 542.150464][ T28] audit: type=1804 audit(1706998927.604:306): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/553/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:07 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01"], 0x0) 22:22:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) [ 542.387519][ T5156] usb 3-1: new high-speed USB device number 102 using dummy_hcd 22:22:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) [ 542.748115][ T5156] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 542.769403][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.785821][ T5156] usb 3-1: config 0 descriptor?? 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) 22:22:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00'], 0x28}}, 0x0) [ 542.907528][ T56] usb 1-1: new high-speed USB device number 67 using dummy_hcd 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00'], 0x28}}, 0x0) 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00'], 0x28}}, 0x0) [ 543.100964][ T28] audit: type=1804 audit(1706998928.584:307): pid=12681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/554/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 543.159391][ T28] audit: type=1804 audit(1706998928.584:308): pid=12681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/554/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 543.197770][ T56] usb 1-1: no configurations 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_'], 0x28}}, 0x0) [ 543.207494][ T56] usb 1-1: can't read configurations, error -22 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_'], 0x28}}, 0x0) [ 543.269141][ T5156] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9e46e048d15282aaffbdf36e414863996fe5005af6bf487c0c0e1b7e39b8ba23a5366488e5cf905d3fc91a0bee3b38ddc71e485224d722f13aadaaa873c31e33610c8a4eeed3f5bc603423a32421f9cb55", 0x51}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00_'], 0x28}}, 0x0) [ 543.368546][ T56] usb 1-1: new high-speed USB device number 68 using dummy_hcd 22:22:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22:22:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) [ 543.489639][ T5156] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 543.508911][ T5156] gs_usb: probe of 3-1:0.0 failed with error -121 [ 543.667741][ T56] usb 1-1: no configurations [ 543.672399][ T56] usb 1-1: can't read configurations, error -22 [ 543.685224][ T56] usb usb1-port1: attempt power cycle 22:22:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d4140000000109021200010000400009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x1}, {0x6}]}, 0x10) 22:22:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 543.889162][ T5156] usb 2-1: USB disconnect, device number 59 22:22:09 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x10d, 0x4, 0x0, 0x0) 22:22:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8919, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) [ 544.039551][T12704] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 544.098017][ T56] usb 1-1: new high-speed USB device number 69 using dummy_hcd 22:22:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 544.136783][ T28] audit: type=1804 audit(1706998929.614:309): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/555/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 544.193117][ T28] audit: type=1804 audit(1706998929.644:310): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/555/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 544.258134][ T56] usb 1-1: no configurations [ 544.265518][ T56] usb 1-1: can't read configurations, error -22 22:22:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 544.379546][ T5156] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 544.417800][ T56] usb 1-1: new high-speed USB device number 70 using dummy_hcd 22:22:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 544.557839][ T56] usb 1-1: no configurations [ 544.562792][ T56] usb 1-1: can't read configurations, error -22 [ 544.570649][ T56] usb usb1-port1: unable to enumerate USB device [ 544.747630][ T5156] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.756665][ T5156] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 544.766305][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.779238][ T5156] usb 2-1: config 0 descriptor?? [ 544.807585][ T4463] Bluetooth: hci3: command 0x0406 tx timeout 22:22:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x1e, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 544.990686][ T5223] usb 3-1: USB disconnect, device number 102 22:22:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 545.150591][ T28] audit: type=1804 audit(1706998930.634:311): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/556/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 545.218313][ T28] audit: type=1804 audit(1706998930.664:312): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/556/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:10 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f0102030109022400"], 0x0) 22:22:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 545.479863][ T5223] usb 3-1: new high-speed USB device number 103 using dummy_hcd 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 545.867728][ T5223] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 545.897441][ T5223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:22:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 545.918306][ T5223] usb 3-1: config 0 descriptor?? 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 545.967456][ T56] usb 1-1: new high-speed USB device number 71 using dummy_hcd 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 546.204748][ T28] audit: type=1804 audit(1706998931.684:313): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/557/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 546.264710][ T28] audit: type=1804 audit(1706998931.714:314): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/557/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 546.337525][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.350995][ T56] usb 1-1: config 0 has no interfaces? 22:22:11 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 546.408422][ T5223] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:12 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 546.529228][ T56] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 546.539171][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.549287][ T56] usb 1-1: Product: syz [ 546.554978][ T56] usb 1-1: Manufacturer: syz [ 546.560745][ T56] usb 1-1: SerialNumber: syz [ 546.573256][ T56] usb 1-1: config 0 descriptor?? 22:22:12 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 546.627725][ T5223] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 546.637728][ T5223] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x0) [ 546.839866][ T5223] usb 1-1: USB disconnect, device number 71 22:22:12 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d4140000000109021200010000400009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x0) 22:22:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 547.002817][ T5228] usb 2-1: USB disconnect, device number 60 22:22:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x0) 22:22:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 547.197052][ T28] audit: type=1804 audit(1706998932.674:315): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/558/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 547.231120][ T28] audit: type=1804 audit(1706998932.684:316): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/558/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 22:22:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:22:12 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f0102030109022400"], 0x0) 22:22:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:22:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 547.467736][ T5228] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 547.717459][ T784] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 547.872731][ T5228] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.882306][ T5228] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 547.891690][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.903644][ T5228] usb 2-1: config 0 descriptor?? 22:22:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x23, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e47"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x74, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}]}}]}, 0x74}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 548.060760][ T5156] usb 3-1: USB disconnect, device number 103 [ 548.097773][ T784] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 22:22:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 548.127087][ T784] usb 1-1: config 0 has no interfaces? [ 548.236832][ T28] audit: type=1804 audit(1706998933.714:317): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/559/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:22:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 548.272373][ T28] audit: type=1804 audit(1706998933.714:318): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/559/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:22:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 548.357740][ T784] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 548.366924][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.375977][ T784] usb 1-1: Product: syz [ 548.380678][ T784] usb 1-1: Manufacturer: syz [ 548.395013][ T784] usb 1-1: SerialNumber: syz [ 548.415338][ T784] usb 1-1: config 0 descriptor?? 22:22:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 548.497698][ T5156] usb 3-1: new high-speed USB device number 104 using dummy_hcd 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0) [ 548.694763][ T784] usb 1-1: USB disconnect, device number 72 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x30}}, 0x0) 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x30}}, 0x0) [ 548.868267][ T5156] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 548.894717][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x30}}, 0x0) [ 548.914982][ T5156] usb 3-1: config 0 descriptor?? 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}}, 0x0) 22:22:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x74, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}]}}]}, 0x74}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}}, 0x0) 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}}, 0x0) [ 549.234352][ T28] audit: type=1804 audit(1706998934.714:319): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/560/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}}, 0x0) 22:22:14 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f0102030109022400"], 0x0) [ 549.286223][ T28] audit: type=1804 audit(1706998934.754:320): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/560/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}}, 0x0) 22:22:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x24}}, 0x0) [ 549.418463][ T5156] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x24}}, 0x0) 22:22:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x24}}, 0x0) [ 549.607633][ T56] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 549.639587][ T5156] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 549.657734][ T5156] gs_usb: probe of 3-1:0.0 failed with error -121 [ 549.987698][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.010169][ T56] usb 1-1: config 0 has no interfaces? 22:22:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d4140000000109021200010000400009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) 22:22:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x74, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}]}}]}, 0x74}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 550.074250][ T5228] usb 2-1: USB disconnect, device number 61 22:22:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) [ 550.167596][ T56] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 550.190857][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.222334][ T56] usb 1-1: Product: syz [ 550.235296][ T56] usb 1-1: Manufacturer: syz [ 550.240343][ T56] usb 1-1: SerialNumber: syz [ 550.244810][ T28] audit: type=1804 audit(1706998935.724:321): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/561/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 550.251816][ T56] usb 1-1: config 0 descriptor?? 22:22:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) [ 550.294220][ T28] audit: type=1804 audit(1706998935.764:322): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/561/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:22:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) 22:22:15 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) 22:22:16 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) [ 550.542161][ T784] usb 1-1: USB disconnect, device number 73 [ 550.548238][ T5228] usb 2-1: new high-speed USB device number 62 using dummy_hcd 22:22:16 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) [ 550.957778][ T5228] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.968831][ T5228] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 550.980954][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.999477][ T5228] usb 2-1: config 0 descriptor?? 22:22:16 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) 22:22:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x7c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x6, "5eb71940cffb"}]}}]}, 0x7c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:16 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000"], 0x0) 22:22:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x23, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e47"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 551.122079][ T5228] usb 3-1: USB disconnect, device number 104 22:22:16 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) [ 551.291681][ T28] audit: type=1804 audit(1706998936.764:323): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/562/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:22:16 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) [ 551.324666][ T28] audit: type=1804 audit(1706998936.774:324): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/562/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:22:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) 22:22:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) [ 551.467602][ T5157] usb 1-1: new high-speed USB device number 74 using dummy_hcd 22:22:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) 22:22:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 22:22:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) [ 551.670812][ T5228] usb 3-1: new high-speed USB device number 105 using dummy_hcd 22:22:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 22:22:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c) 22:22:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c) [ 551.868328][ T5157] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.878766][ T5157] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 22:22:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c) 22:22:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x7c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x6, "5eb71940cffb"}]}}]}, 0x7c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 552.062968][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 552.077270][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.077806][ T5157] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 22:22:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8902, 0x0) [ 552.108687][ T5228] usb 3-1: config 0 descriptor?? [ 552.124372][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.142841][ T5157] usb 1-1: Product: syz [ 552.152675][ T5157] usb 1-1: Manufacturer: syz 22:22:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) [ 552.171628][ T5157] usb 1-1: SerialNumber: syz [ 552.188697][ T5157] usb 1-1: config 0 descriptor?? 22:22:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 552.317586][ T28] audit: type=1804 audit(1706998937.794:325): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/563/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:22:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 552.379079][ T28] audit: type=1804 audit(1706998937.794:326): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/563/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:22:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 552.437285][ T5157] usb 1-1: USB disconnect, device number 74 22:22:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 552.598671][ T5228] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 552.808208][ T5228] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 552.817632][ T5228] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:18 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000"], 0x0) 22:22:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x7c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x6, "5eb71940cffb"}]}}]}, 0x7c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 553.158208][ T5156] usb 2-1: USB disconnect, device number 62 22:22:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 553.326448][ T28] audit: type=1804 audit(1706998938.804:327): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/564/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:22:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 553.363977][ T28] audit: type=1804 audit(1706998938.814:328): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/564/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:22:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 553.537532][ T56] usb 1-1: new high-speed USB device number 75 using dummy_hcd 22:22:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 553.637481][ T5156] usb 2-1: new high-speed USB device number 63 using dummy_hcd 22:22:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 553.907790][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.922675][ T56] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.007920][ T5156] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 554.019010][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.033331][ T5156] usb 2-1: config 0 descriptor?? [ 554.087600][ T56] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 554.097027][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.106051][ T56] usb 1-1: Product: syz [ 554.113372][ T56] usb 1-1: Manufacturer: syz [ 554.118598][ T56] usb 1-1: SerialNumber: syz [ 554.126576][ T56] usb 1-1: config 0 descriptor?? 22:22:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x23, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e47"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x88, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x11, "5eb71940cffba7f2a11cf4e47e61fc97ef"}]}}]}, 0x88}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 554.232897][ T5228] usb 3-1: USB disconnect, device number 105 22:22:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 554.381395][ T784] usb 1-1: USB disconnect, device number 75 22:22:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, 0x0, 0x0) [ 554.411278][ T28] audit: type=1804 audit(1706998939.894:329): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/565/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, 0x0, 0x0) [ 554.481979][ T28] audit: type=1804 audit(1706998939.924:330): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/565/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, 0x0, 0x0) [ 554.527804][ T5156] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 554.548864][ T5156] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 554.568510][ T5156] gs_usb: probe of 2-1:0.0 failed with error -22 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 554.732993][ T5156] usb 2-1: USB disconnect, device number 63 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 554.777570][ T5228] usb 3-1: new high-speed USB device number 106 using dummy_hcd 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 22:22:20 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000"], 0x0) 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x88, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x11, "5eb71940cffba7f2a11cf4e47e61fc97ef"}]}}]}, 0x88}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 555.167717][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 555.177106][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.199823][ T5228] usb 3-1: config 0 descriptor?? 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 555.270289][ T5223] usb 1-1: new high-speed USB device number 76 using dummy_hcd 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 555.391607][ T28] audit: type=1804 audit(1706998940.874:331): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/566/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) [ 555.435319][ T28] audit: type=1804 audit(1706998940.904:332): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/566/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x5, 0x2a, [@mesh_chsw={0x76, 0x6}, @perr={0x84, 0x2}]}]}, 0x2c}}, 0x0) 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 555.617461][ T784] usb 2-1: new high-speed USB device number 64 using dummy_hcd 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 555.697745][ T5223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.708163][ T5228] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 555.718044][ T5223] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6}]}]}, 0x28}}, 0x0) 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6}]}]}, 0x28}}, 0x0) 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6}]}]}, 0x28}}, 0x0) [ 555.900482][ T5223] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 555.919242][ T5223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.932889][ T5228] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 555.946498][ T5223] usb 1-1: Product: syz [ 555.954223][ T5228] gs_usb: probe of 3-1:0.0 failed with error -121 [ 555.961912][ T5223] usb 1-1: Manufacturer: syz [ 555.966719][ T5223] usb 1-1: SerialNumber: syz [ 555.990195][ T5223] usb 1-1: config 0 descriptor?? 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x24}}, 0x0) [ 556.007575][ T784] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 556.016689][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.043156][ T784] usb 2-1: config 0 descriptor?? 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x24}}, 0x0) 22:22:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x88, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x11, "5eb71940cffba7f2a11cf4e47e61fc97ef"}]}}]}, 0x88}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x24}}, 0x0) 22:22:21 executing program 4: r0 = semget$private(0x0, 0x3, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, 0x0) [ 556.273548][ T5223] usb 1-1: USB disconnect, device number 76 [ 556.301380][ T28] audit: type=1804 audit(1706998941.784:333): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/567/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 556.358816][ T28] audit: type=1804 audit(1706998941.814:334): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/567/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 556.567630][ T784] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 556.578867][ T784] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 556.592360][ T784] gs_usb: probe of 2-1:0.0 failed with error -22 [ 556.780607][ T784] usb 2-1: USB disconnect, device number 64 22:22:22 executing program 4: pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flock(r0, 0x0) 22:22:22 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f0102030109022400010000000009"], 0x0) 22:22:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x16, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb6051"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x26, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 557.298905][ T5228] usb 3-1: USB disconnect, device number 106 22:22:22 executing program 4: accept$inet6(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 557.483474][ T28] audit: type=1804 audit(1706998942.964:335): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/568/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 557.518810][ T28] audit: type=1804 audit(1706998942.964:336): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/568/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 22:22:23 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/238, 0xee) 22:22:23 executing program 4: setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:22:23 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/time\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) [ 557.677801][ T56] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 557.685529][ T44] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 557.717658][ T5228] usb 3-1: new high-speed USB device number 107 using dummy_hcd 22:22:23 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 22:22:23 executing program 4: r0 = socket(0x2, 0xa, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 22:22:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0x4, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:23 executing program 4: bpf$MAP_CREATE_CONST_STR(0x14, 0x0, 0x0) 22:22:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0x10, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}}, 0x0) 22:22:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x20000000) [ 558.081400][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 558.096873][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.118015][ T5228] usb 3-1: config 0 descriptor?? 22:22:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000009e40)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) [ 558.119143][ T56] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 558.132515][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.155677][ T44] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.165567][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.178025][ T56] usb 2-1: config 0 descriptor?? 22:22:23 executing program 4: r0 = socket(0x2, 0x3, 0x9) recvfrom$packet(r0, 0x0, 0x0, 0x20002020, 0x0, 0x0) 22:22:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x16, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb6051"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000080)="f9", 0x1}], 0x2}}], 0x1, 0x0) [ 558.367761][ T44] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 558.383806][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.393531][ T44] usb 1-1: Product: syz [ 558.404668][ T44] usb 1-1: Manufacturer: syz [ 558.409824][ T44] usb 1-1: SerialNumber: syz 22:22:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'dvmrp1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x7, 0x9, [@dev, @local, @broadcast, @broadcast, @broadcast, @multicast, @multicast, @empty, @multicast]}) [ 558.421681][ T44] usb 1-1: config 0 descriptor?? [ 558.467992][ T28] audit: type=1804 audit(1706998943.944:337): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/569/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 558.531173][ T28] audit: type=1804 audit(1706998943.944:338): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/569/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000), 0x4) [ 558.607929][ T5228] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:24 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="73577bacdee5ed67efda685afc6019f3ac43df133d01c4ef6d96eb7399bfdbaab3f226ed9558fce7", 0x5cc, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 558.678927][ T56] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 558.692185][ T5156] usb 1-1: USB disconnect, device number 77 [ 558.704696][ T56] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 558.714731][ T56] gs_usb: probe of 2-1:0.0 failed with error -22 22:22:24 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, "", [@generic="901187c2e265e3f8c80c0d156c"]}, 0x20}, {&(0x7f00000000c0)={0x78, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x65, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="71c5474e5ecc87cce02f9a18beff94b384d22143e590f94f430f9770b294b8a565b9711602c8bc372a1e6615869bf3c5067681d2a546d0854fe854123c87ed6fb10db8488cbdbd131cf14b2eef1fc79940", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x78}, {0x0, 0x194}, {&(0x7f0000001000)={0x108c, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x1009, 0x0, 0x0, 0x1, [@generic="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", @typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @generic="820443f5491e5a5228ddbdef8abfad1417ad4d7b116011b1167759883e8377cb6373f472bcabe7f006acbf7027df", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="c1aebc6fff716f6f8b816e8f4056fc6a006ed5d9894d5741b462ea8050c86f"]}, 0x108c}, {&(0x7f00000020c0)={0x2ae4, 0x0, 0x0, 0x0, 0x0, "", [@generic="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", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x131, 0x0, 0x0, 0x1, [@generic="f026162efac719f89b67d00b12d1fb2f9e8979a6529cb818cbefc5187088fd595b7881e0932fe261357d293c88e8586dc22317aa67ad66e10fe4bd5ebd9431760564f78d15753b57d9f560b210c6c11e3fee292fe34825aadc54c277fd12d2a44637cf1523476a86353bc4a0e628", @generic="19e217b1e1dfc5b1822cce142fc0aa6246ff55855d4f030c4a8cc7b72d3bef04a9e55434655806a5835e560f065179f981c1c08cdd6cc4fbc8fd2e45a8fe5408879010ad029fe15141f98ffa09d8921e676091b7738f39e684e21331c0b731004d66801a7713c900755aedaf79222b560da529d5c5e05e45da3d55d9f8c15a5b80322c9729a668f08f965a188c20f0bda122a990b9aacd814cbd829293023d8e9e70b2fca06a6dedc956abe82cdce9183f78162fb97a63abc28c0c8385dc49"]}, @generic="5b703cc401e50f138555a424f2032f6d4344eb3fa88a84be1e092f8cc3b60b7b71e79963d2c969092e319f66e4b5cd3106c160b232f20b6100b7297d1058dfca2d7631976894044dbf074456c80c6f657e8d7b8edcf8169350ef83c5d1a3cace45b532be1f1eb37826ea8ea2e2aa9db45e63b1815925597ed2f61f3500ab6e2a41c22d850380471ac37d7ce9e51abd5f8af48da3caf6abd1fdac0fd014d6fcd97d7e9284fb49f8f734bd988c6ce71ded639075eb319e94e29151e0870d2ea44756eda26460aa1f66ab524986ff13143cbfa17258a90f764df56ddfc391b97fc345d63282a1a2cbac7020bdfa8b", @nested={0x1119, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="29d1800927613a6edb2cc3b8f874e435382953ddaea6e241f2ac35cef90792a7d7", @generic="ce9820ccd9d03a2f4c67d98198bcadf2ba154756b2b980c002c771d6b1ab042eee7f493cec38220e6f1cf8487c993a0dfba4c4a6684285e03df366501972ea0755790920daaf932bcaa0b5a20b427c6b32a366056213ad7b070833a6942dcbc4df6fe1b6c3a1d38aa10e17fc02952d63da092309464ab23638fda11911cdf1c5eec270c1e784f182178e6453116c657af39f10531ce80d5eff28ed3c", @generic="9ff4657eb9316d6281a194b556ff973620f3664727e9634358d3cbf9d7a0d7719f19fa4b983735a30d1dbb96ebe8b520830b9566ecfa7fc33b913e6a454ecee7791f243022be34551c49cc5af7cab98a2bd6a8aef7f06ec0c6f6871355e734cabd4a9c7039eddbd811b711470bbd06ab7d007a5bacd95d5517780b442d51d46db4e01685841bb39f90d4871c15fba4af339b31c4357b94c2a6cc8e2527d43f4f46886c8c5e093a0ceee96b2406b7fe27b7395c3b69d20ca29f8dca58de201c9b5c355f19979dcba8b1c9c61078fd5c3a3b2a5dfc5c44a09aea1ef2fd9bc2d438f8321fbf55c7656865af5fe82fbcf4788f7a4d25224240aa4b00ea8483881118d3a535623dd91f685479c2a56926471146fe7e5a0b5dfb630d539e41c426136d33fa70e4daabe4ad3c50078992630dbf8f8c7c8bc18368d438f0af0d7672f5e4c4ca618209515a29e3a13d90b3cb4ee1fcb6dfc6a27b6844cb6a3e3a39ba5c730aee1b7fe07a92108b7266a7d14f7384c49388e5f662d8cd3d9afdcf276561b3fc0aaf1e0177529538008a2d7aeb238ba2546c7aa14d180cae49a8a946e67badd794d5a09f613f4dbb1ab1c35e51271cfeed6bae7f0a3f0805f67c12fcf9ba9bf650592815390c3bee06664cf09acd0f55717db6cc511e8baa793a9cc224018b28ba749ae99567af0906163a7934fce1349df7c528984c46a65816b002a2a6fccd08836effd1d66c75ebb68c90c5057c4a760b3ac551869a6f5dac693a97f20cf1b6e0351ead3086051c6b9b435a5477473c1e7a2b245d1be639f1219b5f55d2ad51fd3e724575ebecc654021ee3d870d763dab59ef15eb9280b8e7af3ab54eed6613498f70fdeeae56020953ad1f17d677135436944beebe4566c3e48a8c1139dbfde201d2c06e5ebf931e8b7dd85e4be91709b18813a8d27776ad07c48d39daac6858f38d6a235557ba3a073ff71a7838043cd910e210643432e06aa921ce5679a5ea49b5ae251c0163d87d003a4389b70ab0501728f24b3f94a939dc40881ef6bf601d27ff1af603295509866d435265a7eaa157d580d7b982c3e0eb984436aa02956cf62a43b30117d1d6700ca5e352944ec400b7375f9404394adac6161b2aa90a3d890fa3864366d256697d12d374fb33d7abe481aa5f719065d18934daa67fc7441908dc3cb452121de8fd8e44cfa771f81b3f0c0ecd64ad78a30fbab150cc5188fbe59b332ebb1f7a13bbd9bec55bc40f6f373ec3d84a2e5bc4d3e2478d85610ef4df1fa3bece0fea1556850a01a4a9fa485013ed59a06a85badc149af20147aed73ab1d2f64081e9ccb2acf548a8c280ba11a6e9f94b6dd5ad0737c959fff2448231fac78aaeaff561d16e078f0805507732820ebbde565ed31b6a1424a8fac7d5407c8243e27c57fc150aad65ce5984eea8c9ff808dcdc371413abcafcfa1e0b55cb13282d5b8a8f36d68230d64fa9600f6ba932ac247916229cc0ae8e5259264d47617c608c342f7abbb6d32f605cf5f61ca4b19fd22f496822fae7ace99cd2e26e5221bc31923b5afac7eba12d240d8ed7331ce1f623c3848ca5edd06877f0581f66aca263db9d8fad462220478b691559c910df55eb8e9348ae51cd8bdaed267a7808a91fe63f11c58661965281344c69d8342d0e7b5ef72816a29d58bde51971ed042a9c258b331d99ad8ad6b36b4b2cd429bddffbcaf0b9013188238437e98b00cfc029f0ae4b4ddbedcbe26868060e0303e5e932a81731b3a056119d810d5913191da69d4273167532b3e6a82eb7e22e3f8f0fa30e525ffb715cec1e6ff11fe11b9ba94fdca9bb972b0dc98b2c2d5b0f565634061cab1b3d1c8f7bea0443602cc07034f47dbb5a3731599453cbb571fa5bc7f42af938fcab22ca3032dbe6a57cd747ef6b961d9e49556556ff1a2befe9ea4dfa404bbf9d646815f7fd87b1ca074599ff5d248de3c1cf31bca98364cd19a6ef371087fff05ff0b2c41f1b634dbd007d04bc8360c07ffe040a069936401f7021af7dfed25e6fed5e0b9412c110341d564eec0b36db751019bcd970d6da5dc34f02275587df33a673a26571c5ff5ebfdab58037878ca557edc91978abd5c98471a5e63eec70c5b343dbd1b65a0149f0e4e38a881067d1cdebf6b623824b2fae20c5014b04bdc595462dd41bd9d5119348aeab6e3922b385fe84f7bf895fbf76d17803204f2550362b3112ae4cdad4ba41568a23338c932e9ce4825e2c634ce9a6d52226335c9c82c10611a8d27d9639838c73eb49e3d30708627e1d67869d85b323277faac868454f846255e53f181645d88a762141ce3bb7be580cf35bfcb46913157fc04e9250218ae2f7cac64a793324668b42b5c48e510eb9163808ff5cd2ad4d25a55ba82be7a0dde8078862dba2b4ebd7f89949111a821823e9f52c16147a127198dcc8457991ad31903c86ff272aa0b602cd0153edfe0c7bca8e0f3d15c544137f36dd73e2c7b73ff324de72a457e4f70373d25c05c5101e20323677fe604281b1260a6e26a8dbcf947050594b455135689d6a4f6cfa982048adfecf7244789c273b543ca883bbe14b8a2f7fa0c1274f6d2b131b19949a19bd4fdebaa374fea154e72dea3f3a6690b8407d69904318953ca88e4f696935c98a00bd2648269bc64b44542ff327d16f3c49a1392e03ffd03a41f4760fdbb18fb1f5966f4a4bf536915f5e5db6a2c29b6c1f1b6de95e90d0daf87febe474569869c521116d5d1d9f87edd88ebe83ea9fbbb4e0464c3d446bc3eeb00e82e7ba08d8f072afd6e200aa755d015e081809caedf13bc616729e9f5459abfa02231411ffa9e2763637b19fa761bdb3180d1a6fc8888e8d41d149a4d3ff34e27de860ed801294ff222156b755736030679ad7d22e55508cc6ea6b785d2637242a0018b1aaf1349f5c729ad8149b43def2d16b5d1fa66dd884f27b0028cd924105c1fb67b6150ea024860014bf33de57f7eb4bf51b063fc29d2efd0e0925b518e0f55de8dce7ef9e2f928e1c52013ed57c3d850e9e9c9305d5f495d5e8feca53b3ebe75bcffcbf72b231234ff58b7820a8218afd6a85afd7c5d56f28c3258dfb423901eeffb809c1420b84c42d767b40f2f61d281500fea49ee14966825af5e1f13da152255939936973bdee342c330092e43ca048f007b788605921ec4498b91d6024fc25eaa5a4da2bf15fede6aacc85e51bded74923169a9dc2f4556bef0fc1d1235278c8e4613a8ff6eeff7b2b1b825bd06775e2ee36b30df84f509f847bb27fbdc0c75b6c6407d85c0454266cb1b5d732a9ed31f15bc9fc289ca615ef31ddfe4d36ec2ee4839ec805fa3606407409bc01ee8b9487b3f8097d0487928fe41c07096c28517e3e22e0b0ae341394dbc0bbc5f1592c413ae380c7f7babd51abcf155dcdbc9d6b064a4d90bc103c3a72d66fcc33e6ff7b5f34d981917a09a691b5423a474c4840534cc376c40ff00fcd35a8cab92f7c2299055ba1c06dbcc6e4aa27c0a729d32647cb39a794abd78ae908c3addd9bc79368976943f72f29a243dc4374ed95de6052037d96ea814ba14f5bdffc901b41588e036bfccc586dd28e41db7d85a3f95b9173b83d4ae22dfaae92ab71df07580e309f7ffab9ddaf89ad023d64a858e792c519b4b86eac52fe8c93bc49abb1022182d6a678b05d00206fd5c9e83253d0a728937a9bd0fe64c8083ef76d16be7bbb2654e76cd9fa6ae8be5d69a981012094a9d44ec0d377e8c2f77ef3d938c178de44288e580dd56c37bedbd96d70e28dcb9dac7e59dc93fe9b437d3b727c742a76eff8c54eb88aa27e3f34d2d68348f4a0a0e534ee41c559609e7c0138554e8c0add8149d280eac408efc39291a6a01e1a512b9478f3c2ab91432230365f43bdd8fb3b600e9092762b3dd4f01f7dd95a39459abab83982a7494a646640de7345b5262772a659100f46e3885ccefb4924039b9a872f2942d3adc5855e049385a29ef972bd1ebfa5d70febec34fd973940ec78a45d6d2fe511b01c913fdeac99609f1a2572d5a5b2450b1cedb7b96f9657a7fcadc805669707cca654f0a8c07c76e642c6566ff03bee738ada6249e6dea3ddf6b54bd66c5525866b1a2dd11f64f05648b7cd9d1173fb6375763cb3a0942ddde51c8492ad34421dec960e825ba1d4e89499d41bfff1832f7841ca725eab58ad14b7fec084beca1687fb35c16218cfa898aa633975d3543d7ca5866d60a7cccb2cbe32f807937ea0c9ab8883ead3e158fed2f38b32b11356615880fdf3fcaec32349cc1d1ecdcde801ada123057c55ba6e1f1b4c33422939ff8d9fae8d27b39902e99e37b54a1fdc7c8c5315fd786bbe09f63b489ce509b858ec45052e66acea69321951ca972fc118ae9911995ecca983e1e7549c5888548c5f062c748bf9b3a398bc5d57f0549567fbe948d4b1eee6aa67aa955ed36a960d81d2754bb9d7085afa03a0511d359d06364b41513eecd37c75b005b31cded289a87ed62a06f7b56ffc6f3b4a637288f732c0e765a3b6b0b48c9535f0ae55b1f2b67f40d62c48fd7b0f34a41964ba8b6e70afe030da667e02fc24d7baefa78974f1a5b7c282ad797ce76a36b05d964cbc6f7ebf2ed88611f3ba1740cd73cb3d7ca218f966779e7e047d2bcf1f304c57d39dcbfc721d729ebce89784a7c04b0c1dd483256bfa1cf6a0a30d5c118ca3c7b600c5f5fc1a31911b4bbc1e217a520fa00f1df9b61c93bce99d6e2f0a48774cdb8823a449eb3fa826ca41aae440c26d9608cd17ebf49812433e9a21d744a1d3b9f2a0e59fb94020db163e166d6637381ec3c9e592f9b489803296d3d73181301c6c8666fbee57d07a1719c346292d20893a34e37b922a6577d9e2dfeac4ccfa64c8862b6f8ba611dbe2d214ee906f8e76aeeb2f7dbc4bb25e7d92fbcdf77afb06e35e3fbc4d128bc3d27e24e008d74565d0ba95bed3b75c344dd2912cdf7612a3a1c3c41bb3d8f5304a857baaacc10cc3f8231f545cb66c2e784dc4741090b8d38a25749a3b603318d9992bc1a260c5999e0f2aa8cbcb8756baa91c4372d7d3085295e63d3aa2b5a003dc833066ca1f6c3d6d269dc9e55e4f4d43c3b2a01b1cba299207cd9874918fdd29a1e01e9fd9a45b8616a1f8af62f1f2e76077b129c41a372bd29341ae07325f8acd64017ea16058a12d0c5353430a7a4df4608c43b3c471d9c75dfdb8bd7fbc7a33b9e0eada1d6172b4cda7d9c0039469e45a75ea45cf234ccd42483bad465f2e7f377318585a6af5fab6693e49a9973f29054225d68960f7bfe06ba2f51a0812f0cf388e887dd858aaf893556d85c672cf4216a5dd7cb1120bd4aaa734d1e55286ad0bb200bb2278edcb126848f2a085cfdf1c34b83e83df89c30a0d6bf8c3ae3d73c9c1836e52cafca0e338dc434c7eb3907c2ece35487e40040e4acd847a91640beafb4bc4ae095768eab41e9c0b3a8ce0c6b2868febfd9bff23dad919668e11367edd97bfd322f97f6b17790fbaad48d12d7673777058f83314966b4b89778f20c3be46989e5d96ccb0374faa3fbb9c5907c834a1264e9d483de46e8ec6996f6fb39be3c3e16b90e3f0baa15beeeb857c312dc5624006bba00c4f008b443e4d251de3804d9c3a37c2db5a7eece18106c4d946d14bfa4f95b4f7891a60e8adac903c7a439a534589b995f42328b1dcea225068aaf4033f54984f63cf859e89b8f86f362e18b0948d9dff101f0eb4c53d4a7a0616c9424de8797224432ac4b574604eaaaa6729b35c460ebd6be88abe7c35edc5c8", @generic="f373a4b6ff4ee1fdb8796fce7971e28ddd76aee507427aa72aec285ce8083a9394addc0e39d4f03fb4741aa287715374dfa2e496cb0c2a850c66b80c"]}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @nested={0xb9, 0x0, 0x0, 0x1, [@generic="bbceda6aeebab68525340b5ee994c8e903d774fb7a8db4c37642a1bf768a199e21f3c22191b27560453e44b1fbb3e7bbef3d646dddb9c9f682b8c166763e38738ad285eef166016d5a11f95e3dcd5c052187cc00a39ecce34aa404ebe1e89f6dbbe27bd25b76eb190128588fc79e0e0ecc2067b85ab2a6fe445b75a385ed85868d01e38e13a3b2b5aab6216faa4b0e4207b59a4ae4bfc9ed218f2a2f4f68a43fd191042ccd61f91990814279e28abc4abcbbcb6a02"]}, @nested={0x6a5, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x6, 0x0, 0x0, 0x0, @str='$\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="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"]}]}, 0x2ae4}, {&(0x7f0000004cc0)={0x128, 0x0, 0x0, 0x0, 0x0, "", [@generic="383921a2b78b6aa3eb279d1f0227034929bf07688a669325bac33f2da5944f4273ffe56ce0cd0c9e853464d19c1de18dd32987220b12d7cacacd4c972bde6a45ab87a1ed95488176e61cc6dc86483e3a071e61d5c3797917a588566265f0f97059481e2c04cf2b525158c4864770fc559bff3218450ed54df3172f668372c46161d918f8e68b8bf104f99f3e572b31facd198aae760440af0de8af99d7b80acfeb0520d83e6fdcab81209af09c525dbd3ff4e31d0d6c8c90718a28ee6242200f19405e371f074ffef2301196b9f2077031816c31a117e54fbc214b394764b35430633dd6d1d44ab118c9afb95d68faf5343c3afd227a76acbf25b2a700db274ec6c9fdf993dd49e5bca013b401f87d629505026220"]}, 0x128}], 0x6}, 0x0) 22:22:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 558.838161][ T5228] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 558.860629][ T5228] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 558.899082][ T56] usb 2-1: USB disconnect, device number 65 22:22:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:22:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:22:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(r1, r2, 0x0, 0xffffdffa) sendfile(r2, r1, 0x0, 0x800000a1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000003f80)='./bus\x00', &(0x7f0000003fc0)={0x101000, 0x96, 0x8}, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004400)='./bus/file0\x00', &(0x7f0000004440), 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000044c0)={{{@in6=@initdev, @in6=@private1}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000045c0)=0xe8) stat(&(0x7f0000004600)='./bus\x00', &(0x7f0000004640)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) fstat(r2, &(0x7f00000046c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() setreuid(0x0, 0x0) getpid() [ 559.142531][ T28] audit: type=1800 audit(1706998944.624:339): pid=13059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0 22:22:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x16, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb6051"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:24 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f0102030109022400010000000009"], 0x0) 22:22:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 559.406467][ T28] audit: type=1804 audit(1706998944.884:340): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/570/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 559.455170][ T28] audit: type=1804 audit(1706998944.884:341): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/570/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 559.607770][ T5156] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 559.817479][ T5223] usb 2-1: new high-speed USB device number 66 using dummy_hcd 22:22:25 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x38}}, 0x0) [ 559.988242][ T5156] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.010058][ T5156] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 22:22:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0x19, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x90, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x6f, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x19, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c58"}]}}]}, 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 560.178464][ T5223] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 560.200771][ T5156] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 560.204178][ T5223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.214653][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.237834][ T5156] usb 1-1: Product: syz [ 560.242423][ T5156] usb 1-1: Manufacturer: syz [ 560.252954][ T5156] usb 1-1: SerialNumber: syz [ 560.256400][ T5223] usb 2-1: config 0 descriptor?? [ 560.270587][ T5156] usb 1-1: config 0 descriptor?? 22:22:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x26, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}]}, 0xa8) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) [ 560.367818][ T5156] usb 3-1: USB disconnect, device number 107 22:22:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x35, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0) [ 560.461682][ T28] audit: type=1804 audit(1706998945.944:342): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/571/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 560.533028][ T56] usb 1-1: USB disconnect, device number 78 22:22:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x18, 0x0, 0x0, &(0x7f0000001800)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) [ 560.592059][T13083] __nla_validate_parse: 176 callbacks suppressed [ 560.592081][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:22:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8982, 0x0) 22:22:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback, 0x7e}, 0x1c, 0x0}}], 0x1, 0x2000c054) 22:22:26 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x28}, [@network_terminal={0x7, 0x24, 0xa, 0x41, 0x7, 0x3, 0xea}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5c, 0x80, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3, 0x0, 0x3f}}}}}}}]}}, 0x0) [ 560.747661][ T5223] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 560.754079][ T5223] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 560.764350][ T5223] gs_usb: probe of 2-1:0.0 failed with error -22 [ 560.888192][ T5156] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 560.950215][ T784] usb 2-1: USB disconnect, device number 66 22:22:26 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f0102030109022400010000000009"], 0x0) [ 561.098481][ T5223] usb 5-1: new high-speed USB device number 79 using dummy_hcd 22:22:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x90, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x6f, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x19, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c58"}]}}]}, 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 561.278354][ T5156] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 561.298167][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.325116][ T5156] usb 3-1: config 0 descriptor?? [ 561.355017][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 561.355043][ T28] audit: type=1804 audit(1706998946.834:344): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/572/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 561.388469][ T44] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 561.406451][ T28] audit: type=1804 audit(1706998946.834:345): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/572/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:22:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 561.467761][ T5223] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 561.493563][ T5223] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 561.505931][ T5223] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 561.516567][ T5223] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 561.697641][ T5223] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 561.713641][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.722293][ T5223] usb 5-1: Product: syz [ 561.726512][ T5223] usb 5-1: Manufacturer: syz [ 561.734077][ T5223] usb 5-1: SerialNumber: syz [ 561.797572][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.809929][ T44] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.827561][ T784] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 561.847870][ T5156] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 562.017750][ T44] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 562.018033][ T5223] cdc_ncm 5-1:1.0: bind() failure [ 562.026845][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.026871][ T44] usb 1-1: Product: syz [ 562.026887][ T44] usb 1-1: Manufacturer: syz [ 562.026904][ T44] usb 1-1: SerialNumber: syz [ 562.058467][ T5156] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 562.068186][ T5223] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 562.070770][ T44] usb 1-1: config 0 descriptor?? [ 562.075960][ T5223] cdc_ncm 5-1:1.1: bind() failure [ 562.088738][ T5156] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x90, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x6f, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x19, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c58"}]}}]}, 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 562.130955][ T5223] usb 5-1: USB disconnect, device number 79 [ 562.208830][ T784] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 562.218480][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.236919][ T784] usb 2-1: config 0 descriptor?? [ 562.343545][ T44] usb 1-1: USB disconnect, device number 79 [ 562.386140][ T28] audit: type=1804 audit(1706998947.864:346): pid=13100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/573/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 562.431467][ T28] audit: type=1804 audit(1706998947.874:347): pid=13100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/573/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:22:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@dstopts={{0x18, 0x29, 0x3e}}], 0x18}}], 0x1, 0x0) 22:22:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0xffffffe0) 22:22:28 executing program 4: bpf$MAP_CREATE_CONST_STR(0x11, 0x0, 0x0) 22:22:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0xa, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:28 executing program 4: bpf$MAP_CREATE_CONST_STR(0xe, &(0x7f0000000040), 0x48) 22:22:28 executing program 4: bpf$MAP_CREATE_CONST_STR(0xd, &(0x7f0000000040), 0x48) [ 562.717646][ T784] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 562.725611][ T784] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 562.735948][ T784] gs_usb: probe of 2-1:0.0 failed with error -22 22:22:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x70, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x70}}, 0x0) 22:22:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x35, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 22:22:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000380)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) [ 562.946586][ T784] usb 2-1: USB disconnect, device number 67 22:22:28 executing program 4: bpf$MAP_CREATE_CONST_STR(0x3, &(0x7f0000000040), 0x48) 22:22:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}}}}) 22:22:28 executing program 0: socketpair(0x28, 0x1, 0x0, &(0x7f0000000280)) 22:22:28 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000640)=@lang_id={0x4}}, {0x4, &(0x7f00000006c0)=@string={0x4, 0x3, "854e"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x2, &(0x7f0000000800)=@string={0x2}}]}) 22:22:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x609, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 22:22:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x90, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x70, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1a, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857"}]}}]}, 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 563.201731][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.217586][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 22:22:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x9, 0x0, 0x40, 0x0, 0x1}, 0x48) 22:22:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 22:22:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8916, &(0x7f0000000000)={'syztnl1\x00', 0x0}) [ 563.459261][ T28] audit: type=1804 audit(1706998948.944:348): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/574/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 563.487350][ T24] usb 3-1: USB disconnect, device number 108 22:22:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x26, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:29 executing program 0: sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x300}, 0x0) 22:22:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 563.509782][ T44] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 563.555876][ T28] audit: type=1804 audit(1706998948.974:349): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/574/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:22:29 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) 22:22:29 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000840)='{', 0x1, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 22:22:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8930, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 22:22:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 22:22:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0x18, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, &(0x7f0000001500)=[{&(0x7f00000003c0)="0e", 0x1}, {0x0}, {&(0x7f0000000080)="f9", 0x1}], 0x3}}], 0x1, 0x0) [ 563.928148][ T56] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 563.947839][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.961286][ T44] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 22:22:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f0000000000)={'syztnl1\x00', 0x0}) [ 563.972666][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 563.986551][ T44] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 564.007521][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd 22:22:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0xc, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0x5, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:29 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x5, r0, 0x0) request_key(&(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, r0) 22:22:29 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$inet_nvme(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x40000042) [ 564.187626][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.202889][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.213033][ T44] usb 5-1: Product: 䐊 [ 564.228843][ T44] usb 5-1: Manufacturer: 亅 22:22:29 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x90, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x70, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1a, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857"}]}}]}, 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) [ 564.297834][ T56] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 564.329020][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:22:29 executing program 0: bpf$MAP_CREATE_CONST_STR(0x6, &(0x7f0000000040), 0x48) [ 564.345644][ T56] usb 2-1: config 0 descriptor?? 22:22:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x6, 0x1e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) [ 564.399234][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 564.418725][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.435997][ T24] usb 3-1: config 0 descriptor?? [ 564.497735][ T44] cdc_ncm 5-1:1.0: bind() failure [ 564.514988][ T44] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 564.522740][ T44] cdc_ncm 5-1:1.1: bind() failure [ 564.534237][ T44] usb 5-1: USB disconnect, device number 80 22:22:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000140)) [ 564.545521][ T28] audit: type=1804 audit(1706998950.024:350): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/575/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:22:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 564.585811][ T28] audit: type=1804 audit(1706998950.064:351): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/575/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:22:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x2204, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 22:22:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x35, 0x0, 0x0, {0x5}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0) 22:22:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 22:22:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, r1, 0x35, 0x0, 0x0, {0x8}, [@ETHTOOL_A_WOL_HEADER={0x4}]}, 0x18}}, 0x0) [ 564.829228][ T56] gs_usb 2-1:0.0: Configuring for 239 interfaces [ 564.835647][ T56] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 564.852980][ T56] gs_usb: probe of 2-1:0.0 failed with error -22 22:22:30 executing program 0: r0 = socket(0x2, 0x3, 0x9) bind$packet(r0, 0x0, 0x0) [ 564.918296][ T24] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x64, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x64}}, 0x0) 22:22:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89a2, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 22:22:30 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 565.050487][ T56] usb 2-1: USB disconnect, device number 68 22:22:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'dvmrp1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0xa, [@dev, @local, @broadcast, @broadcast, @random="d079f97600e5", @broadcast, @multicast, @empty, @multicast, @random="2004dd0cf1b9"]}) [ 565.142314][ T24] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 565.168653][ T24] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x16, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 22:22:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x90, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x70, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1a, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857"}]}}]}, 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 565.470331][ T28] audit: type=1804 audit(1706998950.954:352): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/576/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 565.497212][ T28] audit: type=1804 audit(1706998950.954:353): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/576/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 22:22:32 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$netlink(r0, 0x0, &(0x7f0000000140)) 22:22:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x27, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 566.595257][ T44] usb 3-1: USB disconnect, device number 109 22:22:32 executing program 4: io_submit(0x0, 0x1, &(0x7f00000040c0)=[&(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 22:22:32 executing program 0: r0 = open(&(0x7f0000000240)='./bus\x00', 0x165042, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 22:22:32 executing program 4: syz_clone(0x64040400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 566.747868][ T28] audit: type=1804 audit(1706998952.224:354): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/577/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 566.809494][ T28] audit: type=1804 audit(1706998952.224:355): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/577/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 22:22:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') [ 566.843258][ T28] audit: type=1800 audit(1706998952.294:356): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1962 res=0 errno=0 22:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @broadcast}, 0xc) [ 566.937565][ T5223] usb 2-1: new high-speed USB device number 69 using dummy_hcd 22:22:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, 0x0, 0x2) 22:22:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f000000e4c0)={0x0, 0x0, &(0x7f000000e480)={&(0x7f0000001600)=@deltfilter={0x24}, 0x24}}, 0x0) [ 567.088782][ T44] usb 3-1: new high-speed USB device number 110 using dummy_hcd 22:22:32 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 22:22:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 22:22:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') [ 567.327623][ T5223] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 567.345255][ T5223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.395303][ T5223] usb 2-1: config 0 descriptor?? 22:22:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000200)) 22:22:32 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000ec0)) getuid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x202ac000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "1e21622ffdbca484a178e799052e3033"}, 0x11, 0x0) [ 567.447969][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 567.472364][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:22:33 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)=ANY=[], 0x58}}], 0x1, 0x0) 22:22:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 567.517212][ T44] usb 3-1: config 0 descriptor?? 22:22:33 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x7}, 0x0, 0x0, 0x0) [ 567.677709][ T28] audit: type=1804 audit(1706998953.154:357): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/578/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 567.717003][ T28] audit: type=1804 audit(1706998953.164:358): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/578/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 22:22:33 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') read$FUSE(r0, 0x0, 0x0) [ 567.877584][ T5223] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 567.884622][ T5223] gs_usb: probe of 2-1:0.0 failed with error -32 22:22:33 executing program 0: socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') read$FUSE(r0, 0x0, 0x2) 22:22:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210100, 0x0) flistxattr(r0, 0x0, 0x0) [ 568.058045][ T44] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:33 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1, &(0x7f00000036c0)=ANY=[@ANYBLOB="1c0000000000000001"], 0x58}}], 0x1, 0x0) 22:22:33 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000006800)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000036c0)=ANY=[], 0x58}}], 0x1, 0x0) 22:22:33 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) [ 568.277632][ T44] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 568.293892][ T44] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @local}, &(0x7f0000000080)=0xc) 22:22:33 executing program 0: timer_create(0x3, 0x0, &(0x7f0000001600)) timer_gettime(0x0, &(0x7f0000001640)) 22:22:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f000000e4c0)={0x0, 0x0, &(0x7f000000e480)={0x0}}, 0x0) 22:22:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r0, 0x0, 0x2) 22:22:34 executing program 4: timer_create(0x0, 0x0, &(0x7f0000001600)) timer_getoverrun(0x0) 22:22:34 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_gettime(r0, &(0x7f0000000180)) 22:22:34 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual', 0x0, 0x0) fchdir(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001bc0)='./binderfs/binder1\x00', 0x0, 0x0) [ 568.686903][ T28] audit: type=1804 audit(1706998954.164:359): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/579/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 568.725734][ T28] audit: type=1804 audit(1706998954.164:360): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/579/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 22:22:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 569.635550][ T5075] usb 2-1: USB disconnect, device number 69 22:22:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x27, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f000000e4c0)={&(0x7f00000015c0), 0xc, &(0x7f000000e480)={&(0x7f0000001600)=@deltfilter={0x24}, 0x24}}, 0x0) 22:22:35 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:22:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 569.683881][ T24] usb 3-1: USB disconnect, device number 110 22:22:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 22:22:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000000)) 22:22:35 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') socket$unix(0x1, 0x0, 0x0) syz_clone(0x202ac000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 22:22:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000000)) [ 569.860292][ T28] audit: type=1804 audit(1706998955.344:361): pid=13288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/580/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 22:22:35 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', 0x0, 0x101003, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 569.946850][ T28] audit: type=1804 audit(1706998955.374:362): pid=13288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/580/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 22:22:35 executing program 0: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') [ 570.107995][ T5075] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 570.157740][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd 22:22:35 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') read$FUSE(r0, 0x0, 0x2) 22:22:35 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r0, 0x0, 0x0) 22:22:35 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a881, 0x0) 22:22:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000000)) [ 570.477679][ T5075] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 570.495696][ T5075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:22:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r0, 0x0, 0x2) [ 570.527625][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 570.547425][ T5075] usb 2-1: config 0 descriptor?? [ 570.559555][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.591479][ T24] usb 3-1: config 0 descriptor?? 22:22:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$FUSE(r0, 0x0, 0x0) 22:22:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') read$FUSE(r0, 0x0, 0x2) 22:22:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:22:36 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x7}, &(0x7f0000000080)={0x4}, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={0x0}) 22:22:36 executing program 4: mq_open(&(0x7f0000000040)='\'](\x1c\x00', 0x0, 0x0, 0x0) [ 570.899775][ T28] audit: type=1804 audit(1706998956.384:363): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/581/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 22:22:36 executing program 0: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x805400, &(0x7f0000000400)=ANY=[]) 22:22:36 executing program 4: socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r0, 0x0, 0x0) [ 571.017886][ T5075] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 571.032109][ T5075] gs_usb: probe of 2-1:0.0 failed with error -32 22:22:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)) [ 571.087791][ T24] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:36 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006b80)={0x0, 0x3938700}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000006bc0)="751d14d79b05bcc5807026c3a04520fe7788424a4428452ba41305e7134647ce4920c09169caccd4d095e7c417df8a152b954f9f7c67685bb4db1d52a81e74d6108cbbd1a3ad53d299952c852eea2dc5af483f2eb5a784275b5fe2ecd26a6c29c73d0689f9e7fbc90a18feb6218200dec3ce25228bf66b271af6777d1e7f23213cf5f641dd1551f44f44429ecbc35927b748dcaea06737ff8838e4ff0653bf0c7f684b7d3a8b118849fa5e6d959ff76805733f5cb4086ab309436e61510270afb2cce7423ee1584aee219baed3f943e160e4de0bc4316b563f8ed79cd974d56cbb2f0041c37541d377ede9217c623ec276fc25ed0c5fa631af7a3946d83cfde2cb82e6d482c982a1bdd37f6b7c5bbf9f1bc9d25a6a7dc4043ad602c319966ce7e86d759e0f884fd7839bd7f35c2be92c4dc0b2616d9929ed5c4416ec438b7bc27bc293ebd60ff7e37186e2110fee65f096b02869fc16f88991bdc94917a1162c3948798ab6321e47a0f0b5e121e8ad29373ee4d62947b13e81c3ab9e7997fa797b9d7e6b3d16e3f35c7a52860812eb5f6f979567cb05c2df0fb1e7b6da7de510fe6f3db5326317c0dfca30f57991cfaf488298441a9ec3c7474c20436af1f4f794f43991f8345ae244ffb6fe7b934a5fb463b2a046733f247ba82e5b3176c587f0f8ae09e1d686fc6bfed95d1e7809dadb8fea69f2ec3c1e3fd4418e5391ec2bb957d511454990f1c847c003c78a85823a1bddd375b49da03ea2ac343312c42f6353aba79821cc585aab98a553aa45c79769befd740f5bcc050e39985cd48a3ae06a4ea8cc67315c8c4fbb883bcf9869750b989b69d67e0aea2ca11e1ce386db0eab88c46eb8db78f9b8806a8f38a08eb47c93beb2fb5ec25ba5d8c82768b7f74af7d04da1f61b81d46887c37d04ad260eca3cfad2a57197ce7accfba57de8fbeb2b6838151ed75c753c3615a0084394593d9df25db68a731fc2b60360e5bb97ec4f0b922b1567cedf460241c56bd0b8c5b917c488645c75d9bb7dd47d9fb58755aaa58fb697678e68bd46f91f8a9d7ccfcca74e7018d60f344ffde0b1dd858842260c24f4037486189e42d72e4bf9f29ff8b4891aaffd9a3537a812053839384f225e1bb5cefe8cc2d951802d77f32513415f6fd904770be63248721a281600f797aa8273b6e3d3b9ef30b5fa9b96003706575a077399e1d7c69593c438b164ec5ce01a65ec783cde69971d7adb83a2a5e005f34132bd164efc7b9a01fb1f89fb2a1aa24702d3e25e339834f3109505b7fc583de7cae377c6eb55ca4ef9c728e8a2b6130aca88e31eb08bdce90b6e7fac1494654f0da869193f864eb7b7357cddd3c754257bfd2a63d4a3d7ec0d0ef3d6d02534d9dc54e8918be47cd9c0e44b55442454db6b57b9ef2b4285e769fe251eea1170957877774050732177049b9beb0d82d9b288d8b5d964457771818dcd0adb6a26c3b8cbbcd339e1acc923428de7d88aadbe7592419aec3624a65097ed9c02c3a48ff4f27a34f03582f7f2ffe41e", 0x441}], 0x1}}], 0x1, 0x0) 22:22:36 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r0, 0x0, 0x2) 22:22:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 22:22:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty}, &(0x7f0000000500)=0xc) [ 571.321004][ T24] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 571.331685][ T24] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 22:22:36 executing program 0: socket$inet6(0xa, 0xb7824dbb4a286fc9, 0x0) 22:22:37 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)=ANY=[@ANYBLOB="1c0000000000000001000004"], 0x58}}], 0x1, 0x0) 22:22:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x27, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 572.747545][ T24] usb 2-1: USB disconnect, device number 70 22:22:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') 22:22:38 executing program 0: sync_file_range(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) 22:22:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x8c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 572.811028][T12977] usb 3-1: USB disconnect, device number 111 22:22:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') flistxattr(r0, &(0x7f00000020c0)=""/217, 0xd9) 22:22:38 executing program 4: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8006, 0x0) 22:22:38 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') socket$unix(0x1, 0x1, 0x0) r1 = syz_clone(0x202ac000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 22:22:38 executing program 0: timer_create(0x3, 0x0, &(0x7f0000001600)) [ 573.021106][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 573.021126][ T28] audit: type=1804 audit(1706998958.504:365): pid=13355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/582/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 573.086503][ T28] audit: type=1804 audit(1706998958.504:366): pid=13355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/582/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 22:22:38 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x202ac000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, 0x0) [ 573.167784][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 573.327508][T12977] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 573.537557][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 573.558299][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.593877][ T24] usb 2-1: config 0 descriptor?? [ 573.727584][T12977] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 573.743798][T12977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.780554][T12977] usb 3-1: config 0 descriptor?? 22:22:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:39 executing program 4: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 22:22:39 executing program 0: r0 = socket(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x2040085) [ 574.097578][ T24] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 574.120764][ T24] gs_usb: probe of 2-1:0.0 failed with error -32 22:22:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:39 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) shutdown(r0, 0x0) 22:22:39 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000004c80)='ns/net\x00') [ 574.267615][T12977] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:40 executing program 4: syz_clone(0x120200, 0x0, 0x0, 0x0, 0x0, 0x0) 22:22:40 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvmsg$inet_nvme(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x41) [ 574.517967][T12977] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 574.526699][T12977] gs_usb: probe of 3-1:0.0 failed with error -121 22:22:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=@delpolicy={0x50, 0x14, 0xb5861d01c14bb3ef, 0x0, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}}, 0x50}}, 0x0) 22:22:40 executing program 0: r0 = socket(0xa, 0x3, 0x2) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 22:22:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x2, 0xf4d98aa91065361b}, 0x20) 22:22:40 executing program 0: r0 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 22:22:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f00000000c0)={@local}, 0x20) 22:22:40 executing program 0: r0 = socket(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) 22:22:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) [ 575.228867][ T28] audit: type=1804 audit(1706998960.714:367): pid=13406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/586/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 22:22:40 executing program 0: r0 = socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0) 22:22:40 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x11, 0x0, 0x0, 0x0) [ 575.450449][ T28] audit: type=1804 audit(1706998960.934:368): pid=13413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/587/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 22:22:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:41 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x2, 0x0, 0x3498, @hyper}, 0x10) [ 575.700740][ T28] audit: type=1804 audit(1706998961.184:369): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/588/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 22:22:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 575.792178][T12977] usb 2-1: USB disconnect, device number 71 22:22:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:41 executing program 4: r0 = socket(0xa, 0x3, 0x2) recvmsg$inet_nvme(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x160) 22:22:41 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x81, 0x0, 0x0) 22:22:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 575.979378][ T24] usb 3-1: USB disconnect, device number 112 22:22:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0}, 0x0) 22:22:41 executing program 4: socketpair(0xa, 0x80005, 0x6, &(0x7f0000000040)) 22:22:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 576.136432][ T28] audit: type=1804 audit(1706998961.614:370): pid=13431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/589/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 22:22:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) [ 576.220939][ T28] audit: type=1804 audit(1706998961.624:371): pid=13431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/589/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 576.347506][T12977] usb 2-1: new high-speed USB device number 72 using dummy_hcd 22:22:41 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "a8912ab876f46d56df39b81edabbb43cd22fa7a7529cf06ab55d0fce0d7b07b7"}) 22:22:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x400000}, 0x48) [ 576.417717][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 576.440000][ T28] audit: type=1804 audit(1706998961.924:372): pid=13445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/590/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 22:22:42 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x2}, 0x48) 22:22:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 576.527990][ T28] audit: type=1804 audit(1706998961.924:373): pid=13445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/590/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 22:22:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x12, 0x0, 0x0) 22:22:42 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x18}, 0x48) 22:22:42 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x1d}, 0x48) 22:22:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 576.665885][ T28] audit: type=1804 audit(1706998962.144:374): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/591/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 22:22:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 576.757629][T12977] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 576.766986][T12977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.795559][T12977] usb 2-1: config 0 descriptor?? [ 576.837645][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 576.848624][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:22:42 executing program 0: bpf$OBJ_GET_PROG(0x12, &(0x7f0000000580)=@generic={0x0, 0x0, 0x18}, 0x18) [ 576.879831][ T24] usb 3-1: config 0 descriptor?? 22:22:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:22:42 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) 22:22:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x14, &(0x7f0000001640), 0x48) 22:22:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 22:22:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)) 22:22:42 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0xc, 0xffffffffffffffff, &(0x7f0000000000)) 22:22:42 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0xf, &(0x7f0000001640), 0x48) 22:22:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/208, &(0x7f00000003c0)=""/251}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) [ 577.327630][T12977] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 577.339285][T12977] gs_usb: probe of 2-1:0.0 failed with error -32 [ 577.377717][ T24] gs_usb 3-1:0.0: Configuring for 1 interfaces 22:22:42 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x10b0c0, 0x0) 22:22:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/208, &(0x7f00000003c0)=""/251}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 22:22:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) [ 577.817701][ T24] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 577.838615][ T24] usb 3-1: USB disconnect, device number 113 22:22:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:22:44 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "a8912ab876f46d56df39b81edabbb43cd22fa7a7529cf06ab55d0fce0d7b07b7", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) 22:22:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/208, &(0x7f00000003c0)=""/251}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 22:22:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) 22:22:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 578.901441][ T5075] usb 2-1: USB disconnect, device number 72 22:22:44 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "a8912ab876f46d56df39b81edabbb43cd22fa7a7529cf06ab55d0fce0d7b07b7", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, 0x0) 22:22:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/208, &(0x7f00000003c0)=""/251}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) [ 579.068424][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 579.068442][ T28] audit: type=1804 audit(1706998964.544:384): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/596/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:22:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) [ 579.107859][ T28] audit: type=1804 audit(1706998964.554:385): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/596/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 22:22:44 executing program 4: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "1eb806"}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "c54d6ad710"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 22:22:44 executing program 0: bpf$OBJ_GET_PROG(0x11, &(0x7f0000000580)=@generic={0x0, 0x0, 0x18}, 0x18) 22:22:44 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1d, &(0x7f0000001640), 0x48) [ 579.257459][ T784] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 579.320831][ T28] audit: type=1804 audit(1706998964.804:386): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/597/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:22:44 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x15, r0, 0xffffffffffffffff) 22:22:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) [ 579.362429][ T28] audit: type=1804 audit(1706998964.804:387): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/597/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:22:44 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "a8912ab876f46d56df39b81edabbb43cd22fa7a7529cf06ab55d0fce0d7b07b7", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) [ 579.417527][ T5075] usb 2-1: new high-speed USB device number 73 using dummy_hcd 22:22:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) [ 579.517744][ T7] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 579.578365][ T28] audit: type=1804 audit(1706998965.054:388): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/598/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 22:22:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) 22:22:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 579.612686][ T28] audit: type=1804 audit(1706998965.064:389): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/598/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 579.639709][ T784] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 579.656783][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.672591][ T784] usb 3-1: config 0 descriptor?? [ 579.769850][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 579.827704][ T5075] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 579.842581][ T5075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.861213][ T5075] usb 2-1: config 0 descriptor?? [ 579.897580][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.912276][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.936439][ T28] audit: type=1804 audit(1706998965.414:390): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/599/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 579.963949][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 579.974785][ T28] audit: type=1804 audit(1706998965.464:391): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/599/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 22:22:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) [ 580.137679][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.153087][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.161637][ T7] usb 5-1: Product: syz [ 580.167117][ T7] usb 5-1: Manufacturer: syz [ 580.172423][ T7] usb 5-1: SerialNumber: syz [ 580.177711][ T784] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 580.296936][ T28] audit: type=1804 audit(1706998965.774:392): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/600/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 580.347710][ T28] audit: type=1804 audit(1706998965.804:393): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2730742207/syzkaller.Q0hoaM/600/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 580.387560][ T5075] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) 22:22:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x0) [ 580.399661][ T5075] gs_usb: probe of 2-1:0.0 failed with error -32 [ 580.550030][ T7] usb 5-1: USB disconnect, device number 81 22:22:46 executing program 0: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "1eb806"}, @extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "c54d6a"}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x8f, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 580.618984][ T784] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 580.623027][T10210] udevd[10210]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.674138][ T784] usb 3-1: USB disconnect, device number 114 22:22:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x0) 22:22:46 executing program 4: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "1eb806"}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "c54d6ad710"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 581.017914][ T5075] usb 1-1: new high-speed USB device number 80 using dummy_hcd 22:22:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x94, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @assoc_resp={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}, [{0xdd, 0x6, "fee0adb88ee2"}, {0xdd, 0x6, "3d99bcae612f"}, {0xdd, 0x1b, "5eb71940cffba7f2a11cf4e47e61fc97ef990ebb60511f5c5857df"}]}}]}, 0x94}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x0) 22:22:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x4, "25eb1917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 581.297788][ T5075] usb 1-1: Using ep0 maxpacket: 32 [ 581.303224][ T5156] usb 5-1: new high-speed USB device number 82 using dummy_hcd 22:22:46 executing program 3: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "1eb806"}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "c54d6ad710"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 581.437903][ T5075] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.448822][ T5075] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.457620][ T5223] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 581.463892][ T5075] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 581.577659][ T5156] usb 5-1: Using ep0 maxpacket: 32 [ 581.677620][ T5075] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.687004][ T5075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.703400][ T5075] usb 1-1: Product: syz [ 581.709213][ T5075] usb 1-1: Manufacturer: syz [ 581.713977][ T5075] usb 1-1: SerialNumber: syz [ 581.727667][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.737594][ T5156] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.748597][ T5156] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 581.777790][ T784] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 581.838042][ T5223] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 581.847158][ T5223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.858014][ T5223] usb 3-1: config 0 descriptor?? [ 581.927716][ T5156] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.939071][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.947379][ T5156] usb 5-1: Product: syz [ 581.951837][ T5156] usb 5-1: Manufacturer: syz [ 581.956588][ T5156] usb 5-1: SerialNumber: syz 22:22:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x28, "7510e8ee4716ccbd097238b8ef0311aaf86af07e143168d6475fdc04f2c262d5f9b86acc2adbc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 581.992353][ T24] usb 2-1: USB disconnect, device number 73 [ 582.019030][ T784] usb 4-1: Using ep0 maxpacket: 32 [ 582.092683][ T5075] usb 1-1: USB disconnect, device number 80 [ 582.147752][ T784] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.157755][ T784] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.168860][ T784] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.337805][ T5223] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 582.341725][ T5156] usb 5-1: USB disconnect, device number 82 [ 582.347536][ T784] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.365820][ T784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.391927][ T784] usb 4-1: Product: syz [ 582.406441][ T784] usb 4-1: Manufacturer: syz [ 582.432974][T10210] udevd[10210]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 582.453307][ T784] usb 4-1: SerialNumber: syz [ 582.458419][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd 22:22:48 executing program 0: socketpair(0x1, 0x0, 0x401, &(0x7f0000000100)) 22:22:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x9}) 22:22:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000080)=0x9c) 22:22:48 executing program 4: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "1eb806"}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "c54d6ad710"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 582.767598][ T5223] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 582.804732][ T5223] usb 3-1: USB disconnect, device number 115 [ 582.838273][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 582.863956][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.893190][ T24] usb 2-1: config 0 descriptor?? [ 582.902630][ T784] usb 4-1: USB disconnect, device number 3 [ 582.974796][T10210] udevd[10210]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 22:22:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="403013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x28, "3f5ec514edde5ec5d690f6b6ee265d0013bb16b465d5308da7ae9176cd1ceae0166e472f7b3e4a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 583.227605][ T7] usb 5-1: new high-speed USB device number 83 using dummy_hcd 22:22:48 executing program 3: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "1eb806"}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "c54d6ad710"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 583.380915][ T24] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 583.388112][ T24] gs_usb: probe of 2-1:0.0 failed with error -32 22:22:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000080)=0x9c) [ 583.467448][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 583.588367][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 583.598998][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.608083][ T5156] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 583.624966][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 583.627855][ T5075] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 583.678159][ T29] INFO: task kworker/u4:5:132 blocked for more than 143 seconds. [ 583.686203][ T29] Not tainted 6.8.0-rc2-next-20240202-syzkaller #0 [ 583.701910][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.716747][ T29] task:kworker/u4:5 state:D stack:21232 pid:132 tgid:132 ppid:2 flags:0x00004000 [ 583.727454][ T29] Workqueue: netns cleanup_net [ 583.732518][ T29] Call Trace: [ 583.735833][ T29] [ 583.739706][ T29] __schedule+0x17df/0x4a40 [ 583.744534][ T29] ? __pfx___schedule+0x10/0x10 [ 583.751112][ T29] ? __pfx_lock_release+0x10/0x10 [ 583.756421][ T29] ? __lock_acquire+0x1346/0x1fd0 [ 583.763923][ T29] ? kthread_data+0x52/0xd0 [ 583.769100][ T29] ? wq_worker_sleeping+0x66/0x240 [ 583.774456][ T29] ? schedule+0x90/0x320 [ 583.779728][ T29] schedule+0x14b/0x320 [ 583.784042][ T29] schedule_timeout+0xb0/0x310 [ 583.791546][ T29] ? __pfx_schedule_timeout+0x10/0x10 [ 583.797030][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.803310][ T29] ? wait_for_completion+0x2fe/0x620 [ 583.807579][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.808829][ T29] ? wait_for_completion+0x2fe/0x620 [ 583.824114][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.828081][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.832949][ T7] usb 5-1: Product: syz [ 583.840206][ T29] ? lockdep_hardirqs_on+0x99/0x150 [ 583.842676][ T7] usb 5-1: Manufacturer: syz [ 583.853176][ T29] ? wait_for_completion+0x2fe/0x620 [ 583.854634][ T7] usb 5-1: SerialNumber: syz [ 583.860603][ T29] wait_for_completion+0x355/0x620 [ 583.871961][ T29] ? __pfx_wait_for_completion+0x10/0x10 [ 583.880678][ T29] ? flush_workqueue_prep_pwqs+0x459/0x4c0 [ 583.886635][ T29] ? check_flush_dependency+0xb2/0x390 [ 583.895475][ T29] __flush_workqueue+0x730/0x1630 [ 583.903475][ T5075] usb 4-1: Using ep0 maxpacket: 32 [ 583.914349][ T29] ? __pfx___flush_workqueue+0x10/0x10 [ 583.920863][ T29] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.930358][ T29] drain_workqueue+0xc9/0x390 [ 583.935968][ T29] destroy_workqueue+0xba/0xc40 [ 583.946151][ T29] ? kobject_put+0x3fd/0x430 [ 583.950992][ T29] bond_destructor+0x4d/0x80 [ 583.958165][ T29] ? __pfx_bond_destructor+0x10/0x10 [ 583.963607][ T29] netdev_run_todo+0xd4f/0xf40 [ 583.968608][ T29] ? __pfx_netdev_run_todo+0x10/0x10 [ 583.974024][ T29] ? unregister_netdevice_queue+0x26b/0x370 [ 583.980712][ T29] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 583.987090][ T29] ? br_dev_delete+0xd4/0x100 [ 583.992032][ T29] default_device_exit_batch+0x975/0x9f0 [ 583.998531][ T29] ? __pfx___might_resched+0x10/0x10 [ 584.003952][ T29] ? __pfx_default_device_exit_batch+0x10/0x10 [ 584.012960][ T29] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 584.019590][ T5156] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 584.029007][ T29] ? cfg802154_pernet_exit+0xc3/0xe0 [ 584.034496][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.042950][ T5075] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 584.052824][ T29] ? __pfx_default_device_exit_batch+0x10/0x10 [ 584.063505][ T5075] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.076269][ T29] cleanup_net+0x775/0xb90 [ 584.085816][ T5156] usb 3-1: config 0 descriptor?? [ 584.091002][ T29] ? __pfx_cleanup_net+0x10/0x10 [ 584.096242][ T29] ? process_scheduled_works+0x825/0x14f0 [ 584.102221][ T5075] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 584.113328][ T29] process_scheduled_works+0x913/0x14f0 [ 584.122324][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.133200][ T29] ? assign_work+0x364/0x3d0 [ 584.138239][ T29] worker_thread+0xa60/0x1000 [ 584.143096][ T29] ? __pfx_worker_thread+0x10/0x10 [ 584.148484][ T29] kthread+0x2f0/0x390 [ 584.152656][ T29] ? __pfx_worker_thread+0x10/0x10 [ 584.159250][ T29] ? __pfx_kthread+0x10/0x10 [ 584.163994][ T29] ret_from_fork+0x4b/0x80 [ 584.168779][ T29] ? __pfx_kthread+0x10/0x10 [ 584.173595][ T29] ret_from_fork_asm+0x1a/0x30 [ 584.178905][ T29] [ 584.182289][ T29] [ 584.182289][ T29] Showing all locks held in the system: [ 584.190968][ T29] 7 locks held by kworker/0:0/7: [ 584.196051][ T29] #0: ffff88801cadb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.208377][ T29] #1: ffffc900000c7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.231058][ T29] #2: ffff888023a3d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 584.244418][ T29] #3: ffff88806d0d3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 584.254224][ T29] #4: ffff888022bec160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 584.265372][ T29] #5: ffff8880b943c758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 584.268126][ T7] usb 5-1: USB disconnect, device number 83 [ 584.275882][ T29] #6: ffffffff8e130ce0 (rcu_read_lock_sched){....}-{1:2}, at: __virt_addr_valid+0x183/0x520 [ 584.297604][ T5075] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.318842][ T29] 1 lock held by khungtaskd/29: [ 584.325066][ T5075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.346187][ T29] #0: ffffffff8e130d60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 584.358956][T10210] udevd[10210]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.368840][ T5075] usb 4-1: Product: syz [ 584.389022][ T29] 3 locks held by kworker/u4:5/132: 22:22:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000080)=0x9c) [ 584.399198][ T5075] usb 4-1: Manufacturer: syz [ 584.406473][ T29] #0: ffff888015acd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.423029][ T5075] usb 4-1: SerialNumber: syz [ 584.435694][ T29] #1: ffffc90002d57d20 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.457496][ T29] #2: ffffffff8f36da50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf5/0xb90 [ 584.474321][ T29] 2 locks held by getty/4829: [ 584.491300][ T29] #0: ffff88802a87d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 584.501392][ T29] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 584.512158][ T29] 6 locks held by kworker/1:3/5075: [ 584.517562][ T29] #0: ffff88801cadb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.531167][ T29] #1: ffffc900020dfd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.545314][ T29] #2: ffff888023a1d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 584.554656][ T29] #3: ffff88807af68190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 584.564328][ T29] #4: ffff888022f97160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 584.567731][ T5156] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 584.574931][ T29] #5: ffffffff8f30e6a8 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x417/0x2100 [ 584.607929][ T29] 5 locks held by kworker/1:4/5156: [ 584.613320][ T29] #0: ffff88801cadb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.624946][ T29] #1: ffffc90004237d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x14f0 [ 584.639613][ T29] #2: ffff888023985190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 584.648990][ T29] #3: ffff88807af6c190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 584.658628][ T29] #4: ffff888022dde160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 584.671087][ T29] 4 locks held by udevd/10183: [ 584.676149][ T29] #0: ffff88803be87540 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 584.701381][ T29] #1: ffff8880364e4c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 22:22:50 executing program 4: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "1eb806"}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "c54d6ad710"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 584.733976][ T29] #2: ffff888069140c38 (kn->active#25){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 584.760902][ T29] #3: ffff88807af68190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 584.782287][ T29] 2 locks held by syz-executor.0/13586: [ 584.791190][ T29] #0: ffff88807f106430 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xbb9/0x3520 [ 584.808442][ T29] #1: ffff8880b953c758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 584.818810][ T29] 1 lock held by syz-executor.0/13587: [ 584.824729][ T29] #0: ffff88807f106430 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_getsockopt+0x13a/0xbb0 [ 584.843138][ T29] [ 584.846773][ T29] ============================================= [ 584.846773][ T29] [ 584.860941][ T29] NMI backtrace for cpu 0 [ 584.865315][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc2-next-20240202-syzkaller #0 [ 584.874707][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 584.884804][ T29] Call Trace: [ 584.888124][ T29] [ 584.891085][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 584.895900][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.901144][ T29] ? __pfx__printk+0x10/0x10 [ 584.903403][ T5075] usb 4-1: USB disconnect, device number 4 [ 584.905808][ T29] ? vprintk_emit+0x608/0x720 [ 584.905860][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 584.921421][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 584.926433][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 584.931908][ T29] ? _printk+0xd5/0x120 [ 584.936084][ T29] ? __pfx__printk+0x10/0x10 [ 584.940699][ T29] ? __wake_up_klogd+0xcc/0x110 [ 584.945569][ T29] ? __pfx__printk+0x10/0x10 [ 584.950177][ T29] ? __rcu_read_unlock+0xa1/0x110 [ 584.955212][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 584.961224][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 584.967235][ T29] watchdog+0xfb0/0xff0 [ 584.971505][ T29] ? watchdog+0x1ea/0xff0 [ 584.975858][ T29] ? __pfx_watchdog+0x10/0x10 [ 584.980551][ T29] kthread+0x2f0/0x390 [ 584.984637][ T29] ? __pfx_watchdog+0x10/0x10 [ 584.989411][ T29] ? __pfx_kthread+0x10/0x10 [ 584.994013][ T29] ret_from_fork+0x4b/0x80 [ 584.998448][ T29] ? __pfx_kthread+0x10/0x10 [ 585.003055][ T29] ret_from_fork_asm+0x1a/0x30 [ 585.007855][ T29] [ 585.012513][ T29] Sending NMI from CPU 0 to CPUs 1: [ 585.018271][ C1] NMI backtrace for cpu 1 [ 585.018283][ C1] CPU: 1 PID: 4520 Comm: udevd Not tainted 6.8.0-rc2-next-20240202-syzkaller #0 [ 585.018300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 585.018310][ C1] RIP: 0010:__lock_acquire+0xc3c/0x1fd0 [ 585.018333][ C1] Code: 48 c7 c0 c0 b3 49 94 48 c1 e8 03 48 bf 00 00 00 00 00 fc ff df 0f b6 04 38 84 c0 0f 85 aa 0c 00 00 83 3d d6 30 d8 12 00 75 39 <48> 63 9c 24 88 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 34 ca [ 585.018347][ C1] RSP: 0018:ffffc90003517190 EFLAGS: 00000046 [ 585.018362][ C1] RAX: 0000000000000004 RBX: ffffffff9299b9a8 RCX: ffffffff9449b303 [ 585.018375][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 585.018385][ C1] RBP: ffff888068ad0b00 R08: ffffffff92ca3427 R09: 1ffffffff2594684 [ 585.018398][ C1] R10: dffffc0000000000 R11: fffffbfff2594685 R12: 0000000000000001 [ 585.018410][ C1] R13: ffff888068ad0000 R14: 1ffff1100d15a164 R15: ffff888068ad0b20 [ 585.018423][ C1] FS: 00007f67e9f93c80(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 585.018438][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.018449][ C1] CR2: 00007f08e0359070 CR3: 0000000068818000 CR4: 00000000003506f0 [ 585.018463][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.018473][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.018483][ C1] Call Trace: [ 585.018488][ C1] [ 585.018494][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 585.018515][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 585.018532][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 585.018559][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 585.018581][ C1] ? nmi_handle+0x14f/0x580 [ 585.018621][ C1] ? nmi_handle+0x2a/0x580 [ 585.018638][ C1] ? __lock_acquire+0xc3c/0x1fd0 [ 585.018653][ C1] ? default_do_nmi+0x63/0x160 [ 585.018672][ C1] ? exc_nmi+0x121/0x210 [ 585.018691][ C1] ? end_repeat_nmi+0xf/0x53 [ 585.018765][ C1] ? __lock_acquire+0xc3c/0x1fd0 [ 585.018781][ C1] ? __lock_acquire+0xc3c/0x1fd0 [ 585.018798][ C1] ? __lock_acquire+0xc3c/0x1fd0 [ 585.018813][ C1] [ 585.018818][ C1] [ 585.018831][ C1] lock_acquire+0x1e4/0x530 [ 585.018846][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 585.018891][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 585.018909][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 585.018938][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 585.018970][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 585.018996][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 585.019017][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 585.019047][ C1] debug_check_no_obj_freed+0x234/0x580 [ 585.019075][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 585.019099][ C1] ? page_ext_get+0x1d6/0x2a0 [ 585.019135][ C1] free_unref_page_prepare+0x319/0xa90 [ 585.019167][ C1] free_unref_page+0x37/0x3f0 [ 585.019192][ C1] __put_partials+0xeb/0x130 [ 585.019215][ C1] put_cpu_partial+0x17c/0x250 [ 585.019233][ C1] ? put_cpu_partial+0x70/0x250 [ 585.019253][ C1] __slab_free+0x2e8/0x3d0 [ 585.019276][ C1] qlist_free_all+0x5e/0xc0 [ 585.019300][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 585.019320][ C1] __kasan_slab_alloc+0x23/0x80 [ 585.019339][ C1] kmem_cache_alloc_node+0x192/0x380 [ 585.019363][ C1] ? __alloc_skb+0x181/0x420 [ 585.019408][ C1] __alloc_skb+0x181/0x420 [ 585.019427][ C1] ? apparmor_capable+0x138/0x1b0 [ 585.019464][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 585.019485][ C1] ? ns_capable+0x8a/0xf0 [ 585.019505][ C1] netlink_sendmsg+0x6fd/0xd70 [ 585.019591][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.019612][ C1] ? __import_iovec+0x361/0x890 [ 585.019634][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 585.019657][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 585.019683][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 585.019707][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.019726][ C1] __sock_sendmsg+0x221/0x270 [ 585.019775][ C1] ____sys_sendmsg+0x525/0x7d0 [ 585.019803][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.019834][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 585.019859][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 585.019895][ C1] ? restore_fpregs_from_fpstate+0x100/0x250 [ 585.019922][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 585.019950][ C1] ? do_syscall_64+0x10a/0x240 [ 585.019979][ C1] ? do_syscall_64+0xb6/0x240 [ 585.020006][ C1] do_syscall_64+0xfb/0x240 [ 585.020034][ C1] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 585.020051][ C1] RIP: 0033:0x7f67e9b24a4b [ 585.020066][ C1] Code: ff 89 ef 48 89 04 24 e8 22 56 f9 ff 48 8b 04 24 48 83 c4 20 5d c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6d 48 8b 15 ae c3 0c 00 f7 d8 64 89 02 48 83 [ 585.020080][ C1] RSP: 002b:00007ffd61625798 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.020098][ C1] RAX: ffffffffffffffda RBX: 0000556ef28bcdf0 RCX: 00007f67e9b24a4b [ 585.020111][ C1] RDX: 0000000000000000 RSI: 00007ffd616257a8 RDI: 0000000000000004 [ 585.020122][ C1] RBP: 0000556ef28e6f00 R08: 0000000000000001 R09: 0000000000000000 [ 585.020133][ C1] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 585.020144][ C1] R13: 00000000000000f8 R14: 0000000000000000 R15: 0000000000000000 [ 585.020162][ C1] [ 585.584960][ T44] usb 2-1: USB disconnect, device number 74 [ 585.594033][ T5156] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 585.616461][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 585.623359][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc2-next-20240202-syzkaller #0 [ 585.632691][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 585.642785][ T29] Call Trace: [ 585.646085][ T29] [ 585.649026][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 585.653730][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.658948][ T29] ? __pfx__printk+0x10/0x10 [ 585.663559][ T29] ? vscnprintf+0x5d/0x90 [ 585.667927][ T29] panic+0x349/0x860 [ 585.671862][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 585.678056][ T29] ? __pfx_panic+0x10/0x10 [ 585.682485][ T29] ? tick_nohz_tick_stopped+0x7b/0xc0 [ 585.687889][ T29] ? __irq_work_queue_local+0x137/0x3e0 [ 585.693496][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 585.698892][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 585.705160][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 585.711351][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 585.717625][ T29] watchdog+0xfef/0xff0 [ 585.721884][ T29] ? watchdog+0x1ea/0xff0 [ 585.726229][ T29] ? __pfx_watchdog+0x10/0x10 [ 585.730916][ T29] kthread+0x2f0/0x390 [ 585.734999][ T29] ? __pfx_watchdog+0x10/0x10 [ 585.739693][ T29] ? __pfx_kthread+0x10/0x10 [ 585.744295][ T29] ret_from_fork+0x4b/0x80 [ 585.748726][ T29] ? __pfx_kthread+0x10/0x10 [ 585.753414][ T29] ret_from_fork_asm+0x1a/0x30 [ 585.758214][ T29] [ 585.761584][ T29] Kernel Offset: disabled [ 585.765938][ T29] Rebooting in 86400 seconds..