Creating new IBSS network, BSSID 50:50:50:50:50:50 18:27:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0xb7a1c3a31c0bd73e, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 18:27:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, 0x0) [ 366.626099][ T2673] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 366.866166][ T2673] usb 7-1: Using ep0 maxpacket: 8 [ 366.999166][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.003449][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 367.007115][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 367.011640][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 367.015827][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 367.019991][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.036294][T12799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 367.057555][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 367.060320][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 367.063562][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 367.065530][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 367.068896][ T2673] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 367.071095][ T2673] cdc_wdm 7-1:1.0: Unknown control protocol [ 368.049780][T12799] usb 7-1: reset high-speed USB device number 29 using dummy_hcd [ 368.386465][T12812] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.742005][ T32] usb 7-1: USB disconnect, device number 29 18:27:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:27:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0xb7a1c3a31c0bd73e, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 18:27:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000340)) 18:27:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 372.930870][ T37] audit: type=1804 audit(1698431257.070:754): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/574/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 372.943546][ T37] audit: type=1804 audit(1698431257.070:755): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/574/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 372.973711][ T1093] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 372.980682][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.983666][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:27:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000340)) 18:27:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 18:27:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000340)) 18:27:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) [ 373.156401][ T812] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 373.426120][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 373.546253][ T812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.550528][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.554128][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 373.561303][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 373.566600][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 373.571242][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.596380][T12822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.617980][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 373.620591][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 373.623932][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 373.626711][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 373.631509][ T812] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 373.634561][ T812] cdc_wdm 7-1:1.0: Unknown control protocol [ 374.606935][T12822] usb 7-1: reset high-speed USB device number 30 using dummy_hcd [ 374.946472][T12842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 375.189749][ T5224] usb 7-1: USB disconnect, device number 30 18:27:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:27:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:27:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 18:27:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000030000001400060073797a6b616c6c6572300000000000002a00070073797374656d5f753a6f626a6563745f725a7363616e6e65725f6465766963655f743a733000000008000400e00000011400030000000000000000000000000000000001140002"], 0x84}}, 0x0) 18:27:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mlock2(&(0x7f000024a000/0x1000)=nil, 0x1000, 0x1) 18:27:39 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000180)=""/129, 0xfffffffffffffc2c) 18:27:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) [ 375.815286][ T37] audit: type=1804 audit(1698431259.950:756): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/575/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 18:27:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0xfe9b}, 0x2}, 0x0) [ 375.825364][ T37] audit: type=1804 audit(1698431259.950:757): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/575/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 18:27:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x7c}}, 0x0) [ 375.888897][ T148] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 375.901629][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.906771][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.036185][ T812] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 376.286089][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 376.416123][ T812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.419939][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 376.423106][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 376.427523][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 376.432517][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 376.436613][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.456334][T12851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 376.488168][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 376.490596][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 376.494974][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 376.497272][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 376.500509][ T812] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 376.502863][ T812] cdc_wdm 7-1:1.0: Unknown control protocol 18:27:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 376.724510][ T37] audit: type=1804 audit(1698431260.860:758): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/576/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 376.734105][ T37] audit: type=1804 audit(1698431260.860:759): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/576/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 376.776103][ T1141] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 376.782389][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.785622][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.503299][T12851] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 377.856333][T12868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.119538][ T59] usb 7-1: USB disconnect, device number 31 18:27:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:27:42 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x10, r0, 0x0) 18:27:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 18:27:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 378.670028][ T37] audit: type=1400 audit(1698431262.810:760): avc: denied { read } for pid=12869 comm="syz-executor.0" name="usbmon0" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 378.679945][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.680003][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.695092][ T37] audit: type=1400 audit(1698431262.810:761): avc: denied { open } for pid=12869 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 378.705005][ T37] audit: type=1400 audit(1698431262.830:762): avc: denied { map } for pid=12869 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 378.716032][ T37] audit: type=1400 audit(1698431262.830:763): avc: denied { execute } for pid=12869 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 18:27:42 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x0, 0x0) 18:27:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e00000008002d800400038008000300", @ANYRES32=0x0, @ANYBLOB='\f\x00\an'], 0x30}}, 0x0) [ 378.740944][ T37] audit: type=1804 audit(1698431262.880:764): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/577/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 18:27:42 executing program 0: r0 = syz_io_uring_setup(0x50ae, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0xa, &(0x7f00000015c0), 0x0) [ 378.750904][ T37] audit: type=1804 audit(1698431262.880:765): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/577/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 18:27:42 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x802) [ 378.793557][ T1141] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 378.804597][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.808764][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.966333][ T8] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 379.216148][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 379.356109][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.360380][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 379.364257][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 379.369210][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 379.373698][ T8] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 379.378387][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.396411][T12876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.417536][ T8] hub 7-1:1.0: bad descriptor, ignoring hub [ 379.419967][ T8] hub: probe of 7-1:1.0 failed with error -5 [ 379.422662][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 379.424949][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 379.428579][ T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 379.431194][ T8] cdc_wdm 7-1:1.0: Unknown control protocol [ 380.257848][T12876] usb 7-1: reset high-speed USB device number 32 using dummy_hcd [ 380.596393][T12887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.053964][ T32] usb 7-1: USB disconnect, device number 32 18:27:49 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:27:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 18:27:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, r1, 0x21, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4, 0x2}]}, 0x18}}, 0x0) 18:27:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 385.076484][T12891] validate_nla: 780 callbacks suppressed [ 385.076495][T12891] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 18:27:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x1c5002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) [ 385.104274][ T37] audit: type=1400 audit(1698431269.240:766): avc: denied { map } for pid=12899 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 18:27:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0xfffffffd, 0x8000}) 18:27:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x21, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) [ 385.157325][ T37] audit: type=1804 audit(1698431269.300:767): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/578/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 18:27:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), &(0x7f0000002c80)) [ 385.167558][ T37] audit: type=1804 audit(1698431269.300:768): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/578/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 385.210037][ T1141] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 385.217264][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.220330][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.366116][ T32] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 385.636022][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 385.786170][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.789941][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 385.793462][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 385.797876][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 385.802404][ T32] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 385.806496][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.826346][T12896] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.847275][ T32] hub 7-1:1.0: bad descriptor, ignoring hub [ 385.849974][ T32] hub: probe of 7-1:1.0 failed with error -5 [ 385.853589][ T32] cdc_wdm 7-1:1.0: skipping garbage [ 385.855859][ T32] cdc_wdm 7-1:1.0: skipping garbage [ 385.859752][ T32] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 385.862616][ T32] cdc_wdm 7-1:1.0: Unknown control protocol [ 386.696781][T12896] usb 7-1: reset high-speed USB device number 33 using dummy_hcd [ 387.086465][T12913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 387.429984][ T32] usb 7-1: USB disconnect, device number 33 18:27:55 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:27:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0xb7a1c3a31c0bd73e, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 18:27:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), &(0x7f0000002c80)) 18:27:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 391.613794][ T37] audit: type=1804 audit(1698431275.750:769): pid=12921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/579/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 18:27:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), &(0x7f0000002c80)) [ 391.623978][ T37] audit: type=1804 audit(1698431275.750:770): pid=12921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/579/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 391.657133][T12911] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:27:55 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x40302) read$ptp(r0, 0x0, 0x0) [ 391.668924][T12911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.671884][T12911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:27:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) 18:27:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 391.826120][ T886] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 392.066159][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 392.196110][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.200772][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.204148][ T886] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 392.208384][ T886] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 392.212521][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 392.216126][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.236296][T12920] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.259458][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 392.262144][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 392.265225][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 392.267555][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 392.271452][ T886] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 392.274140][ T886] cdc_wdm 7-1:1.0: Unknown control protocol [ 393.078431][T12920] usb 7-1: reset high-speed USB device number 34 using dummy_hcd [ 393.416403][T12936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 393.756163][ T32] usb 7-1: USB disconnect, device number 34 18:27:58 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:27:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), &(0x7f0000002c80)) 18:27:58 executing program 3: sched_setparam(0x0, &(0x7f00000002c0)=0xa3) 18:27:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:27:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002780), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x38}]}, 0x1c}}, 0x0) 18:27:58 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffff7ffffff24d, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x5460, 0x0) 18:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x21, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x10}]}]}, 0x28}}, 0x0) 18:27:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 394.365309][ T37] audit: type=1804 audit(1698431278.500:771): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/580/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 394.386065][ T37] audit: type=1804 audit(1698431278.500:772): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/580/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 394.420534][T12910] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 394.433020][T12911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.437830][T12911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.966105][ T32] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 395.168036][ T32] usb 7-1: device descriptor read/64, error -71 [ 395.436154][ T32] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 395.626050][ T32] usb 7-1: device descriptor read/64, error -71 [ 395.757831][ T32] usb usb7-port1: attempt power cycle [ 396.176063][ T32] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 396.266125][ T32] usb 7-1: device descriptor read/8, error -71 [ 396.546003][ T32] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 396.636170][ T32] usb 7-1: device descriptor read/8, error -71 [ 396.757874][ T32] usb usb7-port1: unable to enumerate USB device 18:28:01 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:01 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xa, 0x0, 0x0) 18:28:01 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002780), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 18:28:01 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002780), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x2c}}, 0x0) [ 397.375470][ T37] audit: type=1804 audit(1698431281.510:773): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/581/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 18:28:01 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) [ 397.392917][ T37] audit: type=1804 audit(1698431281.530:774): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/581/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 397.413553][ T37] audit: type=1400 audit(1698431281.550:775): avc: denied { map } for pid=12969 comm="syz-executor.3" path="/dev/vsock" dev="devtmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 397.443553][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 397.450878][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.454102][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.986045][ T5211] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 398.189267][ T5211] usb 7-1: device descriptor read/64, error -71 [ 398.458720][ T5211] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 398.646076][ T5211] usb 7-1: device descriptor read/64, error -71 [ 398.766140][ T5211] usb usb7-port1: attempt power cycle [ 399.186124][ T5211] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 399.296158][ T5211] usb 7-1: device descriptor read/8, error -71 [ 399.566030][ T5211] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 399.656132][ T5211] usb 7-1: device descriptor read/8, error -71 [ 399.778521][ T5211] usb usb7-port1: unable to enumerate USB device 18:28:04 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x2b}, 0x0) 18:28:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @mcast2}]}, 0x80}}, 0x0) 18:28:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 400.356999][T12980] __nla_validate_parse: 722 callbacks suppressed [ 400.357009][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 18:28:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x213}, 0x14}}, 0x0) 18:28:04 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0x22, 0x0, 0x0) [ 400.391966][ T37] audit: type=1804 audit(1698431284.530:776): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/582/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 400.413610][ T37] audit: type=1804 audit(1698431284.530:777): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/582/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 400.451799][ T86] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 400.459375][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.462518][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.006177][ T886] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 401.196034][ T886] usb 7-1: device descriptor read/64, error -71 [ 401.468735][ T886] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 401.656107][ T886] usb 7-1: device descriptor read/64, error -71 [ 401.776143][ T886] usb usb7-port1: attempt power cycle [ 402.186121][ T886] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 402.276201][ T886] usb 7-1: device descriptor read/8, error -71 [ 402.548184][ T886] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 402.636097][ T886] usb 7-1: device descriptor read/8, error -71 [ 402.757836][ T886] usb usb7-port1: unable to enumerate USB device 18:28:07 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:07 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:07 executing program 3: sigaltstack(&(0x7f0000ffe000), 0x0) pipe2(&(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 18:28:07 executing program 3: sigaltstack(&(0x7f0000ffe000), 0x0) pipe2(&(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 18:28:07 executing program 3: sigaltstack(&(0x7f0000ffe000), 0x0) pipe2(&(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 18:28:07 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:07 executing program 3: sigaltstack(&(0x7f0000ffe000), 0x0) pipe2(&(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) [ 403.410402][ T37] audit: type=1804 audit(1698431287.550:778): pid=12991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/583/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 403.420867][ T37] audit: type=1804 audit(1698431287.550:779): pid=12991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/583/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 18:28:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 403.451472][T13009] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 403.471242][T13009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.474097][T13009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.046169][ T59] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 404.236132][ T59] usb 7-1: device descriptor read/64, error -71 [ 404.516122][ T59] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 404.706104][ T59] usb 7-1: device descriptor read/64, error -71 [ 404.827084][ T59] usb usb7-port1: attempt power cycle [ 405.244223][ T59] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 405.338512][ T59] usb 7-1: device descriptor read/8, error -71 [ 405.616003][ T59] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 405.716172][ T59] usb 7-1: device descriptor read/8, error -71 [ 405.836202][ T59] usb usb7-port1: unable to enumerate USB device 18:28:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:10 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockname(r2, &(0x7f00000022c0)=@sco={0x1f, @fixed}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) waitid(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000"], 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) 18:28:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:10 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 406.426142][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.429871][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.442063][ T37] audit: type=1804 audit(1698431290.580:780): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/584/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 406.451983][ T37] audit: type=1804 audit(1698431290.580:781): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/584/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 406.460087][T13021] wireguard1: entered promiscuous mode [ 406.463838][T13021] wireguard1: entered allmulticast mode [ 406.485442][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 406.494528][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:28:10 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 406.498414][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:28:10 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:10 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 407.047133][ T812] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 407.236316][ T812] usb 7-1: device descriptor read/64, error -71 [ 407.506046][ T812] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 407.696105][ T812] usb 7-1: device descriptor read/64, error -71 [ 407.817057][ T812] usb usb7-port1: attempt power cycle [ 408.226089][ T812] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 408.316123][ T812] usb 7-1: device descriptor read/8, error -71 [ 408.596896][ T812] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 408.688310][ T812] usb 7-1: device descriptor read/8, error -71 [ 408.806219][ T812] usb usb7-port1: unable to enumerate USB device 18:28:13 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:13 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:13 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@broadcast, @local, @val, {@ipv4}}, 0x0) 18:28:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:13 executing program 3: syz_emit_ethernet(0xfff, &(0x7f0000000140)={@local, @empty, @val, {@ipv6}}, 0x0) 18:28:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:28:13 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 409.462197][ T37] audit: type=1400 audit(1698431293.600:782): avc: denied { getopt } for pid=13045 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 18:28:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000280), 0x90) [ 409.551116][ T1141] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 409.557427][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.560999][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.096022][ T812] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 410.286010][ T812] usb 7-1: device descriptor read/64, error -71 [ 410.556102][ T812] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 410.746054][ T812] usb 7-1: device descriptor read/64, error -71 [ 410.868605][ T812] usb usb7-port1: attempt power cycle [ 411.286047][ T812] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 411.376110][ T812] usb 7-1: device descriptor read/8, error -71 [ 411.646034][ T812] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 411.736207][ T812] usb 7-1: device descriptor read/8, error -71 [ 411.856367][ T812] usb usb7-port1: unable to enumerate USB device 18:28:16 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@prinfo={0x14}], 0x14}, 0x0) 18:28:16 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x7) 18:28:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000440), &(0x7f0000000480)=0x8) 18:28:16 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x98) [ 412.533142][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 412.549021][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.552905][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.876033][ T27] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 413.136027][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 413.256426][ T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.259985][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.263087][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.266797][ T27] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 413.270738][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.307125][ T27] hub 7-1:1.0: bad descriptor, ignoring hub [ 413.309249][ T27] hub: probe of 7-1:1.0 failed with error -5 [ 413.311589][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 413.313437][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 413.315339][ T27] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 413.836209][ T5211] usb 7-1: USB disconnect, device number 59 [ 414.186117][ T5211] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 414.436056][ T5211] usb 7-1: Using ep0 maxpacket: 8 [ 414.576141][ T5211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.580347][ T5211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 414.583580][ T5211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.587952][ T5211] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 414.591167][ T5211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.638831][ T5211] hub 7-1:1.0: bad descriptor, ignoring hub [ 414.641329][ T5211] hub: probe of 7-1:1.0 failed with error -5 [ 414.644249][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 414.646589][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 414.649013][ T5211] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 414.956733][ T5211] usb 7-1: USB disconnect, device number 60 18:28:19 executing program 3: r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)=@in={0x10, 0x2}, 0x10) 18:28:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:19 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000002340)=[@dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}, @dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}, @sndinfo={0x1c}, @sndinfo={0x1c}, @sndinfo={0x1c}, @sndrcv={0x2c}], 0xac}, 0x0) 18:28:19 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:19 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000140)='\'', 0x1, 0x0, &(0x7f0000000000)={0x1c}, 0x1c) 18:28:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), 0x98) 18:28:19 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 415.495148][T13005] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 415.503349][T13005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.506575][T13005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.626055][ T812] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 415.867729][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 415.986214][ T812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.989967][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.993154][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.997924][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 416.001181][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.038018][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 416.040871][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 416.044024][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 416.047052][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 416.049567][ T812] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 416.557484][ T5211] usb 7-1: USB disconnect, device number 61 [ 416.906083][ T5211] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 417.146031][ T5211] usb 7-1: Using ep0 maxpacket: 8 [ 417.266087][ T5211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.270038][ T5211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.273351][ T5211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.277350][ T5211] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 417.280649][ T5211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.317486][ T5211] hub 7-1:1.0: bad descriptor, ignoring hub [ 417.320191][ T5211] hub: probe of 7-1:1.0 failed with error -5 [ 417.322883][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 417.324926][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 417.327537][ T5211] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 417.651259][ T5211] usb 7-1: USB disconnect, device number 62 18:28:22 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:22 executing program 3: r0 = timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, r1+10000000}}, 0x0) 18:28:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:22 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, "9776b20444620bb3d15555629b96ac9a779001"}) 18:28:22 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, "9776b20444620bb3d15555629b96ac9a779001"}) 18:28:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, "9776b20444620bb3d15555629b96ac9a779001"}) [ 418.124835][ T37] audit: type=1804 audit(1698431302.260:783): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/588/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 418.131091][ T52] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 418.149342][T13009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.153430][T13009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.336033][ T5211] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 418.576102][ T5211] usb 7-1: Using ep0 maxpacket: 8 [ 418.696189][ T5211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.700824][ T5211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.708390][ T5211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.712752][ T5211] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 418.716858][ T5211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.757623][ T5211] hub 7-1:1.0: bad descriptor, ignoring hub [ 418.760338][ T5211] hub: probe of 7-1:1.0 failed with error -5 [ 418.763369][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 418.765640][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 418.768202][ T5211] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 419.276194][ T8] usb 7-1: USB disconnect, device number 63 [ 419.628250][ T886] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 419.867928][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 419.986126][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.990264][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 419.993646][ T886] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.997180][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 420.000901][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.037129][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 420.039439][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 420.041754][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 420.043648][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 420.045506][ T886] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 420.361579][ T886] usb 7-1: USB disconnect, device number 64 18:28:24 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, "9776b20444620bb3d15555629b96ac9a779001"}) 18:28:24 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40802, 0x0) 18:28:24 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:24 executing program 0: syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:25 executing program 0: syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 420.861899][ T37] audit: type=1804 audit(1698431305.000:784): pid=13116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/589/cgroup.controllers" dev="sda1" ino=1938 res=1 errno=0 [ 420.877570][T12912] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:28:25 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 420.888307][T12912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.891539][T12912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:28:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 421.033168][ T37] audit: type=1804 audit(1698431305.170:785): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/590/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 421.035994][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 421.046471][ T812] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 421.066273][T13005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.069972][T13005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.246216][ T812] usb 7-1: device descriptor read/64, error -71 [ 421.516050][ T812] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 421.706069][ T812] usb 7-1: device descriptor read/64, error -71 [ 421.826274][ T812] usb usb7-port1: attempt power cycle [ 422.246165][ T812] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 422.347696][ T812] usb 7-1: device descriptor read/8, error -71 [ 422.616062][ T812] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 422.706145][ T812] usb 7-1: device descriptor read/8, error -71 [ 422.827385][ T812] usb usb7-port1: unable to enumerate USB device 18:28:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:27 executing program 0: syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:27 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:27 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:28 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 423.885772][ T37] audit: type=1804 audit(1698431308.020:786): pid=13138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/591/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 423.895291][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 423.903329][ T37] audit: type=1804 audit(1698431308.020:787): pid=13138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/591/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 423.917338][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.920612][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:28:28 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 424.061086][ T37] audit: type=1804 audit(1698431308.200:788): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/592/cgroup.controllers" dev="sda1" ino=1938 res=1 errno=0 [ 424.063705][T13009] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 424.071688][ T37] audit: type=1804 audit(1698431308.200:789): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/592/cgroup.controllers" dev="sda1" ino=1938 res=1 errno=0 [ 424.090336][T13009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.093872][T13009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.266207][ T886] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 424.466071][ T886] usb 7-1: device descriptor read/64, error -71 [ 424.736039][ T886] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 424.926117][ T886] usb 7-1: device descriptor read/64, error -71 [ 425.047851][ T886] usb usb7-port1: attempt power cycle [ 425.456099][ T886] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 425.546208][ T886] usb 7-1: device descriptor read/8, error -71 [ 425.816019][ T886] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 425.906271][ T886] usb 7-1: device descriptor read/8, error -71 [ 426.028925][ T886] usb usb7-port1: unable to enumerate USB device 18:28:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:30 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:30 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:31 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:31 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:31 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 426.912909][ T37] audit: type=1804 audit(1698431311.050:790): pid=13157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/593/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 426.917227][T13009] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 426.924705][ T37] audit: type=1804 audit(1698431311.050:791): pid=13157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/593/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 18:28:31 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 426.944806][T13009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.950188][T13009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.296025][ T812] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 427.486055][ T812] usb 7-1: device descriptor read/64, error -71 [ 427.756089][ T812] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 427.956167][ T812] usb 7-1: device descriptor read/64, error -71 [ 428.077426][ T812] usb usb7-port1: attempt power cycle [ 428.487940][ T812] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 428.576931][ T812] usb 7-1: device descriptor read/8, error -71 [ 428.846142][ T812] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 428.938137][ T812] usb 7-1: device descriptor read/8, error -71 [ 429.057398][ T812] usb usb7-port1: unable to enumerate USB device 18:28:33 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:33 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:33 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:34 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:34 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 429.935293][ T37] audit: type=1804 audit(1698431314.070:792): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/594/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 429.941581][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 429.946162][ T37] audit: type=1804 audit(1698431314.080:793): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/594/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 18:28:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 429.965221][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.970222][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.098528][ T37] audit: type=1804 audit(1698431314.240:794): pid=13189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/595/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 430.102099][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 430.110346][ T37] audit: type=1804 audit(1698431314.240:795): pid=13189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/595/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 430.138203][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.141673][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.226051][ T32] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 430.346022][ T5211] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 430.486038][ T32] usb 8-1: Using ep0 maxpacket: 8 [ 430.556033][ T5211] usb 7-1: device descriptor read/64, error -71 [ 430.606131][ T32] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.610155][ T32] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 430.613850][ T32] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 430.618454][ T32] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 430.622779][ T32] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 430.626686][ T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.646433][T13185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.667553][ T32] hub 8-1:1.0: bad descriptor, ignoring hub [ 430.670078][ T32] hub: probe of 8-1:1.0 failed with error -5 [ 430.672923][ T32] cdc_wdm 8-1:1.0: skipping garbage [ 430.675060][ T32] cdc_wdm 8-1:1.0: skipping garbage [ 430.680065][ T32] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 430.682552][ T32] cdc_wdm 8-1:1.0: Unknown control protocol [ 430.826095][ T5211] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 431.026006][ T5211] usb 7-1: device descriptor read/64, error -71 [ 431.146206][ T5211] usb usb7-port1: attempt power cycle [ 431.556134][ T5211] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 431.636903][T13185] usb 8-1: reset high-speed USB device number 16 using dummy_hcd [ 431.656165][ T5211] usb 7-1: device descriptor read/8, error -71 [ 431.926087][ T5211] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 431.978440][T13191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 432.016555][ T5211] usb 7-1: device descriptor read/8, error -71 [ 432.136336][ T5211] usb usb7-port1: unable to enumerate USB device [ 432.336595][ T2673] usb 8-1: USB disconnect, device number 16 18:28:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:37 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:37 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:37 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 432.944812][ T37] audit: type=1804 audit(1698431317.080:796): pid=13196 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/596/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 432.954991][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 432.955518][ T37] audit: type=1804 audit(1698431317.080:797): pid=13196 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/596/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 432.972695][T13165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.982412][T13165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.065651][ T37] audit: type=1400 audit(1698431317.200:798): avc: denied { search } for pid=13203 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.074403][ T37] audit: type=1400 audit(1698431317.210:799): avc: denied { read } for pid=13204 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.084806][ T37] audit: type=1400 audit(1698431317.210:800): avc: denied { open } for pid=13204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.096167][ T37] audit: type=1400 audit(1698431317.210:801): avc: denied { getattr } for pid=13204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.356043][ T27] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 433.546220][ T27] usb 7-1: device descriptor read/64, error -71 [ 433.816095][ T27] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 434.026231][ T27] usb 7-1: device descriptor read/64, error -71 [ 434.146505][ T27] usb usb7-port1: attempt power cycle [ 434.556045][ T27] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 434.646125][ T27] usb 7-1: device descriptor read/8, error -71 [ 434.926093][ T27] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 435.026128][ T27] usb 7-1: device descriptor read/8, error -71 [ 435.156285][ T27] usb usb7-port1: unable to enumerate USB device 18:28:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:40 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:40 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:40 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 436.594402][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 436.594411][ T37] audit: type=1804 audit(1698431320.730:811): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/597/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 436.610342][ T37] audit: type=1804 audit(1698431320.730:812): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/597/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:28:40 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:40 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 436.665145][ T37] audit: type=1804 audit(1698431320.800:813): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/814/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 436.673735][ T1093] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 436.680107][ T37] audit: type=1804 audit(1698431320.810:814): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/814/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 18:28:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 436.699551][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.703629][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:28:40 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 436.786023][ T812] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 436.870693][ T37] audit: type=1804 audit(1698431321.010:815): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/815/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 436.880520][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 436.881483][ T37] audit: type=1804 audit(1698431321.010:816): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/815/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 436.897239][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.900418][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.996153][ T812] usb 7-1: device descriptor read/64, error -71 [ 437.296150][ T812] usb 7-1: new high-speed USB device number 86 using dummy_hcd 18:28:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:41 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 437.496089][ T812] usb 7-1: device descriptor read/64, error -71 [ 437.534044][ T37] audit: type=1804 audit(1698431321.670:817): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/598/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 437.544239][ T37] audit: type=1804 audit(1698431321.670:818): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/598/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 437.617735][ T812] usb usb7-port1: attempt power cycle [ 438.036402][ T812] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 438.126299][ T812] usb 7-1: device descriptor read/8, error -71 [ 438.396101][ T812] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 438.496160][ T812] usb 7-1: device descriptor read/8, error -71 [ 438.618007][ T812] usb usb7-port1: unable to enumerate USB device 18:28:43 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:43 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:43 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 439.645002][ T37] audit: type=1804 audit(1698431323.780:819): pid=13236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/599/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 439.656501][ T37] audit: type=1804 audit(1698431323.780:820): pid=13237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/816/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 18:28:43 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 439.713997][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 439.720668][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.723771][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:28:43 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:43 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 440.026166][ T5228] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 440.119310][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.122157][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.296055][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 440.428886][ T5228] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 440.432581][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 440.435747][ T5228] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.441181][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 440.444621][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.956199][ T5228] usb 7-1: string descriptor 0 read error: -71 [ 440.959882][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 440.962544][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 440.966037][ T5228] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 440.996279][ T5228] usb 7-1: USB disconnect, device number 89 [ 441.496079][ T5228] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 441.736072][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 441.856068][ T5228] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 441.860068][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.863643][ T5228] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.869187][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 441.872584][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.166125][ T5228] usb 7-1: string descriptor 0 read error: -71 [ 442.168750][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 442.170867][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 442.173221][ T5228] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 442.206288][ T5228] usb 7-1: USB disconnect, device number 90 18:28:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:46 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 442.726243][ T37] kauditd_printk_skb: 2 callbacks suppressed 18:28:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 442.726255][ T37] audit: type=1804 audit(1698431326.870:823): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/600/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 442.750793][ T37] audit: type=1804 audit(1698431326.870:824): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/600/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:28:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 442.790183][ T37] audit: type=1804 audit(1698431326.930:825): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/817/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 442.802597][ T37] audit: type=1804 audit(1698431326.940:826): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/817/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 18:28:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 442.916438][ T812] usb 7-1: new high-speed USB device number 91 using dummy_hcd 18:28:47 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 443.166319][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 443.296264][ T812] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 443.300956][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 443.304592][ T812] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.310559][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 443.314006][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.816128][ T812] usb 7-1: string descriptor 0 read error: -71 [ 443.819334][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 443.822148][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 443.825241][ T812] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 443.856469][ T812] usb 7-1: USB disconnect, device number 91 [ 444.396185][ T812] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 444.636063][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 444.756272][ T812] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 444.760821][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 444.764738][ T812] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.772085][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 444.776264][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.056195][ T812] usb 7-1: string descriptor 0 read error: -71 [ 445.059017][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 445.061201][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 445.063650][ T812] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 445.096388][ T812] usb 7-1: USB disconnect, device number 92 18:28:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:49 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 445.636620][ T37] audit: type=1804 audit(1698431329.780:827): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/601/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 18:28:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 445.647768][ T37] audit: type=1804 audit(1698431329.780:828): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/601/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 445.670085][ T37] audit: type=1804 audit(1698431329.810:829): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/818/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 445.680137][ T37] audit: type=1804 audit(1698431329.810:830): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/818/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:28:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 445.806150][ T32] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 446.046582][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 446.166106][ T32] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 446.170049][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.173357][ T32] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.178459][ T32] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 446.181823][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 446.572768][ T37] audit: type=1804 audit(1698431330.710:831): pid=13291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/602/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 446.582930][ T37] audit: type=1804 audit(1698431330.710:832): pid=13291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/602/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 446.676312][ T32] usb 7-1: string descriptor 0 read error: -71 [ 446.679493][ T32] hub 7-1:1.0: bad descriptor, ignoring hub [ 446.682444][ T32] hub: probe of 7-1:1.0 failed with error -5 [ 446.685421][ T32] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 446.716347][ T32] usb 7-1: USB disconnect, device number 93 [ 447.228396][ T32] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 447.486010][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 447.606313][ T32] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 447.610706][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 447.614750][ T32] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.620755][ T32] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 447.624761][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.896182][ T32] usb 7-1: string descriptor 0 read error: -71 [ 447.899312][ T32] hub 7-1:1.0: bad descriptor, ignoring hub [ 447.901870][ T32] hub: probe of 7-1:1.0 failed with error -5 [ 447.904871][ T32] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 447.936341][ T32] usb 7-1: USB disconnect, device number 94 18:28:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:52 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:52 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:52 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:52 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 448.490519][ T37] audit: type=1804 audit(1698431332.630:833): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/603/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 448.506820][ T37] audit: type=1804 audit(1698431332.630:834): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/603/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 448.525850][ T37] audit: type=1804 audit(1698431332.660:835): pid=13294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/819/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 448.539572][ T37] audit: type=1804 audit(1698431332.680:836): pid=13294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/819/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:28:52 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:52 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 448.689681][ T22] usb 7-1: new high-speed USB device number 95 using dummy_hcd 18:28:52 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 448.936087][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 449.076319][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.082032][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 449.086384][ T22] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.092546][ T22] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 449.097444][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.151436][ T22] hub 7-1:1.0: bad descriptor, ignoring hub [ 449.154410][ T22] hub: probe of 7-1:1.0 failed with error -5 [ 449.157783][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 449.160321][ T22] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:28:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:53 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 449.666424][ T2673] usb 7-1: USB disconnect, device number 95 [ 450.019557][ T2673] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 450.256094][ T2673] usb 7-1: Using ep0 maxpacket: 8 [ 450.379012][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.382778][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 450.386310][ T2673] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.390966][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 450.394289][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.437302][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 450.439718][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 450.442436][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 450.444517][ T2673] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 450.767527][ T886] usb 7-1: USB disconnect, device number 96 18:28:55 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:55 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 451.251129][ T37] audit: type=1804 audit(1698431335.390:837): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/604/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 18:28:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 451.263448][ T37] audit: type=1804 audit(1698431335.390:838): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/604/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 18:28:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 451.397619][ T37] audit: type=1804 audit(1698431335.530:839): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/822/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 451.406704][ T37] audit: type=1804 audit(1698431335.540:840): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/822/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 451.446323][ T36] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 451.726425][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 451.867904][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.873061][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.877542][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.883243][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 451.887930][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.938635][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 451.941260][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 451.944155][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 451.946663][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 452.457630][ T36] usb 7-1: USB disconnect, device number 97 [ 452.806049][ T36] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 453.046077][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 453.167686][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.171314][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 453.174511][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.179919][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 453.183771][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.227404][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 453.229809][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 453.236599][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 453.238825][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 453.549378][ T5228] usb 7-1: USB disconnect, device number 98 18:28:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:58 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:58 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:28:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:58 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 454.038142][ T37] audit: type=1804 audit(1698431338.170:841): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/605/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 454.060155][ T37] audit: type=1804 audit(1698431338.180:842): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/605/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:28:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:28:58 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 454.246046][ T7] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 454.416036][ T2673] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 454.496087][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 454.646176][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.650628][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.654082][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.659072][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 454.662302][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.676299][ T2673] usb 8-1: Using ep0 maxpacket: 8 [ 454.707148][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 454.709441][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 454.712179][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 454.714289][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:28:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:28:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 454.816131][ T2673] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.820582][ T2673] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.823884][ T2673] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.828827][ T2673] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 454.832755][ T2673] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.897504][ T2673] hub 8-1:1.0: bad descriptor, ignoring hub [ 454.900072][ T2673] hub: probe of 8-1:1.0 failed with error -5 [ 454.902450][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 454.904583][ T2673] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 454.931730][ T37] audit: type=1804 audit(1698431339.070:843): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/606/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 454.941454][ T37] audit: type=1804 audit(1698431339.070:844): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/606/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 455.226147][ T36] usb 7-1: USB disconnect, device number 99 [ 455.436298][ T2673] usb 8-1: USB disconnect, device number 17 [ 455.576050][ T36] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 455.786079][ T7] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 455.818756][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 455.936115][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.939742][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 455.942887][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.947551][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 455.950854][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.987066][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 455.989234][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 455.991721][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 455.993586][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 456.046056][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 456.176134][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.179933][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 456.183191][ T7] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.188212][ T7] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 456.191815][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.238838][ T7] hub 8-1:1.0: bad descriptor, ignoring hub [ 456.241059][ T7] hub: probe of 8-1:1.0 failed with error -5 [ 456.243642][ T7] cdc_wdm 8-1:1.0: skipping garbage [ 456.245496][ T7] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 456.308157][ T36] usb 7-1: USB disconnect, device number 100 [ 456.566311][ T5228] usb 8-1: USB disconnect, device number 18 18:29:00 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:00 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:00 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:00 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 456.799051][ T37] audit: type=1804 audit(1698431340.940:845): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/607/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 456.809006][ T37] audit: type=1804 audit(1698431340.940:846): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/607/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 18:29:01 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:01 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 456.986445][ T7] usb 7-1: new high-speed USB device number 101 using dummy_hcd 18:29:01 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 457.189019][ T37] audit: type=1804 audit(1698431341.330:847): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/827/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 457.200940][ T37] audit: type=1804 audit(1698431341.330:848): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/827/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 457.239690][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 457.376160][ T7] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 457.380284][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.384286][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.389193][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 457.392435][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.447624][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 457.450610][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 457.454078][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 457.459655][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 457.462570][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 457.967977][ T36] usb 7-1: USB disconnect, device number 101 [ 458.336061][ T36] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 458.586059][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 458.716167][ T36] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 458.720766][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 458.724675][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.730283][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 458.734003][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.779189][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 458.781718][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 458.784907][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 458.787356][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 458.789662][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 459.096214][ T36] usb 7-1: USB disconnect, device number 102 18:29:03 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:03 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:03 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:03 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 459.595787][ T37] audit: type=1804 audit(1698431343.730:849): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/608/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 459.608183][ T37] audit: type=1804 audit(1698431343.730:850): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/608/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:29:03 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 459.655477][ T37] audit: type=1804 audit(1698431343.790:851): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/828/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 459.665425][ T37] audit: type=1804 audit(1698431343.790:852): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/828/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 18:29:03 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 459.788137][ T7] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 460.026113][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 460.146109][ T7] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 460.150835][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 460.154927][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.161270][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 460.165532][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.207560][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 460.210333][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 460.213582][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 460.216595][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 460.219037][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 460.747914][ T7] usb 7-1: USB disconnect, device number 103 [ 461.086043][ T7] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 461.326013][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 461.446156][ T7] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 461.451012][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.455010][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.464864][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 461.468919][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.507616][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 461.510625][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 461.513685][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 461.516168][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 461.518695][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 461.830632][ T7] usb 7-1: USB disconnect, device number 104 18:29:06 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:06 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:06 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:06 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:06 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 462.310519][ T37] audit: type=1804 audit(1698431346.450:853): pid=13401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/609/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 462.322034][ T37] audit: type=1804 audit(1698431346.450:854): pid=13401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/609/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:29:06 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:06 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 462.506003][ T36] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 462.746220][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 462.866353][ T36] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 462.871162][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.875316][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.881290][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 462.885473][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.927885][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 462.930744][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 462.934237][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 462.937358][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 462.939948][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 463.456238][ T36] usb 7-1: USB disconnect, device number 105 [ 463.826034][ T36] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 464.086029][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 464.226098][ T36] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 464.230477][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 464.234384][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.239938][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 464.243291][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.287588][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 464.290277][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 464.293298][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 464.295618][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 464.298547][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 464.607447][ T36] usb 7-1: USB disconnect, device number 106 18:29:09 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:09 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:09 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:09 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:09 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) [ 465.099689][ T37] audit: type=1804 audit(1698431349.240:855): pid=13420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/610/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 465.111113][ T37] audit: type=1804 audit(1698431349.240:856): pid=13420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/610/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 18:29:09 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x0, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) 18:29:09 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) [ 465.276152][ T59] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 465.285986][ T36] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 465.526136][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 465.546022][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 465.686370][ T36] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 465.690238][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 465.693623][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.696129][ T59] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 465.698665][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 465.702708][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 465.702755][ T59] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.702791][ T59] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 465.702812][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.721349][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.778221][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 465.780634][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 465.783214][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 465.785335][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 465.787422][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 466.206179][ T59] usb 8-1: string descriptor 0 read error: -71 [ 466.209806][ T59] hub 8-1:1.0: bad descriptor, ignoring hub [ 466.212483][ T59] hub: probe of 8-1:1.0 failed with error -5 [ 466.215610][ T59] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 466.256321][ T59] usb 8-1: USB disconnect, device number 19 [ 466.297265][ T36] usb 7-1: USB disconnect, device number 107 [ 466.656002][ T36] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 466.756078][ T59] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 466.896018][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 467.006052][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 467.016147][ T36] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 467.020004][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.023154][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.027852][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 467.030990][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.076877][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 467.079018][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 467.081468][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 467.083326][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 467.085266][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 467.146186][ T59] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 467.151045][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.154550][ T59] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.160682][ T59] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 467.164369][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.407335][ T36] usb 7-1: USB disconnect, device number 108 [ 467.446199][ T59] usb 8-1: string descriptor 0 read error: -71 [ 467.448980][ T59] hub 8-1:1.0: bad descriptor, ignoring hub [ 467.451666][ T59] hub: probe of 8-1:1.0 failed with error -5 [ 467.454075][ T59] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 467.486344][ T59] usb 8-1: USB disconnect, device number 20 18:29:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:11 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) 18:29:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, 0x0, &(0x7f0000002c40), 0x0) 18:29:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) [ 468.026071][ T37] audit: type=1804 audit(1698431352.160:857): pid=13438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/611/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:29:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) [ 468.037317][ T37] audit: type=1804 audit(1698431352.160:858): pid=13438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/611/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 468.071493][ T37] audit: type=1804 audit(1698431352.210:859): pid=13440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/833/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 468.085996][ T5228] usb 7-1: new high-speed USB device number 109 using dummy_hcd 18:29:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) [ 468.086889][ T37] audit: type=1804 audit(1698431352.210:860): pid=13440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/833/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 468.328615][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 468.456189][ T5228] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 468.460859][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 468.464920][ T5228] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.470643][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 468.475746][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.527645][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 468.530449][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 468.533836][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 468.537147][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 468.539571][ T5228] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 469.048683][ T5228] usb 7-1: USB disconnect, device number 109 [ 469.416040][ T5228] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 469.657753][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 469.776122][ T5228] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 469.780219][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 469.783580][ T5228] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.788581][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 469.792100][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.837256][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 469.839516][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 469.842112][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 469.844237][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 469.846489][ T5228] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 470.158192][ T59] usb 7-1: USB disconnect, device number 110 18:29:14 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x831, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x784c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), &(0x7f0000002c40), 0x0) syz_io_uring_setup(0x784c, &(0x7f0000002bc0), 0x0, 0x0) 18:29:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:14 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 470.649854][ T37] audit: type=1804 audit(1698431354.790:861): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/612/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 470.659534][ T37] audit: type=1804 audit(1698431354.790:862): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/612/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 470.693093][ T37] audit: type=1804 audit(1698431354.830:863): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/834/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 470.704077][ T37] audit: type=1804 audit(1698431354.830:864): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/834/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 470.846047][ T38] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 470.916158][ T5228] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 471.086174][ T38] usb 7-1: Using ep0 maxpacket: 8 [ 471.176234][ T5228] usb 5-1: Using ep0 maxpacket: 8 [ 471.216160][ T38] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 471.220237][ T38] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 471.223611][ T38] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 471.228364][ T38] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 471.231669][ T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.287216][ T38] hub 7-1:1.0: bad descriptor, ignoring hub [ 471.289496][ T38] hub: probe of 7-1:1.0 failed with error -5 [ 471.291944][ T38] cdc_wdm 7-1:1.0: skipping garbage [ 471.293875][ T38] cdc_wdm 7-1:1.0: skipping garbage [ 471.295767][ T38] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 471.306088][ T5228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.310293][ T5228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 471.313841][ T5228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 471.318616][ T5228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 471.322721][ T5228] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 471.326176][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.346566][T13459] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 471.367955][ T5228] hub 5-1:1.0: bad descriptor, ignoring hub [ 471.370902][ T5228] hub: probe of 5-1:1.0 failed with error -5 [ 471.373742][ T5228] cdc_wdm 5-1:1.0: skipping garbage [ 471.375867][ T5228] cdc_wdm 5-1:1.0: skipping garbage [ 471.379712][ T5228] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 471.381931][ T5228] cdc_wdm 5-1:1.0: Unknown control protocol 18:29:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 471.543927][ T37] audit: type=1804 audit(1698431355.680:865): pid=13462 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/613/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 471.553554][ T37] audit: type=1804 audit(1698431355.680:866): pid=13462 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/613/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 471.594576][ T37] audit: type=1804 audit(1698431355.730:867): pid=13464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/835/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 471.606681][ T37] audit: type=1804 audit(1698431355.730:868): pid=13464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/835/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 471.656944][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 471.664043][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.667428][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.688711][ T27] usb 5-1: USB disconnect, device number 32 [ 471.706548][ T59] usb 5-1: Failed to suspend device, error -71 [ 471.856578][ T7] usb 7-1: USB disconnect, device number 111 [ 472.226492][ T7] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 472.276039][ T27] usb 5-1: new high-speed USB device number 33 using dummy_hcd 18:29:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 472.460650][ T37] audit: type=1804 audit(1698431356.600:869): pid=13471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/614/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 472.470124][ T37] audit: type=1804 audit(1698431356.600:870): pid=13471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/614/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 472.486218][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 472.546045][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 472.594826][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 472.601281][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.604495][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.646434][ T7] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 472.650609][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 472.654099][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.659381][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 472.662983][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.686188][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.689944][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 472.693271][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.697514][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 472.701723][ T27] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 472.705176][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.707218][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 472.710812][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 472.717605][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 472.719820][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 472.722459][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 472.726400][T13459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 472.758845][ T27] hub 5-1:1.0: bad descriptor, ignoring hub [ 472.761225][ T27] hub: probe of 5-1:1.0 failed with error -5 [ 472.764146][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 472.766634][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 472.770725][ T27] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 472.772985][ T27] cdc_wdm 5-1:1.0: Unknown control protocol [ 473.037764][ T5224] usb 7-1: USB disconnect, device number 112 [ 473.086483][ T38] usb 5-1: USB disconnect, device number 33 18:29:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:17 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 473.575078][T12909] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 473.581242][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.584393][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.716316][ T36] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 473.759541][ T38] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 473.976124][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 473.996332][ T38] usb 5-1: Using ep0 maxpacket: 8 [ 474.097253][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.101217][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 474.104622][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.109840][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 474.113313][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.126217][ T38] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 474.130481][ T38] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 474.133776][ T38] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.138725][ T38] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 474.142430][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.158231][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 474.160687][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 474.163702][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 474.166538][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 474.176371][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 474.179093][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 474.200487][ T38] hub 5-1:1.0: bad descriptor, ignoring hub [ 474.203463][ T38] hub: probe of 5-1:1.0 failed with error -5 [ 474.206050][ T38] cdc_wdm 5-1:1.0: skipping garbage [ 474.208709][ T38] cdc_wdm 5-1:1.0: skipping garbage [ 474.211170][ T38] cdc_wdm: probe of 5-1:1.0 failed with error -22 18:29:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 474.493568][T12909] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 474.499026][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.502565][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 474.676284][ T2673] usb 7-1: USB disconnect, device number 113 18:29:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 474.716557][ T5224] usb 5-1: USB disconnect, device number 34 18:29:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 475.056824][ T2673] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 475.086086][ T5224] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 475.316210][ T2673] usb 7-1: Using ep0 maxpacket: 8 [ 475.326127][ T5224] usb 5-1: Using ep0 maxpacket: 8 [ 475.446101][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.446394][ T5224] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 475.450021][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 475.454466][ T5224] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 475.457850][ T2673] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.461516][ T5224] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.466489][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 475.471846][ T5224] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 475.475138][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.479183][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.517587][ T5224] hub 5-1:1.0: bad descriptor, ignoring hub [ 475.520220][ T5224] hub: probe of 5-1:1.0 failed with error -5 [ 475.523243][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 475.525485][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 475.527167][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 475.528229][ T5224] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 475.530004][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 475.535417][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 475.537514][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 475.540085][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 475.541962][ T2673] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 475.847431][ T36] usb 5-1: USB disconnect, device number 35 [ 475.856221][ T2673] usb 7-1: USB disconnect, device number 114 18:29:20 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 476.316658][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 476.316667][ T37] audit: type=1804 audit(1698431360.460:887): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/842/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 476.330477][ T37] audit: type=1804 audit(1698431360.470:888): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/842/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 476.340390][ T37] audit: type=1804 audit(1698431360.470:889): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/617/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 476.351938][ T37] audit: type=1804 audit(1698431360.470:890): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/617/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 476.366639][ T37] audit: type=1804 audit(1698431360.510:891): pid=13509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3398929809/syzkaller.BCbVu7/825/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 476.377137][ T37] audit: type=1804 audit(1698431360.510:892): pid=13509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir3398929809/syzkaller.BCbVu7/825/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 18:29:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 476.429736][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 476.436295][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.439677][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 476.500723][ T37] audit: type=1804 audit(1698431360.640:893): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/843/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 476.510219][ T37] audit: type=1804 audit(1698431360.640:894): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/843/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 476.526361][ T36] usb 7-1: new high-speed USB device number 115 using dummy_hcd 18:29:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 476.616765][ T37] audit: type=1804 audit(1698431360.760:895): pid=13517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3398929809/syzkaller.BCbVu7/826/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 476.627223][ T37] audit: type=1804 audit(1698431360.760:896): pid=13517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir3398929809/syzkaller.BCbVu7/826/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 18:29:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 476.797172][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 476.956528][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.960206][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 476.963937][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.968857][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 476.972426][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.037399][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 477.039676][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 477.042799][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 477.045168][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 477.047818][ T59] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 477.050684][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 477.053304][ T36] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 477.287623][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 477.416143][ T59] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 477.420608][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 477.423760][ T59] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.429014][ T59] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 477.432736][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.501779][ T59] hub 5-1:1.0: bad descriptor, ignoring hub [ 477.504606][ T59] hub: probe of 5-1:1.0 failed with error -5 [ 477.507817][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 477.510137][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 477.512485][ T59] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 477.556504][ T5228] usb 7-1: USB disconnect, device number 115 [ 477.936038][ T5228] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 478.026291][ T38] usb 5-1: USB disconnect, device number 36 [ 478.186177][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 478.308286][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.312841][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 478.317295][ T5228] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.323068][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 478.327227][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.367575][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 478.370213][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 478.373343][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 478.375642][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 478.378071][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 478.380362][ T5228] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 478.386071][ T38] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 478.636054][ T38] usb 5-1: Using ep0 maxpacket: 8 [ 478.686466][ T5228] usb 7-1: USB disconnect, device number 116 [ 478.756114][ T38] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 478.760135][ T38] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 478.763709][ T38] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.770007][ T38] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 478.773671][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.818390][ T38] hub 5-1:1.0: bad descriptor, ignoring hub [ 478.820794][ T38] hub: probe of 5-1:1.0 failed with error -5 [ 478.823310][ T38] cdc_wdm 5-1:1.0: skipping garbage [ 478.825330][ T38] cdc_wdm 5-1:1.0: skipping garbage [ 478.827597][ T38] cdc_wdm: probe of 5-1:1.0 failed with error -22 18:29:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:23 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 479.147847][ T5224] usb 5-1: USB disconnect, device number 37 18:29:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 479.376046][ T886] usb 7-1: new high-speed USB device number 117 using dummy_hcd 18:29:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:23 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 479.646013][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 479.777106][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.780874][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.784582][ T886] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.789654][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 479.793110][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.836134][ T59] usb 5-1: new high-speed USB device number 38 using dummy_hcd 18:29:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 479.852153][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 479.854522][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 479.857481][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 479.859452][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 479.861491][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 479.863487][ T886] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:29:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 480.116034][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 480.236276][ T59] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 480.239786][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 480.246117][ T59] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.250815][ T59] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 480.253868][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.307160][ T59] hub 5-1:1.0: bad descriptor, ignoring hub [ 480.309215][ T59] hub: probe of 5-1:1.0 failed with error -5 [ 480.311580][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 480.313332][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 480.315115][ T59] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 480.377348][ T886] usb 7-1: USB disconnect, device number 117 [ 480.726048][ T38] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 480.836419][ T5211] usb 5-1: USB disconnect, device number 38 [ 480.967091][ T38] usb 7-1: Using ep0 maxpacket: 8 [ 481.086133][ T38] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.090320][ T38] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.094197][ T38] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.104433][ T38] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 481.108414][ T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.147494][ T38] hub 7-1:1.0: bad descriptor, ignoring hub [ 481.150097][ T38] hub: probe of 7-1:1.0 failed with error -5 [ 481.153038][ T38] cdc_wdm 7-1:1.0: skipping garbage [ 481.155336][ T38] cdc_wdm 7-1:1.0: skipping garbage [ 481.159592][ T38] cdc_wdm 7-1:1.0: skipping garbage [ 481.161852][ T38] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 481.198574][ T5211] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 481.456064][ T5211] usb 5-1: Using ep0 maxpacket: 8 [ 481.466220][ T5228] usb 7-1: USB disconnect, device number 118 [ 481.576104][ T5211] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 481.579792][ T5211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.583414][ T5211] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.587989][ T5211] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 481.591187][ T5211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.626906][ T5211] hub 5-1:1.0: bad descriptor, ignoring hub [ 481.629080][ T5211] hub: probe of 5-1:1.0 failed with error -5 [ 481.631442][ T5211] cdc_wdm 5-1:1.0: skipping garbage [ 481.633290][ T5211] cdc_wdm 5-1:1.0: skipping garbage [ 481.635202][ T5211] cdc_wdm: probe of 5-1:1.0 failed with error -22 18:29:26 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100001905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 481.925403][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 481.925416][ T37] audit: type=1804 audit(1698431366.060:915): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/851/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 481.934916][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 481.939496][ T37] audit: type=1804 audit(1698431366.070:916): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/851/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 481.939547][ T37] audit: type=1804 audit(1698431366.070:917): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/620/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 481.939590][ T37] audit: type=1804 audit(1698431366.070:918): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/620/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 481.973458][ T59] usb 5-1: USB disconnect, device number 39 [ 481.980863][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.983768][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.156093][ T5211] usb 7-1: new high-speed USB device number 119 using dummy_hcd 18:29:26 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 482.396034][ T5211] usb 7-1: Using ep0 maxpacket: 8 [ 482.439717][ T37] audit: type=1804 audit(1698431366.580:919): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/852/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 18:29:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 482.442161][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 482.450133][ T37] audit: type=1804 audit(1698431366.580:920): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/852/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 482.470052][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.473187][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.516623][ T5211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.520630][ T5211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 482.523968][ T5211] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 482.528361][ T5211] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 482.531835][ T5211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.556352][T13563] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 482.561848][ T37] audit: type=1804 audit(1698431366.700:921): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/853/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 18:29:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 482.564056][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 482.571509][ T37] audit: type=1804 audit(1698431366.700:922): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/853/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 482.576934][ T5211] hub 7-1:1.0: bad descriptor, ignoring hub [ 482.588913][ T5211] hub: probe of 7-1:1.0 failed with error -5 [ 482.591537][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.594636][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.596671][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 482.601119][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 482.603281][ T5211] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 482.656375][ T22] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 482.674204][ T37] audit: type=1804 audit(1698431366.810:923): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/854/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 18:29:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 482.681288][T12909] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 482.690478][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.693235][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.796125][ T37] audit: type=1804 audit(1698431366.940:924): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2636826293/syzkaller.hh7Fqq/855/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 482.798805][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 482.812196][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.815553][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.906017][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 483.026903][ T22] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 483.030637][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 483.033874][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.038773][ T22] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 483.042004][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.087057][ T22] hub 5-1:1.0: bad descriptor, ignoring hub [ 483.089224][ T22] hub: probe of 5-1:1.0 failed with error -5 [ 483.091608][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 483.093471][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 483.095332][ T22] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 483.109014][ T886] usb 7-1: USB disconnect, device number 119 [ 483.466071][ T886] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 483.616314][ T59] usb 5-1: USB disconnect, device number 40 [ 483.716088][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 483.846041][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.849674][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 483.852831][ T886] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 483.856584][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 483.859731][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.876300][T13563] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.899244][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 483.901810][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 483.905062][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 483.907089][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 483.908917][ T886] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 483.986105][ T59] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 484.219171][ T886] usb 7-1: USB disconnect, device number 120 [ 484.236060][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 484.366157][ T59] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 484.369781][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 484.372915][ T59] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.377856][ T59] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 484.381616][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.417661][ T59] hub 5-1:1.0: bad descriptor, ignoring hub [ 484.420074][ T59] hub: probe of 5-1:1.0 failed with error -5 [ 484.422614][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 484.424931][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 484.427432][ T59] cdc_wdm: probe of 5-1:1.0 failed with error -22 18:29:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:28 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100001905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 484.684968][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 484.691856][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.695158][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.756225][ T59] usb 5-1: USB disconnect, device number 41 [ 484.926411][ T59] usb 7-1: new high-speed USB device number 121 using dummy_hcd 18:29:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 485.187224][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 485.277787][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 485.286894][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.292499][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 485.346109][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.349901][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.353044][ T59] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 485.357893][ T59] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 485.361333][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.386576][T13585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.419895][ T59] hub 7-1:1.0: bad descriptor, ignoring hub [ 485.422460][ T59] hub: probe of 7-1:1.0 failed with error -5 [ 485.425753][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 485.436920][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 485.439743][ T59] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:29:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 485.511717][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 485.520204][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.524581][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 485.808327][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 485.816203][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.819775][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 485.948227][ T886] usb 7-1: USB disconnect, device number 121 18:29:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 486.084799][T13166] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 486.100633][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.104266][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.306111][ T886] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 486.556134][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 486.696192][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.699980][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 486.703550][ T886] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 486.708073][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 486.711777][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.737073][T13585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 486.757128][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 486.759514][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 486.762064][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 486.764085][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 486.766187][ T886] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 487.078596][ T886] usb 7-1: USB disconnect, device number 122 18:29:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:31 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100001905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 487.544489][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 487.553110][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.561731][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.567254][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 487.567262][ T37] audit: type=1804 audit(1698431371.710:936): pid=13613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/623/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 487.579368][ T37] audit: type=1804 audit(1698431371.710:937): pid=13613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/623/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 487.608515][ T37] audit: type=1804 audit(1698431371.750:938): pid=13617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3398929809/syzkaller.BCbVu7/832/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 487.619200][ T37] audit: type=1804 audit(1698431371.750:939): pid=13617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir3398929809/syzkaller.BCbVu7/832/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 487.758161][ T886] usb 7-1: new high-speed USB device number 123 using dummy_hcd 18:29:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 487.982918][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 487.995440][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.001495][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.016060][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 488.156099][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.160897][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 488.165667][ T886] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 488.171385][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 488.176900][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.206441][T13618] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 18:29:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 488.230737][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 488.233661][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 488.237147][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 488.239123][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 488.240999][ T886] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:29:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 488.403316][T13166] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 488.419391][T13166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.425181][T13166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.500442][ T37] audit: type=1804 audit(1698431372.640:940): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/624/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 488.512915][ T37] audit: type=1804 audit(1698431372.640:941): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/624/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 488.556380][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 488.563405][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.567002][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.590878][T13166] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 488.598129][T13166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.601484][T13166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r3, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 488.756292][ T886] usb 7-1: USB disconnect, device number 123 [ 488.797337][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 488.806703][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.810838][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.126251][ T886] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 489.387657][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 489.508935][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.513163][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.517179][ T886] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 489.521527][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 489.525279][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.546563][T13618] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.567515][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 489.570245][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 489.574481][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 489.577063][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 489.579116][ T886] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 489.898377][ T36] usb 7-1: USB disconnect, device number 124 18:29:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r3, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 490.355671][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 490.362760][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.370989][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.376283][ T37] audit: type=1804 audit(1698431374.510:942): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/625/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 490.398057][ T37] audit: type=1804 audit(1698431374.520:943): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/625/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 490.429078][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 490.436212][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.439108][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:34 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 490.590206][ T36] usb 7-1: new high-speed USB device number 125 using dummy_hcd 18:29:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 490.756572][T12909] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 490.768992][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.772907][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.846274][ T36] usb 7-1: Using ep0 maxpacket: 8 18:29:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 490.966598][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.970660][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 490.974091][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 490.983379][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 490.996333][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 491.002631][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.034757][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 491.036446][T13645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 491.049379][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.052414][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.057319][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 491.059546][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 491.062293][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 491.064464][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 491.069150][ T36] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 491.071813][ T36] cdc_wdm 7-1:1.0: Unknown control protocol [ 491.136276][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 491.150208][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.155498][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 491.320186][ T37] audit: type=1804 audit(1698431375.460:944): pid=13661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/626/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 491.333738][ T37] audit: type=1804 audit(1698431375.460:945): pid=13661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/626/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 18:29:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 491.456639][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:29:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 491.465077][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.469840][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.488406][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 491.494821][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.498244][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.956622][T13645] usb 7-1: reset high-speed USB device number 125 using dummy_hcd [ 492.306519][T13663] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.658168][ T38] usb 7-1: USB disconnect, device number 125 18:29:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 18:29:40 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 496.760263][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:29:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 496.771041][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.775401][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.799543][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:29:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 496.811635][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.815241][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.838130][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 496.847765][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:29:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 496.851176][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.857731][ T37] audit: type=1804 audit(1698431381.000:946): pid=13678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/627/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 496.884473][ T37] audit: type=1804 audit(1698431381.000:947): pid=13678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/627/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 496.884555][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:29:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 496.916057][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.919456][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.930859][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:29:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 496.955719][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.962196][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.976745][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 496.992594][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.996616][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.036124][ T2673] usb 7-1: new high-speed USB device number 126 using dummy_hcd 18:29:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 497.278822][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 497.287016][ T2673] usb 7-1: Using ep0 maxpacket: 8 [ 497.289479][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.293637][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.426495][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.431101][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 497.435437][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 497.440884][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 497.445841][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 497.450229][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.476597][T13679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.508870][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 497.511605][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 497.514881][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 497.518683][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 497.523937][ T2673] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 497.527437][ T2673] cdc_wdm 7-1:1.0: Unknown control protocol 18:29:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 497.779450][ T37] audit: type=1804 audit(1698431381.920:948): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/628/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 497.791297][ T37] audit: type=1804 audit(1698431381.920:949): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/628/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 498.377605][T13679] usb 7-1: reset high-speed USB device number 126 using dummy_hcd [ 498.746447][T13702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.559380][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.562253][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.240802][ T5211] usb 7-1: USB disconnect, device number 126 18:29:47 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 18:29:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:29:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 503.368924][ T37] audit: type=1804 audit(1698431387.500:950): pid=13709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/629/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 503.380567][ T37] audit: type=1804 audit(1698431387.500:951): pid=13709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/629/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 18:29:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 503.566183][ T8] usb 7-1: new high-speed USB device number 127 using dummy_hcd 18:29:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 503.836282][ T8] usb 7-1: Using ep0 maxpacket: 8 18:29:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 503.966110][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.969833][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.973013][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 503.986459][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 503.990457][ T8] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 503.993810][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.036400][T13712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 504.066918][ T8] hub 7-1:1.0: bad descriptor, ignoring hub [ 504.069192][ T8] hub: probe of 7-1:1.0 failed with error -5 [ 504.079350][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 504.081703][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 504.090489][ T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 504.093265][ T8] cdc_wdm 7-1:1.0: Unknown control protocol 18:29:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 504.264594][ T37] audit: type=1804 audit(1698431388.400:952): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/630/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 504.276243][ T37] audit: type=1804 audit(1698431388.400:953): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/630/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 504.976782][T13712] usb 7-1: reset high-speed USB device number 127 using dummy_hcd [ 505.326597][T13730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 509.698611][ T5211] usb 7-1: USB disconnect, device number 127 18:29:53 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) [ 509.804779][ T37] audit: type=1804 audit(1698431393.940:954): pid=13739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/631/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 509.814463][ T37] audit: type=1804 audit(1698431393.950:955): pid=13739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/631/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 509.860459][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 509.874345][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.878566][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 509.996122][ T2673] usb 7-1: new high-speed USB device number 2 using dummy_hcd 18:29:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r6, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 510.246015][ T2673] usb 7-1: Using ep0 maxpacket: 8 18:29:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 510.376170][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.379821][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 510.383270][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 510.387581][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 510.391417][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 510.394563][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.426463][T13740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 510.456832][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 510.459655][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 510.462086][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 510.463970][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 510.477034][ T2673] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 510.479247][ T2673] cdc_wdm 7-1:1.0: Unknown control protocol 18:29:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) [ 510.758462][ T37] audit: type=1804 audit(1698431394.900:956): pid=13759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/632/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 510.774663][ T37] audit: type=1804 audit(1698431394.900:957): pid=13759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/632/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 510.813161][T13011] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 510.823679][T13011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.828033][T13011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.086066][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.088398][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.106000][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.108564][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.126047][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.128409][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.146038][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.148434][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.166056][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.168489][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.186097][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.188994][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.206029][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.208441][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.224048][T13740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.226076][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 511.229379][T13740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.230079][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 511.236547][ T8] usb 7-1: USB disconnect, device number 2 18:29:55 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) [ 511.857196][ T37] audit: type=1804 audit(1698431396.000:958): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/633/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 511.886030][ T37] audit: type=1804 audit(1698431396.000:959): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/633/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 511.906751][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 511.914945][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.921093][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) [ 512.036019][ T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd 18:29:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 512.105892][ T37] audit: type=1804 audit(1698431396.240:960): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/634/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 512.115416][ T37] audit: type=1804 audit(1698431396.250:961): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/634/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 512.153762][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:29:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 512.163057][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.168731][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) [ 512.296402][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 512.353152][ T37] audit: type=1804 audit(1698431396.490:962): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/635/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 512.368854][ T37] audit: type=1804 audit(1698431396.490:963): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/635/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 512.395119][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 512.420071][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.436192][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.436507][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.443861][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 512.448695][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 512.453560][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 512.458064][ T22] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 512.461795][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.486331][T13770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 512.516303][ T22] hub 7-1:1.0: bad descriptor, ignoring hub [ 512.518789][ T22] hub: probe of 7-1:1.0 failed with error -5 [ 512.521206][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 512.523083][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 512.526857][ T22] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 512.529229][ T22] cdc_wdm 7-1:1.0: Unknown control protocol [ 513.116011][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.118854][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.136028][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.138537][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.166088][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.168509][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.186032][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.188483][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.206006][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.208505][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.226008][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.228687][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.246022][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.248656][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.266067][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.268707][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.276515][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.280327][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.285063][ T38] usb 7-1: USB disconnect, device number 3 [ 513.286017][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 513.290047][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 513.292449][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 18:29:57 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:29:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:29:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) 18:29:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 513.952325][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 513.959567][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.965674][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) 18:29:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 514.106038][ T2673] usb 7-1: new high-speed USB device number 4 using dummy_hcd 18:29:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 514.204649][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 514.217691][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.222050][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:29:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) [ 514.386032][ T2673] usb 7-1: Using ep0 maxpacket: 8 [ 514.457177][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 514.476317][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.482088][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.526172][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.530334][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 514.533680][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 514.538778][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 514.546019][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 514.549743][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.581233][T13797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.600853][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 514.603506][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 514.616529][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 514.618844][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 514.632512][ T2673] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 514.635397][ T2673] cdc_wdm 7-1:1.0: Unknown control protocol [ 515.236091][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.238751][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.256036][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.258893][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.276041][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.279037][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.296043][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.298816][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.315998][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.318817][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.336110][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.338909][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.356055][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.358917][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.363626][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.368645][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.373390][ T38] usb 7-1: USB disconnect, device number 4 [ 515.376036][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 515.378462][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 515.380775][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 18:30:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x0) 18:30:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:00 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 516.017094][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 516.017106][ T37] audit: type=1804 audit(1698431400.160:970): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/639/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 516.031617][ T37] audit: type=1804 audit(1698431400.170:971): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/639/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 516.094561][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 516.104896][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.111450][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x0) [ 516.196099][ T886] usb 7-1: new high-speed USB device number 5 using dummy_hcd 18:30:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 516.341398][ T37] audit: type=1804 audit(1698431400.480:972): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/640/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 516.353761][ T37] audit: type=1804 audit(1698431400.480:973): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/640/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 516.394216][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 516.417301][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.420220][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x0) [ 516.456016][ T886] usb 7-1: Using ep0 maxpacket: 8 [ 516.570037][ T37] audit: type=1804 audit(1698431400.710:974): pid=13836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/641/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 516.582839][ T37] audit: type=1804 audit(1698431400.710:975): pid=13836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/641/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 516.596234][ T886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.600785][ T886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 516.605157][ T886] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 516.610777][ T886] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 516.615768][ T886] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 516.620444][ T886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.622249][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x8000) [ 516.637048][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.641212][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.656456][T13823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 18:30:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x0) [ 516.697518][ T886] hub 7-1:1.0: bad descriptor, ignoring hub [ 516.699809][ T886] hub: probe of 7-1:1.0 failed with error -5 [ 516.702179][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 516.704197][ T886] cdc_wdm 7-1:1.0: skipping garbage [ 516.716952][ T886] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 516.719108][ T886] cdc_wdm 7-1:1.0: Unknown control protocol [ 516.868824][ T37] audit: type=1804 audit(1698431401.010:976): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/642/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 516.890750][ T37] audit: type=1804 audit(1698431401.010:977): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/642/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 516.931071][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 516.936687][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.942282][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.099464][T13848] cdc_wdm 7-1:1.0: Error autopm - -16 [ 518.099784][ T27] usb 7-1: USB disconnect, device number 5 18:30:02 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x8000) 18:30:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 518.677994][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 518.684832][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.687818][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x8000) 18:30:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 518.916071][ T886] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 518.917926][ T27] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 519.045327][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 519.052915][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.056565][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.156090][ T886] usb 6-1: Using ep0 maxpacket: 8 [ 519.166078][ T27] usb 7-1: Using ep0 maxpacket: 8 18:30:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) 18:30:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r4, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 519.276086][ T886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.280410][ T886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 519.283866][ T886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 519.288244][ T886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 519.292786][ T886] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 519.296190][ T886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.316481][T13857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 519.326316][ T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.331030][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 519.334962][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 519.338923][ T886] hub 6-1:1.0: bad descriptor, ignoring hub [ 519.340014][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 519.341959][ T886] hub: probe of 6-1:1.0 failed with error -5 [ 519.345843][ T27] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 519.349690][ T886] cdc_wdm 6-1:1.0: skipping garbage [ 519.351334][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.353507][ T886] cdc_wdm 6-1:1.0: skipping garbage [ 519.360129][ T886] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 519.362629][ T886] cdc_wdm 6-1:1.0: Unknown control protocol [ 519.386347][T13856] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 519.408097][ T27] hub 7-1:1.0: bad descriptor, ignoring hub [ 519.410199][ T27] hub: probe of 7-1:1.0 failed with error -5 [ 519.412663][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 519.414541][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 519.416381][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 519.419170][ T27] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 519.423136][ T27] cdc_wdm 7-1:1.0: Unknown control protocol [ 519.431068][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.433981][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.896200][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 519.899094][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 519.916023][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 519.919016][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 519.936209][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 519.938720][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 519.966001][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 519.968558][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 519.995989][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 519.996295][ T32] usb 7-1: USB disconnect, device number 6 [ 519.998614][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 520.025993][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 520.028576][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 520.046050][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 520.048713][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 520.066033][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 520.068718][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 520.082276][T13857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.085758][T13857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.086060][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 520.091146][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 520.092667][ T5224] usb 6-1: USB disconnect, device number 6 [ 520.093480][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 18:30:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r4, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) 18:30:04 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 520.633237][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r4, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 520.641901][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.649996][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.665357][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r4, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 520.677550][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.681024][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.704126][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 520.711349][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:30:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r4, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 520.716145][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.748529][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r4, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 520.757357][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.760760][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.783980][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 520.798657][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.802401][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.918952][ T22] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 520.922130][ T36] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 521.176047][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 521.180715][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 521.306239][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.310630][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 521.316067][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.320691][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 521.324743][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 521.329738][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 521.334547][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 521.339619][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 521.344445][ T22] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 521.348468][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 521.352421][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.356142][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.396434][T13877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 521.396462][T13881] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 521.427369][ T22] hub 6-1:1.0: bad descriptor, ignoring hub [ 521.429875][ T22] hub: probe of 6-1:1.0 failed with error -5 [ 521.432666][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 521.434772][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 521.438340][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 521.440675][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 521.443398][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 521.445429][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 521.449285][ T36] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 521.451744][ T36] cdc_wdm 7-1:1.0: Unknown control protocol [ 521.456671][ T22] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 521.459493][ T22] cdc_wdm 6-1:1.0: Unknown control protocol [ 521.968200][ T27] usb 7-1: USB disconnect, device number 7 [ 522.056166][ T5224] usb 6-1: USB disconnect, device number 7 18:30:06 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r4, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) [ 522.677973][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:06 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 522.694547][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.710713][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.718962][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 522.738664][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.742560][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.760462][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 522.767700][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:30:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 522.775652][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.803754][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r3, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 522.816426][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.819992][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.829031][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 522.837449][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.840361][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.966005][ T59] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 522.986138][ T27] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 523.206016][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 523.226218][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 523.326259][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.330357][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 523.334335][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 523.339227][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 523.343943][ T59] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 523.347267][ T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.350849][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.354389][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 523.358303][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 523.362511][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 523.366449][ T27] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 523.369698][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.376516][T13899] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 523.386234][T13903] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 523.397566][ T59] hub 6-1:1.0: bad descriptor, ignoring hub [ 523.400214][ T59] hub: probe of 6-1:1.0 failed with error -5 [ 523.402859][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 523.404749][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 523.408562][ T27] hub 7-1:1.0: bad descriptor, ignoring hub [ 523.410736][ T27] hub: probe of 7-1:1.0 failed with error -5 [ 523.413150][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 523.415050][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 523.417234][ T59] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 523.419389][ T59] cdc_wdm 6-1:1.0: Unknown control protocol [ 523.423494][ T27] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 523.425686][ T27] cdc_wdm 7-1:1.0: Unknown control protocol [ 523.945973][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 523.948361][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 523.966005][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 523.968481][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 523.986062][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 523.988444][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.006016][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 524.008441][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.025994][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 524.026162][ T59] usb 7-1: USB disconnect, device number 8 [ 524.028390][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.046008][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 524.048351][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.066052][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 524.068699][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.086037][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 524.088582][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.106022][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 524.108491][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.126043][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 524.128632][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 524.132129][T13899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.135716][T13899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.142396][ T59] usb 6-1: USB disconnect, device number 8 [ 524.397748][ T32] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 524.646069][ T32] usb 7-1: Using ep0 maxpacket: 8 18:30:08 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) 18:30:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r3, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 524.664953][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 524.672404][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.675764][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.776081][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.779697][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 524.782873][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 524.786851][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 524.790771][ T32] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 524.794197][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.816531][T13903] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 524.836874][ T32] hub 7-1:1.0: bad descriptor, ignoring hub [ 524.839054][ T32] hub: probe of 7-1:1.0 failed with error -5 [ 524.841682][ T32] cdc_wdm 7-1:1.0: skipping garbage [ 524.843600][ T32] cdc_wdm 7-1:1.0: skipping garbage [ 524.846554][ T32] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 524.848697][ T32] cdc_wdm 7-1:1.0: Unknown control protocol [ 524.946027][ T59] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 525.160964][ T27] usb 7-1: USB disconnect, device number 9 [ 525.206194][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 525.326256][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.330785][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 525.334769][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 525.339702][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 525.344588][ T59] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 525.348595][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.366466][T13920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.387429][ T59] hub 6-1:1.0: bad descriptor, ignoring hub [ 525.389890][ T59] hub: probe of 6-1:1.0 failed with error -5 [ 525.392826][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 525.395146][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 525.399407][ T59] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 525.401698][ T59] cdc_wdm 6-1:1.0: Unknown control protocol 18:30:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r3, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:09 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) [ 525.566131][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:09 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 525.577393][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.580771][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.594720][T13011] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:09 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 525.619231][T13011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.622440][T13011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.629304][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 525.635744][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.639405][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.836111][ T5224] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 526.025984][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.028666][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.045979][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.048436][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.066038][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.068450][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.086046][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 526.086056][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.091079][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.106023][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.108977][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.125998][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.128957][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.145999][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.148582][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.166033][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 526.168588][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 526.172240][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.175734][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.182180][ T5238] usb 6-1: USB disconnect, device number 9 [ 526.226805][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.230575][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 526.233676][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 526.238530][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 526.242545][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 526.245754][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.268842][T13926] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 526.288367][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 526.290888][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 526.293774][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 526.296483][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 526.299510][ T5224] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 526.301644][ T5224] cdc_wdm 7-1:1.0: Unknown control protocol 18:30:10 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:10 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) [ 526.716056][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 526.723237][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.727355][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 526.756622][T13011] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 526.763047][T13011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.768224][T13011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.976008][ T5228] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 527.236133][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 527.386192][ T5228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.389875][ T5228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 527.393031][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 527.397337][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 527.401917][ T5228] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 527.405328][ T5228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.426394][T13941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.457632][ T5228] hub 6-1:1.0: bad descriptor, ignoring hub [ 527.460327][ T5228] hub: probe of 6-1:1.0 failed with error -5 [ 527.463099][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 527.464939][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 527.539404][T13926] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 527.906286][T13945] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 527.947569][ T5228] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 527.949861][ T5228] cdc_wdm 6-1:1.0: Unknown control protocol [ 527.966009][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 527.968956][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 527.986041][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 527.988992][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.006029][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 528.009167][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.026021][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 528.029095][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.046035][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 528.049022][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.066053][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 528.068950][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.086021][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 528.088606][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.106154][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 528.108717][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.126107][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 528.128374][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 528.131021][ T36] usb 7-1: USB disconnect, device number 10 [ 528.149861][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.152950][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.280718][ T5224] usb 6-1: USB disconnect, device number 10 18:30:12 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 528.655997][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 528.666099][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.668850][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:12 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 528.687035][T13011] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 528.697701][T13011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:30:12 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 528.703996][T13011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.719377][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:12 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 528.739151][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.742312][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:12 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 528.782449][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 528.791361][ T5224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.795042][ T5224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.936082][ T5228] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 528.956136][ T5211] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 529.176272][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 529.206103][ T5211] usb 6-1: Using ep0 maxpacket: 8 [ 529.299755][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.304214][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 529.308278][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 529.313143][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 529.318268][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 529.322241][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.326948][ T5211] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.331540][ T5211] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 529.335604][ T5211] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 529.341782][ T5211] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 529.346793][ T5211] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 529.350704][ T5211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.356439][T13952] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 529.377047][T13956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 529.377865][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 529.382852][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 529.385844][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 529.388311][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 529.392213][ T5228] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 529.394837][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 529.403189][ T5211] hub 6-1:1.0: bad descriptor, ignoring hub [ 529.405867][ T5211] hub: probe of 6-1:1.0 failed with error -5 [ 529.408629][ T5211] cdc_wdm 6-1:1.0: skipping garbage [ 529.410505][ T5211] cdc_wdm 6-1:1.0: skipping garbage [ 529.413568][ T5211] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 529.415706][ T5211] cdc_wdm 6-1:1.0: Unknown control protocol [ 529.956764][ T5224] usb 7-1: USB disconnect, device number 11 [ 529.976036][T13956] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 530.269305][ T36] usb 6-1: USB disconnect, device number 11 [ 530.546071][ T5224] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 530.786191][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 530.907707][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.911990][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 530.915837][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 530.920628][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 530.925390][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 530.929297][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.946307][T13952] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.967150][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 530.969310][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 530.971727][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 530.973584][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 530.977641][ T5224] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 530.979799][ T5224] cdc_wdm 7-1:1.0: Unknown control protocol [ 531.289973][T13911] usb 7-1: USB disconnect, device number 12 18:30:15 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:15 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:15 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 531.706003][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:15 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 531.726183][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.729873][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:15 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 531.740889][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 531.750866][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.754227][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:15 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 531.776861][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 531.787881][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.790690][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.817308][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:15 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 531.827857][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.831551][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.847847][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:16 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 531.857012][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.860277][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.884599][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 531.894816][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.898062][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.966029][ T5228] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 531.991139][ T5224] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 532.216011][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 532.236062][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 532.336111][ T5228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.340150][ T5228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 532.343352][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 532.347372][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 532.351289][ T5228] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 532.354555][ T5228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.368622][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.372498][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 532.375730][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 532.376253][T13975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 532.379785][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 532.386379][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 532.389632][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.397738][ T5228] hub 6-1:1.0: bad descriptor, ignoring hub [ 532.400376][ T5228] hub: probe of 6-1:1.0 failed with error -5 [ 532.403295][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 532.405574][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 532.409074][ T5228] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 532.411717][ T5228] cdc_wdm 6-1:1.0: Unknown control protocol [ 532.416362][T13974] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 532.447147][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 532.449318][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 532.451808][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 532.453757][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 532.456847][ T5224] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 532.459033][ T5224] cdc_wdm 7-1:1.0: Unknown control protocol [ 533.006037][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.008966][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.026117][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.028746][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.046151][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.048755][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.066163][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.068778][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.086117][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.088549][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.106014][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.106359][ T27] usb 7-1: USB disconnect, device number 13 [ 533.108420][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.125993][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.128436][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.146003][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 533.148489][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 533.156236][ T5224] usb 6-1: USB disconnect, device number 12 [ 533.166124][T13974] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 533.466091][ T22] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 533.706023][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 533.826144][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.830534][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 533.834415][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 533.839269][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 533.844200][ T22] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 533.848323][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.866411][T13974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 533.887432][ T22] hub 7-1:1.0: bad descriptor, ignoring hub [ 533.890044][ T22] hub: probe of 7-1:1.0 failed with error -5 [ 533.893411][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 533.895692][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 533.899210][ T22] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 533.901456][ T22] cdc_wdm 7-1:1.0: Unknown control protocol [ 534.206347][ T5224] usb 7-1: USB disconnect, device number 14 18:30:18 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:18 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:18 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 534.622924][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:18 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 534.629468][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.632929][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.660851][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 534.670602][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:30:18 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 534.674108][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.701847][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:18 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 534.710641][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.713465][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.729452][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:18 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 534.739622][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.743118][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.759078][T13168] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 534.776050][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.778843][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.886145][ T22] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 534.888424][ T5228] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 535.126027][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 535.136333][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 535.246142][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.249834][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 535.253088][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 535.256265][ T5228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.257463][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 535.261350][ T5228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 535.265234][ T22] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 535.268638][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 535.272379][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.276380][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 535.276409][ T5228] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 535.276419][ T5228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.296323][T13996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 535.306249][T13997] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 535.327544][ T5228] hub 6-1:1.0: bad descriptor, ignoring hub [ 535.328381][ T22] hub 7-1:1.0: bad descriptor, ignoring hub [ 535.330268][ T5228] hub: probe of 6-1:1.0 failed with error -5 [ 535.332529][ T22] hub: probe of 7-1:1.0 failed with error -5 [ 535.337321][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 535.338888][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 535.340311][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 535.342318][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 535.343161][ T22] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 535.347394][ T5228] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 535.349377][ T22] cdc_wdm 7-1:1.0: Unknown control protocol [ 535.352045][ T5228] cdc_wdm 6-1:1.0: Unknown control protocol [ 535.837942][ T5228] usb 7-1: USB disconnect, device number 15 [ 535.956276][T13911] usb 6-1: USB disconnect, device number 13 [ 536.436647][ T5228] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 536.676100][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 536.796101][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.799848][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 536.804275][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 536.808303][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 536.812220][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 536.815524][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.836624][T13997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.857077][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 536.859262][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 536.861605][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 536.863417][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 536.866709][ T5228] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 536.869013][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 537.176263][T13911] usb 7-1: USB disconnect, device number 16 18:30:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:21 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:30:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 537.593408][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 537.610630][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.614245][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.639101][T13011] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 537.648881][T13011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.652568][T13011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.677292][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 537.689712][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.692464][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 537.876385][T13911] usb 6-1: new high-speed USB device number 14 using dummy_hcd 18:30:22 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 537.896042][ T5228] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 538.118339][T13911] usb 6-1: Using ep0 maxpacket: 8 [ 538.146127][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 538.236136][T13911] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.239946][T13911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.243451][T13911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 538.249356][T13911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 538.253618][T13911] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 538.257093][T13911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.276687][T14014] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.296255][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.297224][T13911] hub 6-1:1.0: bad descriptor, ignoring hub [ 538.300759][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.303015][T13911] hub: probe of 6-1:1.0 failed with error -5 [ 538.307124][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 538.309579][T13911] cdc_wdm 6-1:1.0: skipping garbage [ 538.314780][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 538.316778][T13911] cdc_wdm 6-1:1.0: skipping garbage [ 538.317994][T13911] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 538.321682][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 538.323610][T13911] cdc_wdm 6-1:1.0: Unknown control protocol [ 538.326424][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.359875][T14016] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 538.395879][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 538.398710][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 538.401836][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 538.404062][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 538.408888][ T5228] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 538.411895][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 538.807413][ T5224] usb 6-1: USB disconnect, device number 14 [ 538.956238][T13911] usb 7-1: USB disconnect, device number 17 [ 539.306125][T13911] usb 7-1: new high-speed USB device number 18 using dummy_hcd 18:30:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 539.546133][T13911] usb 7-1: Using ep0 maxpacket: 8 [ 539.676266][T13911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.679927][T13911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 539.683080][T13911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 539.687616][T13911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 539.691737][T13911] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 539.694943][T13911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.716369][T14016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 539.737023][T13911] hub 7-1:1.0: bad descriptor, ignoring hub [ 539.739138][T13911] hub: probe of 7-1:1.0 failed with error -5 [ 539.741376][T13911] cdc_wdm 7-1:1.0: skipping garbage [ 539.743434][T13911] cdc_wdm 7-1:1.0: skipping garbage [ 539.747190][T13911] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 539.749256][T13911] cdc_wdm 7-1:1.0: Unknown control protocol [ 540.078148][T13911] usb 7-1: USB disconnect, device number 18 18:30:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:24 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:30:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 540.756929][ T5229] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 540.761121][ T22] usb 6-1: new high-speed USB device number 15 using dummy_hcd 18:30:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 540.996070][ T5229] usb 7-1: Using ep0 maxpacket: 8 [ 540.998836][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 541.116167][ T5229] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.119805][ T5229] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 541.122979][ T5229] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 541.127039][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.130594][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 541.133736][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 541.137776][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 541.141697][ T22] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 541.144936][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.147876][ T5229] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 541.151823][ T5229] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 541.155182][ T5229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.176322][T14042] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 541.176322][T14041] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 541.207622][ T22] hub 6-1:1.0: bad descriptor, ignoring hub [ 541.210460][ T22] hub: probe of 6-1:1.0 failed with error -5 [ 541.213774][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 541.220718][ T5229] hub 7-1:1.0: bad descriptor, ignoring hub [ 541.223469][ T5229] hub: probe of 7-1:1.0 failed with error -5 [ 541.226271][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 541.229975][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 541.232337][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 541.235161][ T22] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 541.238603][ T22] cdc_wdm 6-1:1.0: Unknown control protocol [ 541.241480][ T5229] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 541.244094][ T5229] cdc_wdm 7-1:1.0: Unknown control protocol [ 541.788080][ T5229] usb 6-1: USB disconnect, device number 15 [ 541.807790][T14042] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 541.876628][ T5228] usb 7-1: USB disconnect, device number 19 [ 542.236153][ T5228] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 542.486085][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 542.606201][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.610460][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 542.614800][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 542.619740][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 542.624829][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 542.629209][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.646504][T14042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.667552][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 542.670298][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 542.673309][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 542.675579][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 542.679621][ T5228] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 542.682350][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 542.986275][ T5228] usb 7-1: USB disconnect, device number 20 18:30:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:27 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 18:30:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x8000) 18:30:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x8000) [ 543.452506][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 543.461100][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.464580][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x8000) 18:30:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) [ 543.666181][ T5248] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 543.706002][ T5224] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 543.906070][ T5248] usb 6-1: Using ep0 maxpacket: 8 [ 543.966595][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 544.026423][ T5248] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.030321][ T5248] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 544.033445][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 544.037780][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 544.042294][ T5248] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 544.045763][ T5248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.066287][T14062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 544.087354][ T5248] hub 6-1:1.0: bad descriptor, ignoring hub [ 544.089682][ T5248] hub: probe of 6-1:1.0 failed with error -5 [ 544.092644][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 544.094895][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 544.098577][ T5248] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 544.101303][ T5248] cdc_wdm 6-1:1.0: Unknown control protocol [ 544.116203][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.119777][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 544.123268][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 544.128122][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 544.132820][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 544.137018][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.156269][T14066] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 544.177975][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 544.180659][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 544.183667][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 544.185868][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 544.189696][ T5224] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 544.192324][ T5224] cdc_wdm 7-1:1.0: Unknown control protocol [ 544.398058][ T5228] usb 6-1: USB disconnect, device number 16 [ 544.717905][ T5211] usb 7-1: USB disconnect, device number 21 [ 545.066058][ T5211] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 545.316100][ T5211] usb 7-1: Using ep0 maxpacket: 8 [ 545.436123][ T5211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.440190][ T5211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 545.443710][ T5211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 545.448002][ T5211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 545.452010][ T5211] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 545.455518][ T5211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.476356][T14066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 545.497713][ T5211] hub 7-1:1.0: bad descriptor, ignoring hub [ 545.500407][ T5211] hub: probe of 7-1:1.0 failed with error -5 [ 545.506495][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 545.508857][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 545.511772][ T5211] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 545.514153][ T5211] cdc_wdm 7-1:1.0: Unknown control protocol [ 545.816362][ T5211] usb 7-1: USB disconnect, device number 22 18:30:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x2, 0xa0, 0xd4}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:30 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) 18:30:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:30 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 18:30:30 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) 18:30:30 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) 18:30:30 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) 18:30:30 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) [ 546.496118][ T5248] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 546.506014][ T5228] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 546.746024][ T5248] usb 7-1: Using ep0 maxpacket: 8 [ 546.776123][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 546.877827][ T5248] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.881481][ T5248] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.884646][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 546.888614][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 546.892486][ T5248] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 546.895689][ T5248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.906108][ T5228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.909675][ T5228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.913293][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 546.916590][T14082] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 546.917691][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 546.924532][ T5228] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 546.927824][ T5228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.937710][ T5248] hub 7-1:1.0: bad descriptor, ignoring hub [ 546.940126][ T5248] hub: probe of 7-1:1.0 failed with error -5 [ 546.942452][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 546.944388][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 546.948833][ T5248] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 546.951177][ T5248] cdc_wdm 7-1:1.0: Unknown control protocol [ 546.956440][T14079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 546.987791][ T5228] hub 6-1:1.0: bad descriptor, ignoring hub [ 546.990064][ T5228] hub: probe of 6-1:1.0 failed with error -5 [ 546.992524][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 546.994652][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 546.999156][ T5228] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 547.002339][ T5228] cdc_wdm 6-1:1.0: Unknown control protocol [ 547.376264][ T5229] usb 6-1: USB disconnect, device number 17 [ 548.176453][T14082] usb 7-1: reset high-speed USB device number 23 using dummy_hcd [ 548.528476][T14096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 548.586031][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.588827][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.606072][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.608971][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.626021][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.629081][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.646024][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.649063][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.665992][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.668778][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.686033][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.689027][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.706024][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.708968][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.726063][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.729191][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.746043][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 548.749095][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 548.757434][ T22] usb 7-1: USB disconnect, device number 23 18:30:33 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:33 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x2, 0xa0, 0xd4}}]}}]}}, 0x0) 18:30:33 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 18:30:33 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:33 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x0, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:33 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:33 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:33 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x0, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 549.556102][ T5248] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 549.586121][ T22] usb 7-1: new high-speed USB device number 24 using dummy_hcd 18:30:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 549.806034][ T5248] usb 6-1: Using ep0 maxpacket: 8 [ 549.846388][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 549.949281][ T5248] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.953711][ T5248] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 549.957658][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 549.962310][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 549.966207][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.967399][ T5248] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 549.971335][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 549.975212][ T5248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.979041][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 549.986935][ T22] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 549.991534][ T22] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 549.994923][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.006484][T14099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 550.016316][T14104] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 550.028760][ T5248] hub 6-1:1.0: bad descriptor, ignoring hub [ 550.031433][ T5248] hub: probe of 6-1:1.0 failed with error -5 [ 550.034349][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 550.037245][ T22] hub 7-1:1.0: bad descriptor, ignoring hub [ 550.038679][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 550.039968][ T22] hub: probe of 7-1:1.0 failed with error -5 [ 550.043609][ T5248] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 550.045156][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 550.050034][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 550.050517][ T5248] cdc_wdm 6-1:1.0: Unknown control protocol [ 550.053422][ T22] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 550.057617][ T22] cdc_wdm 7-1:1.0: Unknown control protocol [ 550.340066][ T5248] usb 6-1: USB disconnect, device number 18 [ 550.356258][T14104] cdc_wdm 6-1:1.0: Error autopm - -16 [ 550.606201][ T5228] usb 7-1: USB disconnect, device number 24 [ 550.976013][ T5228] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 551.226137][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 551.346145][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.350478][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 551.354304][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 551.359013][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 551.363158][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 551.367226][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.386448][T14104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 551.407287][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 551.409617][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 551.412302][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 551.414486][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 551.419198][ T5228] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 551.421540][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 551.726297][ T5228] usb 7-1: USB disconnect, device number 25 18:30:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x2, 0xa0, 0xd4}}]}}]}}, 0x0) 18:30:36 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) 18:30:36 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 552.143238][T13011] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:36 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 552.164668][T13011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.168942][T13011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.184119][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:36 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 552.194560][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.198661][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.227287][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 552.236585][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:30:36 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 552.239981][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:36 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 552.436421][ T5228] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 552.439334][ T5249] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 552.706018][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 552.708017][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 552.826251][ T5228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.830136][ T5228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.834071][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 552.838521][ T5249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.842267][ T5249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.846144][ T5249] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 552.850746][ T5249] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 552.855074][ T5249] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 552.858606][ T5228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 552.863129][ T5228] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 552.869595][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.873081][ T5228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.896355][T14128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 552.896477][T14124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 552.917124][ T5249] hub 7-1:1.0: bad descriptor, ignoring hub [ 552.919387][ T5249] hub: probe of 7-1:1.0 failed with error -5 [ 552.921870][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 552.923703][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 552.926678][ T5228] hub 6-1:1.0: bad descriptor, ignoring hub [ 552.928791][ T5228] hub: probe of 6-1:1.0 failed with error -5 [ 552.932320][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 552.934657][ T5228] cdc_wdm 6-1:1.0: skipping garbage [ 552.938544][ T5249] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 552.941187][ T5249] cdc_wdm 7-1:1.0: Unknown control protocol [ 552.947114][ T5228] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 552.949420][ T5228] cdc_wdm 6-1:1.0: Unknown control protocol [ 553.436654][ T5228] usb 6-1: USB disconnect, device number 19 [ 554.166592][T14128] usb 7-1: reset high-speed USB device number 26 using dummy_hcd [ 554.517325][T14139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 554.599475][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 554.602228][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 554.625989][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 554.628390][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 554.646048][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 554.648814][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 554.678024][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 554.680694][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 554.696016][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 554.698748][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 554.716048][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 554.718683][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 554.736023][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 554.738997][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 554.751074][ T5228] usb 7-1: USB disconnect, device number 26 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) 18:30:39 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:30:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x2, 0xa0, 0xd4}}]}}]}}, 0x0) 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x8000) 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x8000) 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x8000) 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 555.453387][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 555.460607][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.463620][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 555.485824][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 555.492775][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.496482][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.576207][ T5224] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 555.586021][ T5228] usb 7-1: new high-speed USB device number 27 using dummy_hcd 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 555.650034][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 555.656933][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.660491][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.836141][ T5224] usb 6-1: Using ep0 maxpacket: 8 [ 555.856024][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 555.956247][ T5224] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.960646][ T5224] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 555.963734][ T5224] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 555.968361][ T5224] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 555.972395][ T5224] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 555.975485][ T5224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.976106][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.982701][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 555.986004][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 555.990144][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 555.994777][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 555.998670][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.998764][T14145] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 556.026404][T14147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 556.027391][ T5224] hub 6-1:1.0: bad descriptor, ignoring hub [ 556.031983][ T5224] hub: probe of 6-1:1.0 failed with error -5 [ 556.034936][ T5224] cdc_wdm 6-1:1.0: skipping garbage [ 556.037409][ T5224] cdc_wdm 6-1:1.0: skipping garbage [ 556.041423][ T5224] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 556.044021][ T5224] cdc_wdm 6-1:1.0: Unknown control protocol [ 556.057590][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 556.060302][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 556.063458][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 556.066067][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 556.070278][ T5228] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 556.072935][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 556.436652][T13911] usb 6-1: USB disconnect, device number 20 [ 556.456152][ T5228] usb 6-1: Failed to suspend device, error -71 [ 556.646254][ T5248] usb 7-1: USB disconnect, device number 27 18:30:41 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 557.006055][T13911] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 557.246282][ T5229] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 557.256094][T13911] usb 7-1: Using ep0 maxpacket: 8 [ 557.386154][T13911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.390418][T13911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 557.394116][T13911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 557.399032][T13911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 557.403117][T13911] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 557.406467][T13911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.426509][T14147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 557.446942][T13911] hub 7-1:1.0: bad descriptor, ignoring hub [ 557.449109][T13911] hub: probe of 7-1:1.0 failed with error -5 [ 557.451778][T13911] cdc_wdm 7-1:1.0: skipping garbage [ 557.453627][T13911] cdc_wdm 7-1:1.0: skipping garbage [ 557.456904][T13911] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 557.460368][T13911] cdc_wdm 7-1:1.0: Unknown control protocol [ 557.506083][ T5229] usb 6-1: Using ep0 maxpacket: 8 [ 557.626153][ T5229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.630442][ T5229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 557.634181][ T5229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 557.639421][ T5229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 557.644268][ T5229] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 557.649469][ T5229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.687504][T14163] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 557.717390][ T5229] hub 6-1:1.0: bad descriptor, ignoring hub [ 557.719925][ T5229] hub: probe of 6-1:1.0 failed with error -5 [ 557.722944][ T5229] cdc_wdm 6-1:1.0: skipping garbage [ 557.725269][ T5229] cdc_wdm 6-1:1.0: skipping garbage [ 557.728455][ T5229] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 557.730564][ T5229] cdc_wdm 6-1:1.0: Unknown control protocol [ 557.776264][ T36] usb 7-1: USB disconnect, device number 28 18:30:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) 18:30:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x2, 0xa0, 0xd4}}]}}]}}, 0x0) 18:30:42 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 558.246131][T13911] usb 6-1: USB disconnect, device number 21 18:30:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 558.456159][ T5238] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 558.466287][ T36] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 558.614550][ T58] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 558.622624][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.625800][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:30:42 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 558.716018][ T5238] usb 5-1: Using ep0 maxpacket: 8 [ 558.716019][ T36] usb 7-1: Using ep0 maxpacket: 8 18:30:43 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 558.866070][ T5238] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.866234][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.870158][ T5238] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 558.870210][ T5238] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 558.870232][ T5238] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 558.875220][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 558.879153][ T5238] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 558.883744][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 558.888393][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.903646][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 558.906607][T14166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 558.908669][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 558.915163][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.937142][T14169] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 558.937552][ T5238] hub 5-1:1.0: bad descriptor, ignoring hub [ 558.946653][ T5238] hub: probe of 5-1:1.0 failed with error -5 [ 558.949769][ T5238] cdc_wdm 5-1:1.0: skipping garbage [ 558.951793][ T5238] cdc_wdm 5-1:1.0: skipping garbage [ 558.955032][ T5238] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 558.957550][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 558.957570][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 558.957953][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 558.960325][ T5238] cdc_wdm 5-1:1.0: Unknown control protocol [ 558.963245][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 558.972587][ T36] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 558.975223][ T36] cdc_wdm 7-1:1.0: Unknown control protocol [ 559.276043][ T5228] usb 8-1: new high-speed USB device number 21 using dummy_hcd 18:30:43 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 559.526467][ T36] usb 5-1: USB disconnect, device number 42 [ 559.528766][T14166] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 559.531162][T14169] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 559.546008][ T5228] usb 8-1: Using ep0 maxpacket: 8 [ 559.636203][T13911] usb 7-1: USB disconnect, device number 29 [ 559.679257][ T5228] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.683663][ T5228] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 559.688048][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 559.692906][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 559.697956][ T5228] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 559.701885][ T5228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.726651][T14177] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 559.757528][ T5228] hub 8-1:1.0: bad descriptor, ignoring hub [ 559.760156][ T5228] hub: probe of 8-1:1.0 failed with error -5 [ 559.763235][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 559.765575][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 559.769544][ T5228] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 559.772173][ T5228] cdc_wdm 8-1:1.0: Unknown control protocol [ 560.006164][ T5248] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 560.116036][ T36] usb 5-1: new high-speed USB device number 43 using dummy_hcd 18:30:44 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 560.256003][ T5248] usb 7-1: Using ep0 maxpacket: 8 [ 560.288653][T13911] usb 8-1: USB disconnect, device number 21 [ 560.356033][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 560.386158][ T5248] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.390423][ T5248] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.394300][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 560.398794][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 560.403302][ T5248] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 560.407225][ T5248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.426467][T14169] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 560.447516][ T5248] hub 7-1:1.0: bad descriptor, ignoring hub [ 560.450189][ T5248] hub: probe of 7-1:1.0 failed with error -5 [ 560.453167][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 560.455552][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 560.459596][ T5248] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 560.462132][ T5248] cdc_wdm 7-1:1.0: Unknown control protocol [ 560.506199][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.510552][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.514451][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 560.519433][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 560.523801][ T36] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 560.527588][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.546368][T14166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 560.566860][ T36] hub 5-1:1.0: bad descriptor, ignoring hub [ 560.569164][ T36] hub: probe of 5-1:1.0 failed with error -5 [ 560.572097][ T36] cdc_wdm 5-1:1.0: skipping garbage [ 560.574344][ T36] cdc_wdm 5-1:1.0: skipping garbage [ 560.577350][ T36] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 560.579802][ T36] cdc_wdm 5-1:1.0: Unknown control protocol [ 560.766726][ T5248] usb 7-1: USB disconnect, device number 30 [ 560.876179][T13911] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 560.906234][ T5249] usb 5-1: USB disconnect, device number 43 18:30:45 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 561.116173][T13911] usb 8-1: Using ep0 maxpacket: 8 18:30:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x2, 0xa0, 0xd4}}]}}]}}, 0x0) [ 561.246159][T13911] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.250200][T13911] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 561.253376][T13911] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 561.257362][T13911] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 561.261734][T13911] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 561.264849][T13911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:45 executing program 0: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 561.286614][T14177] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 561.306889][T13911] hub 8-1:1.0: bad descriptor, ignoring hub [ 561.309324][T13911] hub: probe of 8-1:1.0 failed with error -5 [ 561.312495][T13911] cdc_wdm 8-1:1.0: skipping garbage [ 561.314396][T13911] cdc_wdm 8-1:1.0: skipping garbage [ 561.317481][T13911] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 561.319666][T13911] cdc_wdm 8-1:1.0: Unknown control protocol [ 561.466106][ T5224] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 561.636261][ T5249] usb 8-1: USB disconnect, device number 22 18:30:45 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 561.716179][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 561.856149][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.860085][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 561.863762][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 561.868095][ T5224] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 561.872627][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 561.876209][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.896333][T14192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.919459][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 561.922353][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 561.925686][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 561.928358][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 561.932111][ T5224] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 561.935003][ T5224] cdc_wdm 7-1:1.0: Unknown control protocol 18:30:46 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:30:46 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 562.296100][ T5228] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 562.306090][T13911] usb 8-1: new high-speed USB device number 23 using dummy_hcd 18:30:46 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 562.546032][ T5228] usb 5-1: Using ep0 maxpacket: 8 [ 562.577947][T13911] usb 8-1: Using ep0 maxpacket: 8 [ 562.686152][ T5228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.690233][ T5228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 562.694038][ T5228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 562.698844][ T5228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 562.703586][ T5228] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 562.707580][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.708628][T13911] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.715474][T13911] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 562.718997][T13911] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 562.723572][T13911] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 562.726483][T14198] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 562.728494][T13911] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 562.734663][T13911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.748654][ T5228] hub 5-1:1.0: bad descriptor, ignoring hub [ 562.750878][ T5228] hub: probe of 5-1:1.0 failed with error -5 [ 562.753256][ T5228] cdc_wdm 5-1:1.0: skipping garbage [ 562.755123][ T5228] cdc_wdm 5-1:1.0: skipping garbage [ 562.766514][T14200] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 562.788412][T13911] hub 8-1:1.0: bad descriptor, ignoring hub [ 562.791011][T13911] hub: probe of 8-1:1.0 failed with error -5 [ 562.793723][T13911] cdc_wdm 8-1:1.0: skipping garbage [ 562.795543][T13911] cdc_wdm 8-1:1.0: skipping garbage [ 562.998072][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.000472][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.186585][T14192] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 563.536857][T14205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.587980][ T5228] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 563.590296][ T5228] cdc_wdm 5-1:1.0: Unknown control protocol [ 563.595519][T13911] cdc_wdm 8-1:1.0: cdc-wdm2: USB WDM device [ 563.597914][T13911] cdc_wdm 8-1:1.0: Unknown control protocol [ 563.606045][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.609033][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.626361][ T5228] usb 5-1: USB disconnect, device number 44 [ 563.636156][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.639106][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.666104][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.669009][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.696011][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.698561][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.716300][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.719262][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.736018][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.738731][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.756067][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.758491][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.776091][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 563.778987][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 563.783778][ T5249] usb 7-1: USB disconnect, device number 31 [ 563.831167][T13911] usb 8-1: reset high-speed USB device number 23 using dummy_hcd [ 564.168732][T14208] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 18:30:48 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:30:48 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:30:48 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 564.337200][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 564.350599][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.353974][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.516207][ T5229] usb 8-1: USB disconnect, device number 23 [ 564.606054][ T5249] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 564.606212][ T5224] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 564.636036][ T5228] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 564.856039][ T5224] usb 5-1: Using ep0 maxpacket: 8 [ 564.866034][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 564.896070][ T5228] usb 7-1: Using ep0 maxpacket: 8 18:30:49 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 564.937532][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:30:49 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 564.944461][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.949140][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.976336][ T5224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.980729][ T5224] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 564.984518][ T5224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 564.990849][ T5224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 564.995538][ T5224] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 564.999654][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.016591][T14214] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 565.036246][ T5249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.038187][ T5224] hub 5-1:1.0: bad descriptor, ignoring hub [ 565.041204][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 565.043124][ T5224] hub: probe of 5-1:1.0 failed with error -5 [ 565.047915][ T5249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.050567][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 565.054570][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 565.057129][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 565.058741][ T5224] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 565.061551][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.063636][ T5224] cdc_wdm 5-1:1.0: Unknown control protocol [ 565.066387][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.066405][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 565.066444][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 565.066466][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 565.066500][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 565.097510][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.116772][T14217] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 565.137664][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 565.144321][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 565.147342][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 565.150461][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 565.152975][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 565.155579][ T5249] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 565.158795][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 565.161911][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 565.164310][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 565.168340][ T5228] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 565.171074][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 565.236080][ T5238] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 565.476811][ T5238] usb 8-1: Using ep0 maxpacket: 8 [ 565.590074][ T5224] usb 5-1: USB disconnect, device number 45 [ 565.606181][T14213] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 565.619193][ T5238] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.623724][ T5238] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 565.628002][ T5238] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 565.632844][ T5238] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 565.637902][ T5238] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 565.641870][ T5238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.676774][T14221] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 565.707702][ T5238] hub 8-1:1.0: bad descriptor, ignoring hub [ 565.710185][ T5238] hub: probe of 8-1:1.0 failed with error -5 [ 565.712564][ T5238] cdc_wdm 8-1:1.0: skipping garbage [ 565.714464][ T5238] cdc_wdm 8-1:1.0: skipping garbage [ 565.718306][ T5238] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 565.720516][ T5238] cdc_wdm 8-1:1.0: Unknown control protocol [ 565.726269][ T5228] usb 6-1: USB disconnect, device number 22 [ 565.729776][ T36] usb 7-1: USB disconnect, device number 32 [ 566.076217][ T36] usb 7-1: new high-speed USB device number 33 using dummy_hcd 18:30:50 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:30:50 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 566.316072][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 566.396139][T13911] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 566.416021][ T5249] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 566.436110][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.439824][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 566.442974][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 566.447115][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 566.451154][ T36] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 566.455600][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.476508][T14217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.507614][ T36] hub 7-1:1.0: bad descriptor, ignoring hub [ 566.509981][ T36] hub: probe of 7-1:1.0 failed with error -5 [ 566.512971][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 566.515030][ T36] cdc_wdm 7-1:1.0: skipping garbage [ 566.636035][T13911] usb 5-1: Using ep0 maxpacket: 8 [ 566.675983][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 566.766139][T13911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.770460][T13911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 566.774540][T13911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 566.781453][T13911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 566.785611][T13911] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 566.789221][T13911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.806082][ T5249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.806405][T14228] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 566.810730][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 566.817867][ T5249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.822134][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 566.826160][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.827740][T13911] hub 5-1:1.0: bad descriptor, ignoring hub [ 566.832165][T13911] hub: probe of 5-1:1.0 failed with error -5 [ 566.835254][T13911] cdc_wdm 5-1:1.0: skipping garbage [ 566.837773][T13911] cdc_wdm 5-1:1.0: skipping garbage [ 566.887885][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 566.890653][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 566.893886][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 566.896389][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 566.898945][ T5249] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 566.967519][T14221] usb 8-1: reset high-speed USB device number 24 using dummy_hcd [ 567.316544][T14230] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 567.367636][ T36] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 567.368452][T13911] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 567.369600][ T36] cdc_wdm 7-1:1.0: Unknown control protocol [ 567.371719][T13911] cdc_wdm 5-1:1.0: Unknown control protocol [ 567.386024][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.388760][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.396369][T13911] usb 5-1: USB disconnect, device number 46 [ 567.406011][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.408628][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.411971][ T36] usb 7-1: USB disconnect, device number 33 [ 567.426056][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.429090][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.446049][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.448905][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.466021][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.468963][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.485997][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.486166][ T5238] usb 6-1: USB disconnect, device number 23 [ 567.488689][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.506063][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.509022][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.526020][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.529111][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.546097][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.548961][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.566023][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 567.568615][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 567.575568][ T5249] usb 8-1: USB disconnect, device number 24 18:30:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 568.016033][ T5238] usb 7-1: new high-speed USB device number 34 using dummy_hcd 18:30:52 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:30:52 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:30:52 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 568.266029][ T5238] usb 7-1: Using ep0 maxpacket: 8 [ 568.376001][ T5228] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 568.376188][ T2673] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 568.382944][T13911] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 568.416614][ T5238] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.420942][ T5238] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.424744][ T5238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 568.429544][ T5238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 568.434286][ T5238] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 568.441269][ T5238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.466415][T14234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 568.487671][ T5238] hub 7-1:1.0: bad descriptor, ignoring hub [ 568.490291][ T5238] hub: probe of 7-1:1.0 failed with error -5 [ 568.492749][ T5238] cdc_wdm 7-1:1.0: skipping garbage [ 568.494613][ T5238] cdc_wdm 7-1:1.0: skipping garbage [ 568.499340][ T5238] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 568.501761][ T5238] cdc_wdm 7-1:1.0: Unknown control protocol [ 568.616055][ T2673] usb 6-1: Using ep0 maxpacket: 8 [ 568.626037][T13911] usb 5-1: Using ep0 maxpacket: 8 [ 568.636125][ T5228] usb 8-1: Using ep0 maxpacket: 8 [ 568.739188][ T2673] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.743643][ T2673] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.747857][ T2673] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.766079][T13911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.770415][T13911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.774320][T13911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 568.779354][ T2673] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 568.783375][ T2673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.787343][ T5228] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.788251][T13911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 568.791434][ T5228] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.796197][T13911] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 568.799400][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 568.803117][T13911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.807373][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 568.815460][ T5228] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 568.823106][ T5228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.826403][T14237] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 568.847508][ T2673] hub 6-1:1.0: bad descriptor, ignoring hub [ 568.850035][ T2673] hub: probe of 6-1:1.0 failed with error -5 [ 568.852383][ T2673] cdc_wdm 6-1:1.0: skipping garbage [ 568.854381][ T2673] cdc_wdm 6-1:1.0: skipping garbage [ 568.857409][T13911] hub 5-1:1.0: bad descriptor, ignoring hub [ 568.859831][T13911] hub: probe of 5-1:1.0 failed with error -5 [ 568.861905][T14238] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 568.867425][ T2673] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 568.876384][T13911] cdc_wdm 5-1:1.0: skipping garbage [ 568.881163][T13911] cdc_wdm 5-1:1.0: skipping garbage [ 568.884144][T13911] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 568.888318][T13911] cdc_wdm 5-1:1.0: Unknown control protocol [ 568.889684][ T5228] hub 8-1:1.0: bad descriptor, ignoring hub [ 568.893719][ T5228] hub: probe of 8-1:1.0 failed with error -5 [ 568.898108][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 568.902950][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 568.909847][ T5228] cdc_wdm 8-1:1.0: cdc-wdm2: USB WDM device [ 568.912418][ T5228] cdc_wdm 8-1:1.0: Unknown control protocol [ 569.517499][ T5228] usb 8-1: USB disconnect, device number 25 [ 569.737969][T14234] usb 7-1: reset high-speed USB device number 34 using dummy_hcd [ 570.086544][T14242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 570.145999][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.148875][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.166078][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.168741][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.195981][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.198898][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.226021][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.228604][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.246032][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.248595][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.251241][ T5238] usb 6-1: USB disconnect, device number 24 [ 570.256259][ T5229] usb 5-1: USB disconnect, device number 47 [ 570.266015][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.268916][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.286131][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.289403][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.306065][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.308673][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.326014][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 570.328568][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 570.334054][T13911] usb 7-1: USB disconnect, device number 34 [ 570.496059][ T5228] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 570.736010][ T5228] usb 8-1: Using ep0 maxpacket: 8 18:30:55 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:30:55 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:30:55 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 570.857913][ T5228] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.862391][ T5228] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 570.866095][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 570.870682][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 570.874980][ T5228] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 570.882455][ T5228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.906286][T14246] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 570.927580][ T5228] hub 8-1:1.0: bad descriptor, ignoring hub [ 570.930245][ T5228] hub: probe of 8-1:1.0 failed with error -5 [ 570.933296][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 570.935689][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 570.943431][ T5228] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 570.946611][ T5228] cdc_wdm 8-1:1.0: Unknown control protocol 18:30:55 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 571.136134][T13911] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 571.156082][ T7] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 571.156212][ T2673] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 571.336081][T13911] usb 6-1: device descriptor read/64, error -71 [ 571.406082][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 571.407864][ T5228] usb 8-1: reset high-speed USB device number 26 using dummy_hcd [ 571.409280][ T2673] usb 5-1: Using ep0 maxpacket: 8 [ 571.526112][ T2673] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.526153][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.530501][ T2673] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 571.535377][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 571.539393][ T2673] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 571.542901][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.548103][ T2673] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 571.552154][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 571.556779][ T2673] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 571.560621][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.564279][ T2673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.586289][T14252] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 571.610103][ T2673] hub 5-1:1.0: bad descriptor, ignoring hub [ 571.612694][ T2673] hub: probe of 5-1:1.0 failed with error -5 [ 571.615594][ T2673] cdc_wdm 5-1:1.0: skipping garbage [ 571.618109][T13911] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 571.621422][ T2673] cdc_wdm 5-1:1.0: skipping garbage [ 571.625112][ T2673] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 571.627719][ T2673] cdc_wdm 5-1:1.0: Unknown control protocol [ 571.634878][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 571.637552][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 571.640083][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 571.642122][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 571.644038][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 571.756566][T14255] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 571.826062][T13911] usb 6-1: device descriptor read/64, error -71 [ 571.949135][T13911] usb usb6-port1: attempt power cycle [ 572.185962][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.188265][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.205990][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.208753][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.226076][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.228566][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.245985][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.248596][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.265992][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.268533][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.285993][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.286354][ T2673] usb 5-1: USB disconnect, device number 48 [ 572.288619][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.294100][ T5229] usb 7-1: USB disconnect, device number 35 [ 572.305985][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.309149][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.325993][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.328654][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.346006][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.348660][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.365993][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.368508][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.376087][T13911] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 572.386040][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.388423][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.406062][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.408667][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.426049][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.428238][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.446117][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.448965][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.466126][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.469140][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.486059][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.486325][T13911] usb 6-1: device descriptor read/8, error -71 [ 572.489173][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.506065][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.508570][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.526007][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.529433][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.546008][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.549026][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.566059][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.569111][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.586019][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.588981][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.606031][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.609059][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.626029][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.628567][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.646752][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.649509][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.666026][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.669025][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.686020][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.689194][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.706162][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.709332][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.726056][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.728719][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.746021][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.748754][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.756785][T13911] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 572.766036][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.768588][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.786154][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.788540][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.806232][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.809303][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.826012][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.828620][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.846021][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.848452][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.866060][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.868812][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.876114][T13911] usb 6-1: device descriptor read/8, error -71 [ 572.886168][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.888909][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.906009][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.909003][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.926012][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.928420][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.946046][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.949089][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.966073][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.969112][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.986107][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 572.988763][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 572.996544][T13911] usb usb6-port1: unable to enumerate USB device [ 573.006025][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.009129][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.026030][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.028566][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.046171][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.049230][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.065995][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.068438][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.086223][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.088984][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.106135][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.109258][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.126062][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.128924][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.145996][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.148753][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.165998][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.168771][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.185995][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.188661][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.206041][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.208670][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.226011][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.228708][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.246033][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.248584][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.265996][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.268658][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.286022][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.288786][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.306004][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.308944][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.325993][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.328530][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.346031][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.349047][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.366003][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.368855][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.386023][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.388941][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.406030][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.409035][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.426113][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.429123][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.446027][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.449066][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.466049][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.469011][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.486028][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.489258][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.506015][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.509082][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.526029][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.528989][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.546029][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.549153][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.566007][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.569029][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.586000][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.588940][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.606005][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.608956][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.626040][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.629081][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.646035][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.648983][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.666023][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.668576][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.686086][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.688794][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.706248][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.708893][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.726070][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.728548][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.746020][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.749070][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.766053][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.768938][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.786013][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.789006][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.806022][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.808455][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.825986][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.828641][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.846046][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.848487][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.866022][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.868583][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes 18:30:58 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 573.886102][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.888490][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.906070][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.908524][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.926078][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.928999][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.946070][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.949157][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.966019][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.968935][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 573.985981][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 573.988512][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.006040][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.008941][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.026015][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.028942][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.046308][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.049132][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.066137][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.068719][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.086068][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.088563][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.106022][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.108483][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.125983][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.128482][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes 18:30:58 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:30:58 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 574.146043][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 574.149015][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 574.151913][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 18:30:58 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 574.356130][T13911] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 574.366631][ T5229] usb 8-1: reset high-speed USB device number 26 using dummy_hcd [ 574.426219][ T5224] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 574.428807][ T7] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 574.546070][T13911] usb 6-1: device descriptor read/64, error -71 [ 574.666092][ T5224] usb 5-1: Using ep0 maxpacket: 8 [ 574.668681][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 574.746495][T14267] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 574.786243][ T5224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.790175][ T5224] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.793927][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.798289][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.802396][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.806867][ T5224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 574.811803][ T5224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 574.816767][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 574.820790][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.825317][ T5224] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 574.827553][T13911] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 574.830507][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.857620][T14264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 574.867896][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 574.870576][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 574.873635][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 574.875854][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 574.881424][ T5224] hub 5-1:1.0: bad descriptor, ignoring hub [ 574.883570][ T5224] hub: probe of 5-1:1.0 failed with error -5 [ 574.886261][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 574.888611][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 574.891996][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 574.898098][ T5224] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 574.900688][ T5224] cdc_wdm 5-1:1.0: Unknown control protocol [ 575.049217][T13911] usb 6-1: device descriptor read/64, error -71 [ 575.166218][T13911] usb usb6-port1: attempt power cycle [ 575.306126][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.308666][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.326080][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.328700][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.346044][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.348476][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.366026][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.368565][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.386030][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.388443][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.405994][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.408388][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.426014][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.428979][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.446073][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.448928][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.466094][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.469224][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.486017][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 575.489120][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 575.493139][ T2673] usb 8-1: USB disconnect, device number 26 [ 575.506058][T14265] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 575.508089][T14264] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 575.576084][T13911] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 575.626608][ T5224] usb 5-1: USB disconnect, device number 49 [ 575.636701][ T5248] usb 7-1: USB disconnect, device number 36 [ 575.676166][T13911] usb 6-1: device descriptor read/8, error -71 [ 575.956101][T13911] usb 6-1: new high-speed USB device number 32 using dummy_hcd 18:31:00 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:00 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:00 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 576.056126][T13911] usb 6-1: device descriptor read/8, error -71 [ 576.176502][T13911] usb usb6-port1: unable to enumerate USB device [ 576.306032][ T7] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 576.316083][ T2673] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 576.336412][ T5228] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 576.549283][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 576.566026][ T2673] usb 8-1: Using ep0 maxpacket: 8 [ 576.606132][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 576.678052][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.681717][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 576.684916][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 576.690674][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 576.694662][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 576.696258][ T2673] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.698428][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.702951][ T2673] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 576.710046][ T2673] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 576.715209][ T2673] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 576.719443][ T2673] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 576.722699][ T2673] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.726337][T14275] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 576.746181][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.746249][T14274] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 576.750241][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 576.756953][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 576.756968][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.759248][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 576.762804][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 576.762818][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.771502][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 576.773404][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 576.776090][ T2673] hub 8-1:1.0: bad descriptor, ignoring hub [ 576.776909][ T7] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 576.779231][ T2673] hub: probe of 8-1:1.0 failed with error -5 [ 576.779759][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 576.781395][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 576.783580][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 576.791543][ T2673] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 576.794172][ T2673] cdc_wdm 8-1:1.0: Unknown control protocol [ 576.806794][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 576.808964][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 576.811377][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 576.813647][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 576.815522][ T5228] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:31:01 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 577.278701][ T5224] usb 5-1: USB disconnect, device number 50 [ 577.296213][T14276] cdc_wdm 5-1:1.0: Error autopm - -16 [ 577.298443][T14280] cdc_wdm 5-1:1.0: Error autopm - -16 [ 577.386049][ T2673] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 577.416171][ T5211] usb 7-1: USB disconnect, device number 37 [ 577.586002][ T2673] usb 6-1: device descriptor read/64, error -71 [ 577.616225][T13911] usb 8-1: USB disconnect, device number 27 18:31:01 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:01 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 577.856303][ T2673] usb 6-1: new high-speed USB device number 34 using dummy_hcd 18:31:02 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 578.046173][ T2673] usb 6-1: device descriptor read/64, error -71 [ 578.096078][T13911] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 578.096099][ T22] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 578.176121][ T2673] usb usb6-port1: attempt power cycle [ 578.279157][ T5211] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 578.336012][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 578.356492][T13911] usb 7-1: Using ep0 maxpacket: 8 [ 578.456139][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.460205][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 578.463721][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 578.467854][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 578.471912][ T22] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 578.475157][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.496115][T13911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.496393][T14283] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 578.500721][T13911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 578.507423][T13911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.510968][T13911] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 578.514226][T13911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.517927][ T22] hub 5-1:1.0: bad descriptor, ignoring hub [ 578.520742][ T22] hub: probe of 5-1:1.0 failed with error -5 [ 578.523927][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 578.526457][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 578.530522][ T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 578.532881][ T22] cdc_wdm 5-1:1.0: Unknown control protocol [ 578.536229][ T5211] usb 8-1: Using ep0 maxpacket: 8 [ 578.567123][T13911] hub 7-1:1.0: bad descriptor, ignoring hub [ 578.569356][T13911] hub: probe of 7-1:1.0 failed with error -5 [ 578.572035][T13911] cdc_wdm 7-1:1.0: skipping garbage [ 578.574064][T13911] cdc_wdm 7-1:1.0: skipping garbage [ 578.576098][T13911] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 578.596109][ T2673] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 578.679002][ T5211] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.683325][ T5211] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 578.686084][ T2673] usb 6-1: device descriptor read/8, error -71 [ 578.687344][ T5211] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 578.693886][ T5211] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 578.698646][ T5211] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 578.701950][ T5211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.726986][T14287] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 578.747573][ T5211] hub 8-1:1.0: bad descriptor, ignoring hub [ 578.750317][ T5211] hub: probe of 8-1:1.0 failed with error -5 [ 578.752852][ T5211] cdc_wdm 8-1:1.0: skipping garbage [ 578.754726][ T5211] cdc_wdm 8-1:1.0: skipping garbage [ 578.848264][ T5211] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 578.851165][ T5211] cdc_wdm 8-1:1.0: Unknown control protocol [ 578.966047][ T2673] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 579.056164][ T2673] usb 6-1: device descriptor read/8, error -71 [ 579.178097][ T2673] usb usb6-port1: unable to enumerate USB device [ 579.186471][T13911] usb 7-1: USB disconnect, device number 38 [ 579.281342][T13911] usb 5-1: USB disconnect, device number 51 [ 579.408065][ T22] usb 8-1: USB disconnect, device number 28 18:31:03 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:03 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:03 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:04 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 580.066035][ T2673] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 580.106083][ T5229] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 580.106140][ T5224] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 580.306057][ T2673] usb 7-1: Using ep0 maxpacket: 8 [ 580.346012][ T5229] usb 8-1: Using ep0 maxpacket: 8 [ 580.346034][ T5224] usb 5-1: Using ep0 maxpacket: 8 [ 580.396106][ T22] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 580.426207][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.430274][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 580.433459][ T2673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.437415][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 580.440955][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.477243][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 580.479464][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 580.482049][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 580.483897][ T2673] cdc_wdm 7-1:1.0: skipping garbage [ 580.485825][ T2673] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 580.486220][ T5224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.492801][ T5224] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 580.496947][ T5224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 580.502537][ T5224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 580.507784][ T5224] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 580.512062][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.516221][ T5229] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.520941][ T5229] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 580.525148][ T5229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 580.530736][ T5229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 580.536710][ T5229] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 580.540978][ T5229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.546501][T14296] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 580.566587][T14294] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 580.577684][ T5224] hub 5-1:1.0: bad descriptor, ignoring hub [ 580.580454][ T5224] hub: probe of 5-1:1.0 failed with error -5 [ 580.583645][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 580.586226][ T5224] cdc_wdm 5-1:1.0: skipping garbage [ 580.590387][ T5224] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 580.590932][ T5229] hub 8-1:1.0: bad descriptor, ignoring hub [ 580.593106][ T5224] cdc_wdm 5-1:1.0: Unknown control protocol [ 580.595889][ T5229] hub: probe of 8-1:1.0 failed with error -5 [ 580.601856][ T5229] cdc_wdm 8-1:1.0: skipping garbage [ 580.604299][ T5229] cdc_wdm 8-1:1.0: skipping garbage [ 580.606998][ T22] usb 6-1: device descriptor read/64, error -71 [ 580.611961][ T5229] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 580.614824][ T5229] cdc_wdm 8-1:1.0: Unknown control protocol [ 580.886040][ T22] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 580.918295][ T5229] usb 7-1: USB disconnect, device number 39 [ 581.036073][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.039089][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.066051][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.069171][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.076139][ T22] usb 6-1: device descriptor read/64, error -71 [ 581.086121][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.089361][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.106114][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.109277][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.126034][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.129082][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.146125][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.149181][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.166072][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.169223][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.186039][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.189150][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.196300][ T22] usb usb6-port1: attempt power cycle [ 581.205995][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.208428][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.226040][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.228501][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.246023][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.248974][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.266052][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.268763][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.286028][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.288935][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.306039][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.308764][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.325983][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.328687][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.346090][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.348749][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.365976][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.368598][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.385970][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.388393][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.406014][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.408470][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.425995][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.428410][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.446018][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.448814][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.466087][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.468465][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.486015][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.488559][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.506027][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.508614][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.526045][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.528680][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes 18:31:05 executing program 2: syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 581.546049][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.548802][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.566016][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.568510][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.586014][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.588709][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.606073][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.608714][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.616788][ T22] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 581.626061][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.628579][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.646021][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.649078][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.666012][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.668460][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.685979][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.688401][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.706038][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.709042][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.726024][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.729091][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.746088][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.746224][ T22] usb 6-1: device descriptor read/8, error -71 [ 581.749454][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.766085][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.768464][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.786004][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.788801][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.806036][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.809233][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.826038][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.828896][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.845992][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.848869][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.865989][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.868682][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.886044][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.889094][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.906032][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.908987][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.926017][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.929045][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.946036][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.948925][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.966026][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.968955][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 581.986024][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 581.989049][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.006028][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.009115][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.026021][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.026050][ T22] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 582.029110][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.046033][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.049144][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.066023][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.068977][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.086048][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.088597][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.106116][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.109109][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.116140][ T22] usb 6-1: device descriptor read/8, error -71 [ 582.125998][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.128941][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.146004][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.149088][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.166016][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.169106][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.186026][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.188460][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.206008][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.208425][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.225981][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.228671][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.236260][ T22] usb usb6-port1: unable to enumerate USB device [ 582.246086][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.248951][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.265981][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.268480][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.286002][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.289081][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.306050][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.308830][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.325979][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.328423][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.346064][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.348553][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.366006][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.368286][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.386016][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.388329][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.406062][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.408840][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.425982][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.428686][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.446001][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.448722][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.466016][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.468595][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.485996][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.488838][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.505985][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.508586][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.526028][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.528381][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.546037][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.548380][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.566018][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.568420][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.586011][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.588419][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.605995][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.608854][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.626068][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.628484][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.646171][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.648615][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.666030][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.669050][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.686051][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.689104][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.706054][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.708987][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.726031][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.728988][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.746006][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.748845][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.766027][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.768674][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.786018][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.788896][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.806008][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 582.808938][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 582.810309][ T2673] usb 5-1: USB disconnect, device number 52 18:31:06 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 582.811675][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 18:31:06 executing program 2: syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:06 executing program 2: syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:07 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:07 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 583.107596][ T22] usb 8-1: reset high-speed USB device number 29 using dummy_hcd 18:31:07 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:07 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 583.416059][ T5228] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 583.476310][T14304] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 583.606175][ T2673] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 583.608649][ T5228] usb 6-1: device descriptor read/64, error -71 [ 583.865993][ T2673] usb 5-1: Using ep0 maxpacket: 8 [ 583.896106][ T5228] usb 6-1: new high-speed USB device number 42 using dummy_hcd 18:31:08 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 583.986023][ T2673] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.989831][ T2673] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 583.993082][ T2673] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 583.997400][ T2673] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 584.001328][ T2673] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 584.004548][ T2673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.016319][ T812] usb 8-1: USB disconnect, device number 29 [ 584.026301][T14314] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 584.057042][ T2673] hub 5-1:1.0: bad descriptor, ignoring hub [ 584.059215][ T2673] hub: probe of 5-1:1.0 failed with error -5 [ 584.061615][ T2673] cdc_wdm 5-1:1.0: skipping garbage [ 584.063519][ T2673] cdc_wdm 5-1:1.0: skipping garbage [ 584.066605][ T2673] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 584.068775][ T2673] cdc_wdm 5-1:1.0: Unknown control protocol [ 584.096413][ T5228] usb 6-1: device descriptor read/64, error -71 [ 584.216119][ T5228] usb usb6-port1: attempt power cycle 18:31:08 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:08 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 584.580101][ T59] usb 5-1: USB disconnect, device number 53 [ 584.656126][ T5228] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 584.696144][ T2673] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 584.726052][ T5211] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 584.766289][ T5228] usb 6-1: device descriptor read/8, error -71 [ 584.926292][ T5211] usb 7-1: device descriptor read/64, error -71 [ 584.936141][ T2673] usb 8-1: Using ep0 maxpacket: 8 [ 585.045993][ T5228] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 585.076159][ T2673] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.079819][ T2673] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 585.083068][ T2673] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 585.087215][ T2673] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 585.091168][ T2673] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 585.094572][ T2673] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:09 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 585.126400][T14320] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 585.147684][ T2673] hub 8-1:1.0: bad descriptor, ignoring hub [ 585.150351][ T2673] hub: probe of 8-1:1.0 failed with error -5 [ 585.153331][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 585.155467][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 585.156557][ T5228] usb 6-1: device descriptor read/8, error -71 [ 585.159623][ T2673] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 585.162168][ T2673] cdc_wdm 8-1:1.0: Unknown control protocol [ 585.196046][ T5211] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 585.276282][ T5228] usb usb6-port1: unable to enumerate USB device [ 585.386061][ T7] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 585.416060][ T5211] usb 7-1: device descriptor read/64, error -71 [ 585.536141][ T5211] usb usb7-port1: attempt power cycle [ 585.626132][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 585.746144][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.749849][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 585.753069][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 585.756006][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 585.757484][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 585.759565][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 585.768492][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 585.771728][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.776168][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 585.779446][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 585.786300][T14324] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 585.805991][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 585.807376][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 585.808420][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 585.810648][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 585.817884][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 585.820274][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 585.823139][ T7] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 585.825763][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 585.836058][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 585.838943][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 585.852966][ T2673] usb 8-1: USB disconnect, device number 30 [ 585.856060][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 585.858676][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 585.861061][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 585.946000][ T5211] usb 7-1: new high-speed USB device number 42 using dummy_hcd 18:31:10 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 586.036573][ T5211] usb 7-1: device descriptor read/8, error -71 [ 586.326045][ T5211] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 586.336473][ T2673] usb 5-1: USB disconnect, device number 54 18:31:10 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 586.436392][ T5211] usb 7-1: device descriptor read/8, error -71 [ 586.456368][ T812] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 586.560477][ T5211] usb usb7-port1: unable to enumerate USB device [ 586.656100][ T812] usb 6-1: device descriptor read/64, error -71 [ 586.666088][ T22] usb 8-1: new high-speed USB device number 31 using dummy_hcd 18:31:10 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 586.928233][ T22] usb 8-1: Using ep0 maxpacket: 8 [ 586.936133][ T812] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 587.025988][ T7] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 587.066309][ T22] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.070157][ T22] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 587.073373][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 587.077578][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 587.081812][ T22] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 587.085051][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.107418][T14329] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 587.126974][ T22] hub 8-1:1.0: bad descriptor, ignoring hub [ 587.129276][ T22] hub: probe of 8-1:1.0 failed with error -5 [ 587.131994][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 587.134395][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 587.138182][ T22] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 587.141382][ T22] cdc_wdm 8-1:1.0: Unknown control protocol [ 587.156106][ T812] usb 6-1: device descriptor read/64, error -71 [ 587.266176][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 587.276939][ T812] usb usb6-port1: attempt power cycle [ 587.389222][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.393772][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 587.397838][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 587.402828][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 587.407854][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 587.411551][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.436517][T14331] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 18:31:11 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 587.464433][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 587.467172][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 587.470228][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 587.472485][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 587.477831][ T7] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 587.480734][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 587.706030][ T812] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 587.726021][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 587.728954][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 587.746055][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 587.749218][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 587.766008][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 587.768704][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 587.786044][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 587.788925][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 587.805997][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 587.808372][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 587.816273][ T812] usb 6-1: device descriptor read/8, error -71 [ 587.825997][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 587.828379][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 587.832255][ T38] usb 8-1: USB disconnect, device number 31 [ 587.936022][ T5229] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 587.976798][ T22] usb 5-1: USB disconnect, device number 55 [ 588.106043][ T812] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 588.126134][ T5229] usb 7-1: device descriptor read/64, error -71 [ 588.216186][ T812] usb 6-1: device descriptor read/8, error -71 [ 588.337267][ T812] usb usb6-port1: unable to enumerate USB device 18:31:12 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:12 executing program 0: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 588.396101][ T5229] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 588.596225][ T5229] usb 7-1: device descriptor read/64, error -71 [ 588.646076][ T2673] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 588.716282][ T5229] usb usb7-port1: attempt power cycle [ 588.896973][ T2673] usb 8-1: Using ep0 maxpacket: 8 18:31:13 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 589.036139][ T2673] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.040505][ T2673] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 589.044392][ T2673] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 589.050018][ T2673] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 589.054664][ T2673] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 589.058370][ T2673] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.076423][T14336] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 18:31:13 executing program 0: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 589.107019][ T2673] hub 8-1:1.0: bad descriptor, ignoring hub [ 589.109142][ T2673] hub: probe of 8-1:1.0 failed with error -5 [ 589.112210][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 589.114225][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 589.119079][ T2673] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 589.121331][ T2673] cdc_wdm 8-1:1.0: Unknown control protocol [ 589.159512][ T5229] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 589.266080][ T5229] usb 7-1: device descriptor read/8, error -71 [ 589.486078][ T7] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 589.555986][ T5229] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 589.646141][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.646179][ T5229] usb 7-1: device descriptor read/8, error -71 [ 589.649083][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.666089][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.668945][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.686033][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.689050][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.706022][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.709146][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.726066][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.729033][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.736025][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 589.745994][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.748463][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.766014][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.766181][ T5229] usb usb7-port1: unable to enumerate USB device [ 589.769037][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.785989][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.788400][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.805998][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 589.808390][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 589.818486][ T5228] usb 8-1: USB disconnect, device number 32 [ 589.856179][ T7] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 589.860789][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 589.864766][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.870726][ T7] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 589.874611][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:14 executing program 0: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:14 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 590.366099][ T7] usb 6-1: string descriptor 0 read error: -71 [ 590.369609][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 590.371928][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 590.374589][ T7] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 590.406418][ T7] usb 6-1: USB disconnect, device number 49 18:31:14 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 590.636034][ T5228] usb 8-1: new high-speed USB device number 33 using dummy_hcd 18:31:15 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 590.876017][ T5228] usb 8-1: Using ep0 maxpacket: 8 [ 590.936133][ T5229] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 590.996155][ T5228] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.000335][ T5228] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 591.003810][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 591.008776][ T5228] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 591.013321][ T5228] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 591.016694][ T5228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.046865][T14347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 18:31:15 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 591.067921][ T5228] hub 8-1:1.0: bad descriptor, ignoring hub [ 591.070074][ T5228] hub: probe of 8-1:1.0 failed with error -5 [ 591.072413][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 591.074270][ T5228] cdc_wdm 8-1:1.0: skipping garbage [ 591.077112][ T5228] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 591.079161][ T5228] cdc_wdm 8-1:1.0: Unknown control protocol [ 591.126366][ T7] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 591.146024][ T5229] usb 7-1: device descriptor read/64, error -71 [ 591.376091][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 591.416089][ T5229] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 591.509204][ T7] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 591.513018][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 591.516420][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.521550][ T7] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 591.526127][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.626092][ T5229] usb 7-1: device descriptor read/64, error -71 [ 591.746252][ T5229] usb usb7-port1: attempt power cycle 18:31:16 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 592.156028][ T5229] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 592.246269][ T5229] usb 7-1: device descriptor read/8, error -71 [ 592.536045][ T5229] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 592.646276][ T5229] usb 7-1: device descriptor read/8, error -71 [ 592.769396][ T5229] usb usb7-port1: unable to enumerate USB device 18:31:17 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 593.956054][ T5224] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 594.146022][ T5224] usb 7-1: device descriptor read/64, error -71 [ 594.426063][ T5224] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 594.626086][ T5224] usb 7-1: device descriptor read/64, error -71 [ 594.746208][ T5224] usb usb7-port1: attempt power cycle [ 595.166008][ T5224] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 595.256239][ T5224] usb 7-1: device descriptor read/8, error -71 [ 595.526100][ T5224] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 595.629462][ T5224] usb 7-1: device descriptor read/8, error -71 [ 595.749407][ T5224] usb usb7-port1: unable to enumerate USB device [ 595.828312][ T22] usb 8-1: USB disconnect, device number 33 [ 595.833651][T14351] cdc_wdm 8-1:1.0: Error autopm - -16 18:31:19 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 595.837863][T14357] cdc_wdm 8-1:1.0: Error autopm - -16 [ 595.841575][T14358] cdc_wdm 8-1:1.0: Error autopm - -16 18:31:20 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:20 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 595.876130][ T7] usb 6-1: string descriptor 0 read error: -71 [ 595.879437][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 595.882171][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 595.890283][ T7] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 596.110325][ T7] usb 6-1: reset high-speed USB device number 50 using dummy_hcd [ 596.126015][ T22] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 596.396008][ T22] usb 8-1: Using ep0 maxpacket: 8 18:31:20 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 596.546640][ T22] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.550843][ T22] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 596.554216][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 596.559377][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 596.563600][ T22] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 596.567143][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.586424][T14363] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 18:31:20 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 596.606859][ T22] hub 8-1:1.0: bad descriptor, ignoring hub [ 596.609107][ T22] hub: probe of 8-1:1.0 failed with error -5 [ 596.611555][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 596.613767][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 596.616977][ T22] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 596.619260][ T22] cdc_wdm 8-1:1.0: Unknown control protocol [ 596.886131][ T5211] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 597.016802][ T5229] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 597.036056][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 597.039342][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 597.056031][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 597.058508][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 597.071591][ T5248] usb 8-1: USB disconnect, device number 34 [ 597.076551][T14365] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 597.128592][ T5211] usb 5-1: Using ep0 maxpacket: 8 [ 597.196244][ T2673] usb 6-1: USB disconnect, device number 50 [ 597.216031][ T5229] usb 7-1: device descriptor read/64, error -71 [ 597.257776][ T5211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.261451][ T5211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 597.264762][ T5211] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.268437][ T5211] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 597.271812][ T5211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.327912][ T5211] hub 5-1:1.0: bad descriptor, ignoring hub [ 597.330768][ T5211] hub: probe of 5-1:1.0 failed with error -5 [ 597.333841][ T5211] cdc_wdm 5-1:1.0: skipping garbage [ 597.336363][ T5211] cdc_wdm 5-1:1.0: skipping garbage [ 597.338810][ T5211] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 597.486100][ T5229] usb 7-1: new high-speed USB device number 57 using dummy_hcd 18:31:21 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:21 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 597.687244][ T5229] usb 7-1: device descriptor read/64, error -71 [ 597.816089][ T5229] usb usb7-port1: attempt power cycle [ 597.846336][ T7] usb 5-1: USB disconnect, device number 56 [ 597.876465][ T5211] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 597.896046][ T22] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 598.116122][ T5211] usb 6-1: Using ep0 maxpacket: 8 [ 598.146684][ T22] usb 8-1: Using ep0 maxpacket: 8 18:31:22 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 598.251320][ T5229] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 598.256117][ T5211] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.260940][ T5211] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.264932][ T5211] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.270466][ T22] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.270479][ T22] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.274466][ T5211] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 598.278282][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 598.281933][ T5211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.286475][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 598.293881][ T22] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 598.297999][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.316362][T14375] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 598.328048][ T5211] hub 6-1:1.0: bad descriptor, ignoring hub [ 598.330301][ T5211] hub: probe of 6-1:1.0 failed with error -5 [ 598.332712][ T5211] cdc_wdm 6-1:1.0: skipping garbage [ 598.334616][ T5211] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 598.346103][ T5229] usb 7-1: device descriptor read/8, error -71 [ 598.349778][ T22] hub 8-1:1.0: bad descriptor, ignoring hub [ 598.352537][ T22] hub: probe of 8-1:1.0 failed with error -5 [ 598.355540][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 598.358550][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 598.361875][ T22] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 598.364181][ T22] cdc_wdm 8-1:1.0: Unknown control protocol [ 598.516066][ T5238] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 598.626688][ T5229] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 598.727164][ T5229] usb 7-1: device descriptor read/8, error -71 [ 598.756061][ T5238] usb 5-1: Using ep0 maxpacket: 8 [ 598.847501][ T5229] usb usb7-port1: unable to enumerate USB device [ 598.886256][ T5238] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.891007][ T5238] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.894693][ T5238] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.898230][ T5238] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 598.901429][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.936841][ T5238] hub 5-1:1.0: bad descriptor, ignoring hub [ 598.939078][ T5238] hub: probe of 5-1:1.0 failed with error -5 [ 598.941567][ T5238] cdc_wdm 5-1:1.0: skipping garbage [ 598.943514][ T5238] cdc_wdm 5-1:1.0: skipping garbage [ 598.945490][ T5238] cdc_wdm: probe of 5-1:1.0 failed with error -22 18:31:23 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 599.456617][T14377] usb 8-1: reset high-speed USB device number 35 using dummy_hcd 18:31:23 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 599.806406][T14384] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 599.876006][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 599.879014][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 599.896040][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 599.898776][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 599.925991][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 599.928417][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 599.955998][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 599.958960][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 599.966269][ T5249] usb 6-1: USB disconnect, device number 51 [ 599.970914][ T5211] usb 5-1: USB disconnect, device number 57 [ 599.976086][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 599.979142][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 599.986237][ T5238] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 599.996018][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 599.999021][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.026016][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.029037][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.046060][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.049067][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.066131][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.069203][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.096014][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.098751][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.116019][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.118516][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.135984][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.138570][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.156043][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.158919][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.175982][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.178651][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.186155][ T5238] usb 7-1: device descriptor read/64, error -71 [ 600.196131][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.199288][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.215996][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.218707][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.235010][ T22] usb 8-1: USB disconnect, device number 35 [ 600.236093][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 600.240654][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 600.242986][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 600.476110][ T5238] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 600.666028][ T5238] usb 7-1: device descriptor read/64, error -71 18:31:24 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:24 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:24 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 600.796271][ T5238] usb usb7-port1: attempt power cycle [ 601.046038][ T2673] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 601.046059][ T5224] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 601.046074][ T5211] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 601.206025][ T5238] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 601.286077][ T2673] usb 5-1: Using ep0 maxpacket: 8 [ 601.296035][ T5211] usb 6-1: Using ep0 maxpacket: 8 [ 601.306258][ T5238] usb 7-1: device descriptor read/8, error -71 [ 601.309212][ T5224] usb 8-1: Using ep0 maxpacket: 8 [ 601.408025][ T2673] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.411788][ T2673] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.414975][ T2673] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.418877][ T2673] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 601.422125][ T2673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.446145][ T5211] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 601.447739][ T5224] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.449803][ T5211] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.454368][ T5224] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.458614][ T5211] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.462601][ T5224] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 601.467664][ T5211] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 601.472523][ T5224] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 601.475750][ T5211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.480704][ T5224] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 601.487739][ T5224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.488545][ T2673] hub 5-1:1.0: bad descriptor, ignoring hub [ 601.494607][ T2673] hub: probe of 5-1:1.0 failed with error -5 [ 601.497453][ T2673] cdc_wdm 5-1:1.0: skipping garbage [ 601.499611][ T2673] cdc_wdm 5-1:1.0: skipping garbage [ 601.501623][ T2673] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 601.508410][T14391] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 601.541624][ T5224] hub 8-1:1.0: bad descriptor, ignoring hub [ 601.543909][ T5224] hub: probe of 8-1:1.0 failed with error -5 [ 601.546458][ T5224] cdc_wdm 8-1:1.0: skipping garbage [ 601.548374][ T5224] cdc_wdm 8-1:1.0: skipping garbage [ 601.551340][ T5224] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 601.553607][ T5224] cdc_wdm 8-1:1.0: Unknown control protocol [ 601.576131][ T5238] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 601.666285][ T5238] usb 7-1: device descriptor read/8, error -71 [ 601.788939][ T5238] usb usb7-port1: unable to enumerate USB device 18:31:26 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:26 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 603.026008][ T2673] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 603.286032][ T2673] usb 7-1: Using ep0 maxpacket: 8 [ 603.416095][ T2673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.420647][ T2673] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 603.424699][ T2673] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.430700][ T2673] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 603.434836][ T2673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.477730][ T2673] hub 7-1:1.0: bad descriptor, ignoring hub [ 603.480493][ T2673] hub: probe of 7-1:1.0 failed with error -5 [ 603.483763][ T2673] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 606.189780][ T5238] usb 8-1: USB disconnect, device number 36 [ 606.192675][T14389] cdc_wdm 8-1:1.0: Error autopm - -16 [ 606.195210][T14393] cdc_wdm 8-1:1.0: Error autopm - -16 [ 606.198413][T14396] cdc_wdm 8-1:1.0: Error autopm - -16 [ 606.203532][T14399] cdc_wdm 8-1:1.0: Error autopm - -16 18:31:30 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:30 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:30 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 606.236108][ T5211] usb 6-1: string descriptor 0 read error: -71 [ 606.239579][ T5211] hub 6-1:1.0: bad descriptor, ignoring hub [ 606.242366][ T5211] hub: probe of 6-1:1.0 failed with error -5 [ 606.245618][ T5211] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 606.456650][ T5211] usb 6-1: reset high-speed USB device number 52 using dummy_hcd [ 606.536853][ T821] usb 5-1: reset high-speed USB device number 58 using dummy_hcd [ 606.542215][ T22] usb 7-1: reset high-speed USB device number 64 using dummy_hcd [ 606.749076][ T821] usb 5-1: device descriptor read/64, error -71 18:31:31 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 607.036017][ T821] usb 5-1: reset high-speed USB device number 58 using dummy_hcd [ 607.246160][ T821] usb 5-1: device descriptor read/64, error -71 [ 607.248460][ T22] usb 7-1: USB disconnect, device number 64 [ 607.348017][ T5211] usb 6-1: USB disconnect, device number 52 [ 607.526029][ T821] usb 5-1: reset high-speed USB device number 58 using dummy_hcd [ 607.616152][ T821] usb 5-1: device descriptor read/8, error -71 18:31:31 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:31 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:31:31 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 607.899121][ T821] usb 5-1: reset high-speed USB device number 58 using dummy_hcd [ 607.916026][ T5248] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 607.996537][ T821] usb 5-1: device descriptor read/8, error -71 [ 608.036206][ T5249] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 608.116539][ T821] usb 5-1: USB disconnect, device number 58 [ 608.166206][ T5248] usb 7-1: Using ep0 maxpacket: 8 [ 608.285990][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 608.306262][ T5248] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.309929][ T5248] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 608.313170][ T5248] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.318126][ T5248] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 608.321859][ T5248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.357258][ T5248] hub 7-1:1.0: bad descriptor, ignoring hub [ 608.360196][ T5248] hub: probe of 7-1:1.0 failed with error -5 [ 608.363347][ T5248] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:31:32 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 608.406123][ T5249] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 608.410760][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 608.414989][ T5249] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.420788][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 608.424874][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.476044][ T821] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 608.678372][ T5224] usb 7-1: USB disconnect, device number 65 [ 608.696060][ T821] usb 5-1: device descriptor read/64, error -71 [ 608.906120][ T5249] usb 6-1: string descriptor 0 read error: -71 [ 608.909041][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 608.911390][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 608.914343][ T5249] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 608.946431][ T5249] usb 6-1: USB disconnect, device number 53 [ 608.966047][ T821] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 609.166075][ T821] usb 5-1: device descriptor read/64, error -71 18:31:33 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:33 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:33 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 609.286462][ T821] usb usb5-port1: attempt power cycle 18:31:33 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209000005240600010534", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 609.528836][ T22] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 609.666207][ T5249] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 609.696106][ T821] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 609.776046][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 609.787340][ T821] usb 5-1: device descriptor read/8, error -71 [ 609.897220][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.901896][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 609.906055][ T22] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.911858][ T22] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 609.916129][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 609.916143][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:34 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 609.968064][ T22] hub 7-1:1.0: bad descriptor, ignoring hub [ 609.970867][ T22] hub: probe of 7-1:1.0 failed with error -5 [ 609.974077][ T22] cdc_wdm 7-1:1.0: skipping garbage [ 609.977418][ T22] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 610.036200][ T5249] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 610.040318][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.044177][ T5249] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.053153][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 610.057238][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.076076][ T821] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 610.098136][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 610.100614][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 610.103006][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 610.104871][ T5249] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 610.176178][ T821] usb 5-1: device descriptor read/8, error -71 [ 610.246083][ T5211] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 610.286503][ T22] usb 7-1: USB disconnect, device number 66 [ 610.297203][ T821] usb usb5-port1: unable to enumerate USB device [ 610.496075][ T5211] usb 8-1: Using ep0 maxpacket: 8 [ 610.616164][ T5224] usb 6-1: USB disconnect, device number 54 [ 610.619275][ T5211] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.623912][ T5211] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.628054][ T5211] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.632451][ T5211] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 610.636592][ T5211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:34 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 610.678218][ T5211] hub 8-1:1.0: bad descriptor, ignoring hub [ 610.680400][ T5211] hub: probe of 8-1:1.0 failed with error -5 [ 610.683764][ T5211] cdc_wdm 8-1:1.0: skipping garbage [ 610.685707][ T5211] cdc_wdm 8-1:1.0: skipping garbage [ 610.687753][ T5211] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 610.976070][ T821] usb 7-1: new high-speed USB device number 67 using dummy_hcd 18:31:35 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209000005240600010534", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 611.196342][ T59] usb 8-1: USB disconnect, device number 37 [ 611.236001][ T821] usb 7-1: Using ep0 maxpacket: 8 [ 611.296071][ T5224] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 611.386156][ T821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.390159][ T821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 611.393474][ T821] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.398866][ T821] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 611.402147][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.458366][ T821] hub 7-1:1.0: bad descriptor, ignoring hub [ 611.460630][ T821] hub: probe of 7-1:1.0 failed with error -5 [ 611.463044][ T821] cdc_wdm 7-1:1.0: skipping garbage [ 611.464915][ T821] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 611.546077][ T5224] usb 6-1: Using ep0 maxpacket: 8 18:31:35 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 611.666104][ T5224] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 611.669812][ T5224] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 611.672898][ T5224] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.677599][ T5224] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 611.681097][ T5224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.717674][ T5224] hub 6-1:1.0: bad descriptor, ignoring hub [ 611.719954][ T5224] hub: probe of 6-1:1.0 failed with error -5 [ 611.723004][ T5224] cdc_wdm 6-1:1.0: skipping garbage [ 611.725065][ T5224] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 611.779576][ T59] usb 7-1: USB disconnect, device number 67 [ 611.886053][ T821] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 612.146034][ T821] usb 8-1: Using ep0 maxpacket: 8 [ 612.236561][ T5248] usb 6-1: USB disconnect, device number 55 18:31:36 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:36 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 612.276089][ T821] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.279892][ T821] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.283091][ T821] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.286847][ T821] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 612.290410][ T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.349030][ T821] hub 8-1:1.0: bad descriptor, ignoring hub [ 612.351239][ T821] hub: probe of 8-1:1.0 failed with error -5 [ 612.353671][ T821] cdc_wdm 8-1:1.0: skipping garbage [ 612.355579][ T821] cdc_wdm 8-1:1.0: skipping garbage [ 612.358274][ T821] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 612.545994][ T5211] usb 7-1: new high-speed USB device number 68 using dummy_hcd 18:31:36 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209000005240600010534", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 612.716159][ T5248] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 612.796080][ T5211] usb 7-1: Using ep0 maxpacket: 8 [ 612.866260][ T821] usb 8-1: USB disconnect, device number 38 [ 612.916159][ T5248] usb 5-1: device descriptor read/64, error -71 [ 612.916371][ T5211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.923117][ T5211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.927177][ T5249] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 612.930813][ T5211] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.936719][ T5211] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 612.940796][ T5211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.007693][ T5211] hub 7-1:1.0: bad descriptor, ignoring hub [ 613.010414][ T5211] hub: probe of 7-1:1.0 failed with error -5 [ 613.013464][ T5211] cdc_wdm 7-1:1.0: skipping garbage [ 613.015514][ T5211] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 613.188011][ T5248] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 613.206011][ T5249] usb 6-1: Using ep0 maxpacket: 8 18:31:37 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 613.326168][ T5249] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 613.329637][ T5238] usb 7-1: USB disconnect, device number 68 [ 613.330859][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 613.337961][ T5249] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.343221][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 613.346505][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.376079][ T5248] usb 5-1: device descriptor read/64, error -71 [ 613.397727][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 613.400889][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 613.404257][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 613.407224][ T5249] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 613.497418][ T5248] usb usb5-port1: attempt power cycle [ 613.536318][ T2673] usb 8-1: new high-speed USB device number 39 using dummy_hcd 18:31:37 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 613.776038][ T2673] usb 8-1: Using ep0 maxpacket: 8 [ 613.917915][ T2673] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.921868][ T2673] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 613.925085][ T2673] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.926337][ T821] usb 6-1: USB disconnect, device number 56 [ 613.929377][ T2673] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 613.934903][ T2673] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.938120][ T5248] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 613.976977][ T2673] hub 8-1:1.0: bad descriptor, ignoring hub [ 613.979609][ T2673] hub: probe of 8-1:1.0 failed with error -5 [ 613.982517][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 613.985144][ T2673] cdc_wdm 8-1:1.0: skipping garbage [ 613.987368][ T2673] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 614.006004][ T5229] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 614.027912][ T5248] usb 5-1: device descriptor read/8, error -71 [ 614.266028][ T5229] usb 7-1: Using ep0 maxpacket: 8 [ 614.298014][ T5248] usb 5-1: new high-speed USB device number 66 using dummy_hcd 18:31:38 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 614.386356][ T5229] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.390674][ T5229] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 614.393990][ T5229] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.398917][ T5229] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 614.402269][ T5229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.406246][ T5248] usb 5-1: device descriptor read/8, error -71 [ 614.446906][ T5229] hub 7-1:1.0: bad descriptor, ignoring hub [ 614.449203][ T5229] hub: probe of 7-1:1.0 failed with error -5 [ 614.452291][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 614.454401][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 614.456953][ T5229] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 614.496369][ T821] usb 8-1: USB disconnect, device number 39 [ 614.526593][ T5248] usb usb5-port1: unable to enumerate USB device [ 614.596103][ T2673] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 614.776223][ T5224] usb 7-1: USB disconnect, device number 69 [ 614.836273][ T2673] usb 6-1: Using ep0 maxpacket: 8 18:31:39 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 614.966097][ T2673] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.970610][ T2673] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 614.974504][ T2673] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.980434][ T2673] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 614.984403][ T2673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.027587][ T2673] hub 6-1:1.0: bad descriptor, ignoring hub [ 615.030387][ T2673] hub: probe of 6-1:1.0 failed with error -5 [ 615.033557][ T2673] cdc_wdm 6-1:1.0: skipping garbage [ 615.036175][ T2673] cdc_wdm 6-1:1.0: skipping garbage [ 615.038570][ T2673] cdc_wdm: probe of 6-1:1.0 failed with error -22 18:31:39 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 615.168924][ T5238] usb 8-1: new high-speed USB device number 40 using dummy_hcd 18:31:39 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 615.366022][ T5238] usb 8-1: device descriptor read/64, error -71 [ 615.446119][ T5249] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 615.557129][ T821] usb 6-1: USB disconnect, device number 57 [ 615.636043][ T5238] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 615.695981][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 615.756193][ T5211] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 615.818873][ T5249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.822695][ T5249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 615.826087][ T5249] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.831221][ T5249] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 615.834560][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.846129][ T5238] usb 8-1: device descriptor read/64, error -71 [ 615.877387][ T5249] hub 7-1:1.0: bad descriptor, ignoring hub [ 615.879643][ T5249] hub: probe of 7-1:1.0 failed with error -5 [ 615.882059][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 615.884135][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 615.886175][ T5249] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:31:40 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 615.946090][ T5211] usb 5-1: device descriptor read/64, error -71 [ 615.976354][ T5238] usb usb8-port1: attempt power cycle [ 616.196183][ T2673] usb 7-1: USB disconnect, device number 70 [ 616.226033][ T5211] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 616.236086][ T821] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 616.406023][ T5238] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 616.436070][ T5211] usb 5-1: device descriptor read/64, error -71 [ 616.506034][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 616.506713][ T5238] usb 8-1: device descriptor read/8, error -71 [ 616.556282][ T5211] usb usb5-port1: attempt power cycle 18:31:40 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 616.656166][ T821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.660895][ T821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 616.664873][ T821] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.670459][ T821] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 616.674405][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.737398][ T821] hub 6-1:1.0: bad descriptor, ignoring hub [ 616.740125][ T821] hub: probe of 6-1:1.0 failed with error -5 [ 616.743282][ T821] cdc_wdm 6-1:1.0: skipping garbage [ 616.745725][ T821] cdc_wdm 6-1:1.0: skipping garbage [ 616.748400][ T821] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 616.776379][ T5238] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 616.866126][ T5238] usb 8-1: device descriptor read/8, error -71 [ 616.868440][ T5224] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 616.986032][ T5211] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 616.987456][ T5238] usb usb8-port1: unable to enumerate USB device [ 617.076173][ T5211] usb 5-1: device descriptor read/8, error -71 [ 617.106169][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 617.226249][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.230998][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 617.235027][ T5224] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 617.241091][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 617.245056][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.256240][ T5238] usb 6-1: USB disconnect, device number 58 [ 617.287616][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 617.290449][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 617.294189][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 617.296592][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 617.298642][ T5224] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 617.366020][ T5211] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 617.466315][ T5211] usb 5-1: device descriptor read/8, error -71 [ 617.596209][ T5211] usb usb5-port1: unable to enumerate USB device [ 617.606580][ T5249] usb 7-1: USB disconnect, device number 71 18:31:41 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:42 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 617.936412][ T5224] usb 6-1: new high-speed USB device number 59 using dummy_hcd 18:31:42 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 618.186011][ T5224] usb 6-1: Using ep0 maxpacket: 8 18:31:42 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 618.286870][ T5249] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 618.306056][ T5224] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.309470][ T5224] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 618.312386][ T5224] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.316903][ T5224] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 618.320274][ T5224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.357989][ T5224] hub 6-1:1.0: bad descriptor, ignoring hub [ 618.360813][ T5224] hub: probe of 6-1:1.0 failed with error -5 [ 618.363990][ T5224] cdc_wdm 6-1:1.0: skipping garbage [ 618.366510][ T5224] cdc_wdm 6-1:1.0: skipping garbage [ 618.368822][ T5224] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 618.377294][ T821] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 618.546083][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 618.576032][ T821] usb 8-1: device descriptor read/64, error -71 [ 618.678310][ T5249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.682146][ T5249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 618.686061][ T5249] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.690578][ T5249] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 618.693759][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.737056][ T5249] hub 7-1:1.0: bad descriptor, ignoring hub [ 618.739148][ T5249] hub: probe of 7-1:1.0 failed with error -5 [ 618.741569][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 618.743329][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 618.745278][ T5249] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 618.786058][ T59] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 618.856072][ T821] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 618.886408][ T5229] usb 6-1: USB disconnect, device number 59 [ 618.986083][ T59] usb 5-1: device descriptor read/64, error -71 [ 619.058511][ T7] usb 7-1: USB disconnect, device number 72 [ 619.066079][ T821] usb 8-1: device descriptor read/64, error -71 [ 619.196078][ T821] usb usb8-port1: attempt power cycle [ 619.256034][ T59] usb 5-1: new high-speed USB device number 72 using dummy_hcd 18:31:43 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:43 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 619.456455][ T59] usb 5-1: device descriptor read/64, error -71 [ 619.570154][ T7] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 619.576409][ T59] usb usb5-port1: attempt power cycle [ 619.617158][ T821] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 619.706263][ T821] usb 8-1: device descriptor read/8, error -71 [ 619.739450][ T5224] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 619.806181][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 619.926153][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.930030][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 619.933526][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.938575][ T7] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 619.942032][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.976071][ T821] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 619.976083][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 619.986082][ T59] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 619.986970][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 619.991058][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 619.993441][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 619.995286][ T7] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 620.076201][ T821] usb 8-1: device descriptor read/8, error -71 [ 620.086337][ T59] usb 5-1: device descriptor read/8, error -71 [ 620.106100][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.110703][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 620.114842][ T5224] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.119873][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 620.123030][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.166925][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 620.169362][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 620.172024][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 620.174011][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 620.177999][ T5224] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 620.197580][ T821] usb usb8-port1: unable to enumerate USB device [ 620.356006][ T59] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 620.466184][ T59] usb 5-1: device descriptor read/8, error -71 [ 620.486293][ T821] usb 7-1: USB disconnect, device number 73 [ 620.506275][ T2673] usb 6-1: USB disconnect, device number 60 [ 620.586128][ T59] usb usb5-port1: unable to enumerate USB device 18:31:45 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:31:45 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:45 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 621.167106][ T59] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 621.176246][ T2673] usb 6-1: new high-speed USB device number 61 using dummy_hcd 18:31:45 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 621.405979][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 621.416042][ T32] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 621.416097][ T2673] usb 6-1: Using ep0 maxpacket: 8 [ 621.526225][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.530217][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 621.533574][ T59] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.539313][ T59] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 621.543457][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.547244][ T2673] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.551738][ T2673] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 621.555707][ T2673] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.563641][ T2673] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 621.567851][ T2673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.608055][ T59] hub 7-1:1.0: bad descriptor, ignoring hub [ 621.610246][ T59] hub: probe of 7-1:1.0 failed with error -5 [ 621.612604][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 621.614590][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 621.617483][ T2673] hub 6-1:1.0: bad descriptor, ignoring hub [ 621.620018][ T2673] hub: probe of 6-1:1.0 failed with error -5 [ 621.622758][ T2673] cdc_wdm 6-1:1.0: skipping garbage [ 621.624841][ T2673] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 621.626007][ T32] usb 8-1: device descriptor read/64, error -71 [ 621.627329][ T59] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 621.786086][ T821] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 621.896011][ T32] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 621.926211][ T5229] usb 7-1: USB disconnect, device number 74 [ 621.976129][ T821] usb 5-1: device descriptor read/64, error -71 [ 622.096265][ T32] usb 8-1: device descriptor read/64, error -71 [ 622.126291][ T2673] usb 6-1: USB disconnect, device number 61 [ 622.218139][ T32] usb usb8-port1: attempt power cycle [ 622.276124][ T821] usb 5-1: new high-speed USB device number 76 using dummy_hcd 18:31:46 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 622.496091][ T821] usb 5-1: device descriptor read/64, error -71 18:31:46 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 622.596099][ T5249] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 622.616333][ T821] usb usb5-port1: attempt power cycle [ 622.636099][ T32] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 622.726192][ T32] usb 8-1: device descriptor read/8, error -71 [ 622.806174][ T5211] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 622.836143][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 622.966231][ T5249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.970829][ T5249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 622.974889][ T5249] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.980855][ T5249] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 622.984887][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.996156][ T32] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 623.029212][ T5249] hub 7-1:1.0: bad descriptor, ignoring hub [ 623.032073][ T5249] hub: probe of 7-1:1.0 failed with error -5 [ 623.035189][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 623.036008][ T821] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 623.037799][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 623.043347][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 623.045823][ T5249] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 623.048922][ T5211] usb 6-1: Using ep0 maxpacket: 8 [ 623.086410][ T32] usb 8-1: device descriptor read/8, error -71 [ 623.146078][ T821] usb 5-1: device descriptor read/8, error -71 [ 623.166257][ T5211] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.170836][ T5211] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.175103][ T5211] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.180950][ T5211] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 623.185002][ T5211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.209406][ T32] usb usb8-port1: unable to enumerate USB device [ 623.229737][ T5211] hub 6-1:1.0: bad descriptor, ignoring hub [ 623.232481][ T5211] hub: probe of 6-1:1.0 failed with error -5 [ 623.235596][ T5211] cdc_wdm 6-1:1.0: skipping garbage [ 623.238187][ T5211] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 623.346287][ T812] usb 7-1: USB disconnect, device number 75 [ 623.426060][ T821] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 623.526146][ T821] usb 5-1: device descriptor read/8, error -71 [ 623.656261][ T821] usb usb5-port1: unable to enumerate USB device 18:31:47 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 623.756379][ T2673] usb 6-1: USB disconnect, device number 62 18:31:48 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 624.056092][ T821] usb 7-1: new high-speed USB device number 76 using dummy_hcd 18:31:48 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 624.316017][ T821] usb 7-1: Using ep0 maxpacket: 8 18:31:48 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 624.437276][ T812] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 624.440696][ T821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.444566][ T821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 624.448053][ T821] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.449113][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.453612][ T821] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 624.456532][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.460204][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.462997][ T5211] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 624.506928][ T821] hub 7-1:1.0: bad descriptor, ignoring hub [ 624.509151][ T821] hub: probe of 7-1:1.0 failed with error -5 [ 624.511600][ T821] cdc_wdm 7-1:1.0: skipping garbage [ 624.513532][ T821] cdc_wdm 7-1:1.0: skipping garbage [ 624.515469][ T821] cdc_wdm 7-1:1.0: skipping garbage [ 624.518537][ T821] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 624.626102][ T812] usb 8-1: device descriptor read/64, error -71 [ 624.756195][ T5211] usb 6-1: Using ep0 maxpacket: 8 [ 624.796078][ T7] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 624.836204][ T59] usb 7-1: USB disconnect, device number 76 [ 624.886221][ T5211] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.890046][ T5211] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 624.894014][ T5211] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.899307][ T5211] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 624.902610][ T5211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.910069][ T812] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 624.947311][ T5211] hub 6-1:1.0: bad descriptor, ignoring hub [ 624.949710][ T5211] hub: probe of 6-1:1.0 failed with error -5 [ 624.952407][ T5211] cdc_wdm 6-1:1.0: skipping garbage [ 624.954855][ T5211] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 625.056026][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 625.106086][ T812] usb 8-1: device descriptor read/64, error -71 [ 625.176149][ T7] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 625.180823][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 625.184791][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.190622][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 625.194654][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:49 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 625.226321][ T812] usb usb8-port1: attempt power cycle [ 625.466297][ T5211] usb 6-1: USB disconnect, device number 63 [ 625.516185][ T5229] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 625.666147][ T812] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 625.676311][ T7] usb 5-1: string descriptor 0 read error: -71 [ 625.682690][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 625.685386][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 625.688803][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 625.716576][ T7] usb 5-1: USB disconnect, device number 79 [ 625.766297][ T812] usb 8-1: device descriptor read/8, error -71 [ 625.776112][ T5229] usb 7-1: Using ep0 maxpacket: 8 18:31:50 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 625.936652][ T5229] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.941093][ T5229] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 625.944985][ T5229] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.950501][ T5229] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 625.953947][ T5229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.997663][ T5229] hub 7-1:1.0: bad descriptor, ignoring hub [ 625.999931][ T5229] hub: probe of 7-1:1.0 failed with error -5 [ 626.002198][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 626.003982][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 626.005848][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 626.008013][ T5229] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 626.046270][ T812] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 626.136094][ T812] usb 8-1: device descriptor read/8, error -71 [ 626.146079][ T5211] usb 6-1: new high-speed USB device number 64 using dummy_hcd 18:31:50 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 626.269846][ T812] usb usb8-port1: unable to enumerate USB device [ 626.317143][ T5229] usb 7-1: USB disconnect, device number 77 [ 626.386068][ T5211] usb 6-1: Using ep0 maxpacket: 8 [ 626.446101][ T2673] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 626.516138][ T5211] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.520445][ T5211] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.524127][ T5211] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.529046][ T5211] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 626.532234][ T5211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.578392][ T5211] hub 6-1:1.0: bad descriptor, ignoring hub [ 626.581355][ T5211] hub: probe of 6-1:1.0 failed with error -5 [ 626.583752][ T5211] cdc_wdm 6-1:1.0: skipping garbage [ 626.585646][ T5211] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 626.706020][ T2673] usb 5-1: Using ep0 maxpacket: 8 18:31:50 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100001905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 626.846338][ T2673] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 626.850509][ T2673] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.853666][ T2673] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.859095][ T2673] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 626.862653][ T2673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:51 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 627.007251][ T5229] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 627.097512][ T5211] usb 6-1: USB disconnect, device number 64 [ 627.266019][ T5229] usb 7-1: Using ep0 maxpacket: 8 [ 627.336130][ T2673] usb 5-1: string descriptor 0 read error: -71 [ 627.339531][ T2673] hub 5-1:1.0: bad descriptor, ignoring hub [ 627.342285][ T2673] hub: probe of 5-1:1.0 failed with error -5 [ 627.345460][ T2673] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 627.376442][ T2673] usb 5-1: USB disconnect, device number 80 [ 627.406323][ T5229] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.410142][ T5229] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 627.413502][ T5229] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 627.417443][ T5229] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 627.420646][ T5229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.456073][ T59] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 627.458625][ T5229] hub 7-1:1.0: bad descriptor, ignoring hub [ 627.461521][ T5229] hub: probe of 7-1:1.0 failed with error -5 [ 627.464334][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 627.466653][ T5229] cdc_wdm 7-1:1.0: skipping garbage [ 627.469096][ T5229] cdc_wdm: probe of 7-1:1.0 failed with error -22 18:31:51 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 627.646197][ T59] usb 8-1: device descriptor read/64, error -71 [ 627.775987][ T5229] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 627.776197][ T2673] usb 7-1: USB disconnect, device number 78 18:31:51 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 627.926235][ T59] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 628.016092][ T5229] usb 6-1: Using ep0 maxpacket: 8 [ 628.106030][ T821] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 628.116139][ T59] usb 8-1: device descriptor read/64, error -71 [ 628.136490][ T5229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.140608][ T5229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 628.143902][ T5229] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.149426][ T5229] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 628.153191][ T5229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:52 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100001905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 628.197556][ T5229] hub 6-1:1.0: bad descriptor, ignoring hub [ 628.200436][ T5229] hub: probe of 6-1:1.0 failed with error -5 [ 628.203140][ T5229] cdc_wdm 6-1:1.0: skipping garbage [ 628.204943][ T5229] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 628.246198][ T59] usb usb8-port1: attempt power cycle [ 628.376063][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 628.476181][ T812] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 628.516199][ T821] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 628.520234][ T821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 628.523453][ T821] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.528629][ T821] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 628.531912][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.656034][ T59] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 628.726112][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 628.726512][ T7] usb 6-1: USB disconnect, device number 65 [ 628.746196][ T59] usb 8-1: device descriptor read/8, error -71 [ 628.877939][ T812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.882108][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 628.885235][ T812] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 628.889087][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 628.892429][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.941150][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 628.943764][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 628.946537][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 628.948633][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 628.950504][ T812] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 629.016012][ T59] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 629.016127][ T821] usb 5-1: string descriptor 0 read error: -71 [ 629.021949][ T821] hub 5-1:1.0: bad descriptor, ignoring hub [ 629.024138][ T821] hub: probe of 5-1:1.0 failed with error -5 [ 629.026653][ T821] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 629.056507][ T821] usb 5-1: USB disconnect, device number 81 18:31:53 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 629.108258][ T59] usb 8-1: device descriptor read/8, error -71 [ 629.226511][ T59] usb usb8-port1: unable to enumerate USB device [ 629.266225][ T5211] usb 7-1: USB disconnect, device number 79 [ 629.396089][ T7] usb 6-1: new high-speed USB device number 66 using dummy_hcd 18:31:53 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 629.646027][ T7] usb 6-1: Using ep0 maxpacket: 8 18:31:53 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100001905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 629.776274][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.780430][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.784349][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.786176][ T5211] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 629.790249][ T7] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 629.797071][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.847598][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 629.850412][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 629.853153][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 629.855069][ T7] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 629.936117][ T5249] usb 7-1: new high-speed USB device number 80 using dummy_hcd 18:31:54 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 630.036180][ T5211] usb 5-1: Using ep0 maxpacket: 8 [ 630.178540][ T5211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.183275][ T5211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 630.187468][ T5211] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.193259][ T5211] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 630.197863][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 630.200630][ T5211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.247167][ T5211] hub 5-1:1.0: bad descriptor, ignoring hub [ 630.249742][ T5211] hub: probe of 5-1:1.0 failed with error -5 [ 630.252649][ T5211] cdc_wdm 5-1:1.0: skipping garbage [ 630.254853][ T5211] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 630.316412][ T5249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.321492][ T5249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 630.327849][ T5249] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 630.332624][ T5249] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 630.337073][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.376462][ T5248] usb 6-1: USB disconnect, device number 66 [ 630.379326][ T5249] hub 7-1:1.0: bad descriptor, ignoring hub [ 630.382259][ T5249] hub: probe of 7-1:1.0 failed with error -5 [ 630.385823][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 630.388733][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 630.390987][ T5249] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 630.496063][ T32] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 630.696048][ T32] usb 8-1: device descriptor read/64, error -71 [ 630.696203][ T821] usb 7-1: USB disconnect, device number 80 18:31:54 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 630.776321][ T5248] usb 5-1: USB disconnect, device number 82 [ 630.976061][ T32] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 631.080907][ T821] usb 6-1: new high-speed USB device number 67 using dummy_hcd 18:31:55 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 18:31:55 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 631.176210][ T32] usb 8-1: device descriptor read/64, error -71 [ 631.296473][ T32] usb usb8-port1: attempt power cycle [ 631.336061][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 631.386493][ T7] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 631.456148][ T812] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 631.469349][ T821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.474375][ T821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.478974][ T821] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.484943][ T821] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 631.489260][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.528104][ T821] hub 6-1:1.0: bad descriptor, ignoring hub [ 631.531012][ T821] hub: probe of 6-1:1.0 failed with error -5 [ 631.534376][ T821] cdc_wdm 6-1:1.0: skipping garbage [ 631.537002][ T821] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 631.636053][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 631.706004][ T812] usb 5-1: Using ep0 maxpacket: 8 [ 631.726275][ T32] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 631.756280][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.759992][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.763326][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.767947][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 631.771112][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.807661][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 631.809872][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 631.812415][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 631.814326][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 631.826077][ T32] usb 8-1: device descriptor read/8, error -71 [ 631.847400][ T812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.851801][ T812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.855129][ T812] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.859954][ T812] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 631.863216][ T812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.917505][ T812] hub 5-1:1.0: bad descriptor, ignoring hub [ 631.920110][ T812] hub: probe of 5-1:1.0 failed with error -5 [ 631.922543][ T812] cdc_wdm 5-1:1.0: skipping garbage [ 631.924508][ T812] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 632.046150][ T59] usb 6-1: USB disconnect, device number 67 [ 632.109788][ T32] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 632.206088][ T32] usb 8-1: device descriptor read/8, error -71 [ 632.326263][ T32] usb usb8-port1: unable to enumerate USB device [ 632.349894][ T59] usb 7-1: USB disconnect, device number 81 [ 632.436314][ T812] usb 5-1: USB disconnect, device number 83 18:31:56 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:31:56 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 632.736046][ T32] usb 6-1: new high-speed USB device number 68 using dummy_hcd 18:31:56 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 633.006114][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 633.026133][ T5224] usb 7-1: new high-speed USB device number 82 using dummy_hcd 18:31:57 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 633.116030][ T7] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 633.126189][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.130217][ T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.134030][ T32] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.139148][ T32] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 633.142713][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.189497][ T32] hub 6-1:1.0: bad descriptor, ignoring hub [ 633.192300][ T32] hub: probe of 6-1:1.0 failed with error -5 [ 633.195525][ T32] cdc_wdm 6-1:1.0: skipping garbage [ 633.198260][ T32] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 633.286017][ T5224] usb 7-1: Using ep0 maxpacket: 8 [ 633.375967][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 633.406181][ T5224] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.409802][ T5224] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.413267][ T5224] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.420950][ T5224] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 633.424042][ T5224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.467517][ T5224] hub 7-1:1.0: bad descriptor, ignoring hub [ 633.469862][ T5224] hub: probe of 7-1:1.0 failed with error -5 [ 633.472936][ T5224] cdc_wdm 7-1:1.0: skipping garbage [ 633.475233][ T5224] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 633.496295][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.501467][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.505674][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.511487][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 633.515671][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.516164][ T5249] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 633.557736][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 633.560736][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 633.563944][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 633.566757][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 633.706195][ T59] usb 6-1: USB disconnect, device number 68 [ 633.776022][ T5249] usb 8-1: Using ep0 maxpacket: 8 [ 633.916143][ T5249] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 633.920071][ T5249] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.923206][ T5249] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.927750][ T5249] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 633.930935][ T5249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.006602][ T812] usb 7-1: USB disconnect, device number 82 [ 634.076253][ T7] usb 5-1: USB disconnect, device number 84 18:31:58 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 634.379102][ T32] usb 6-1: new high-speed USB device number 69 using dummy_hcd 18:31:58 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) [ 634.416318][ T5249] usb 8-1: string descriptor 0 read error: -71 [ 634.419485][ T5249] hub 8-1:1.0: bad descriptor, ignoring hub [ 634.422130][ T5249] hub: probe of 8-1:1.0 failed with error -5 [ 634.425186][ T5249] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 634.456717][ T5249] usb 8-1: USB disconnect, device number 64 18:31:58 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 634.628164][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 634.706002][ T7] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 634.746186][ T32] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 634.750927][ T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 634.754891][ T32] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.760687][ T32] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 634.764220][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.779279][ T812] usb 5-1: new high-speed USB device number 85 using dummy_hcd 18:31:59 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 634.956018][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 635.046035][ T812] usb 5-1: Using ep0 maxpacket: 8 [ 635.094913][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.098971][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 635.103500][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.108972][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 635.112891][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.159213][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 635.161873][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 635.164972][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 635.167589][ T7] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 635.176194][ T812] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 635.179791][ T812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 635.183051][ T812] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.186151][ T59] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 635.187578][ T812] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 635.193380][ T812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.236213][ T32] usb 6-1: string descriptor 0 read error: -71 [ 635.239101][ T32] hub 6-1:1.0: bad descriptor, ignoring hub [ 635.241251][ T32] hub: probe of 6-1:1.0 failed with error -5 [ 635.243645][ T32] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 635.247385][ T812] hub 5-1:1.0: bad descriptor, ignoring hub [ 635.249880][ T812] hub: probe of 5-1:1.0 failed with error -5 [ 635.252932][ T812] cdc_wdm 5-1:1.0: skipping garbage [ 635.255119][ T812] cdc_wdm 5-1:1.0: skipping garbage [ 635.257627][ T812] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 635.286318][ T32] usb 6-1: USB disconnect, device number 69 [ 635.446108][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 635.576026][ T59] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 635.580144][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 635.585811][ T59] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.592115][ T59] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 635.595634][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.686739][ T5248] usb 7-1: USB disconnect, device number 83 18:31:59 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 635.766306][ T32] usb 5-1: USB disconnect, device number 85 [ 636.007772][ T7] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 636.076329][ T59] usb 8-1: string descriptor 0 read error: -71 18:32:00 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 636.079493][ T59] hub 8-1:1.0: bad descriptor, ignoring hub [ 636.082448][ T59] hub: probe of 8-1:1.0 failed with error -5 [ 636.085340][ T59] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 636.122363][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:32:00 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 636.130751][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.131221][ T59] usb 8-1: USB disconnect, device number 65 [ 636.134289][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:32:00 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 636.255976][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 636.386128][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.390353][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 636.394357][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 636.399148][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 636.403845][ T7] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 636.407873][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.418249][ T812] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 636.436848][ T5229] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 636.437066][T14542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 636.457825][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 636.460569][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 636.463722][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 636.466555][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 636.470594][ T7] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 636.473239][ T7] cdc_wdm 6-1:1.0: Unknown control protocol 18:32:00 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 636.656051][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 636.676112][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 636.776295][ T812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.780419][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 636.784232][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 636.789064][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 636.793798][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 636.797711][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.801671][ T5229] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 636.805485][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 636.810449][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.816020][ T5229] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 636.819672][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.826467][T14546] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 636.836216][ T59] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 636.849171][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 636.851768][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 636.854435][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 636.856490][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 636.859975][ T812] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 636.862629][ T812] cdc_wdm 7-1:1.0: Unknown control protocol [ 636.868806][ T5229] hub 5-1:1.0: bad descriptor, ignoring hub [ 636.871385][ T5229] hub: probe of 5-1:1.0 failed with error -5 [ 636.874189][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 636.876574][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 636.878752][ T5229] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 637.106030][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 637.246114][ T59] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 637.249652][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 637.252749][ T59] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.257498][ T59] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 637.260841][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.476213][ T5249] usb 7-1: USB disconnect, device number 84 [ 641.208234][T14546] cdc_wdm 6-1:1.0: Error autopm - -16 [ 641.208390][ T5238] usb 6-1: USB disconnect, device number 70 [ 641.213623][T14548] cdc_wdm 6-1:1.0: Error autopm - -16 [ 641.216831][T14552] cdc_wdm 6-1:1.0: Error autopm - -16 18:32:05 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 641.220173][T14553] cdc_wdm 6-1:1.0: Error autopm - -16 [ 641.224359][T14550] cdc_wdm 6-1:1.0: Error autopm - -16 18:32:05 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:32:05 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:05 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 641.287205][ T59] usb 8-1: string descriptor 0 read error: -71 [ 641.290394][ T59] hub 8-1:1.0: bad descriptor, ignoring hub [ 641.293138][ T59] hub: probe of 8-1:1.0 failed with error -5 [ 641.296772][ T59] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 641.548125][ T59] usb 8-1: reset high-speed USB device number 66 using dummy_hcd [ 641.577145][ T32] usb 5-1: reset high-speed USB device number 86 using dummy_hcd [ 641.609375][ T5238] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 641.656023][ T5249] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 641.856180][ T5238] usb 6-1: Using ep0 maxpacket: 8 [ 641.906174][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 641.916177][ T59] usb 8-1: device firmware changed [ 641.919214][ T59] usb 8-1: USB disconnect, device number 66 [ 641.976150][ T5238] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.981266][ T5238] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 641.985655][ T5238] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 641.990932][ T5238] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 641.995584][ T5238] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 641.999707][ T5238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.016439][T14559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 642.037679][ T5238] hub 6-1:1.0: bad descriptor, ignoring hub [ 642.040353][ T5238] hub: probe of 6-1:1.0 failed with error -5 [ 642.043569][ T5238] cdc_wdm 6-1:1.0: skipping garbage [ 642.045674][ T5238] cdc_wdm 6-1:1.0: skipping garbage [ 642.046287][ T5249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.049736][ T5238] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 642.052248][ T5249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 642.054491][ T5238] cdc_wdm 6-1:1.0: Unknown control protocol [ 642.062633][ T5249] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 642.067665][ T5249] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 642.071706][ T5249] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 642.074848][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.096588][T14561] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 642.127062][ T5249] hub 7-1:1.0: bad descriptor, ignoring hub [ 642.130010][ T5249] hub: probe of 7-1:1.0 failed with error -5 [ 642.133057][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 642.134941][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 642.138068][ T5249] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 642.140316][ T5249] cdc_wdm 7-1:1.0: Unknown control protocol [ 642.276111][ T59] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 642.513662][ T5248] usb 6-1: USB disconnect, device number 71 [ 642.516367][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 642.638330][ T7] usb 5-1: USB disconnect, device number 86 [ 642.646098][ T59] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.651178][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 642.655667][ T59] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.661944][ T59] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 642.666054][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.706132][ T5238] usb 7-1: USB disconnect, device number 85 [ 642.717106][ T59] hub 8-1:1.0: bad descriptor, ignoring hub [ 642.719307][ T59] hub: probe of 8-1:1.0 failed with error -5 [ 642.724237][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 642.726419][ T59] cdc_wdm: probe of 8-1:1.0 failed with error -22 18:32:07 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 643.077060][ T5238] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 643.106229][ T5248] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 643.247072][ T5229] usb 8-1: USB disconnect, device number 67 [ 643.316186][ T59] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 643.321525][ T5238] usb 7-1: Using ep0 maxpacket: 8 [ 643.366039][ T5248] usb 6-1: Using ep0 maxpacket: 8 [ 643.436085][ T5238] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.439653][ T5238] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.442931][ T5238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 643.446902][ T5238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 643.450770][ T5238] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 643.453968][ T5238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.476595][T14561] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 643.496144][ T5248] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.496923][ T5238] hub 7-1:1.0: bad descriptor, ignoring hub [ 643.500678][ T5248] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.502906][ T5238] hub: probe of 7-1:1.0 failed with error -5 [ 643.507191][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 643.509503][ T5238] cdc_wdm 7-1:1.0: skipping garbage [ 643.514228][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 643.516160][ T5238] cdc_wdm 7-1:1.0: skipping garbage [ 643.517017][ T5238] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 643.521365][ T5248] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 643.523298][ T5238] cdc_wdm 7-1:1.0: Unknown control protocol [ 643.526218][ T5248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.556430][T14559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 643.566043][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 643.582764][ T5248] hub 6-1:1.0: bad descriptor, ignoring hub [ 643.585553][ T5248] hub: probe of 6-1:1.0 failed with error -5 [ 643.588869][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 643.591244][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 643.594925][ T5248] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 643.597833][ T5248] cdc_wdm 6-1:1.0: Unknown control protocol 18:32:07 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 643.686202][ T59] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 643.690247][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.693603][ T59] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.698023][ T59] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 643.701317][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.757610][ T59] hub 5-1:1.0: bad descriptor, ignoring hub [ 643.760196][ T59] hub: probe of 5-1:1.0 failed with error -5 [ 643.762742][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 643.764638][ T59] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 643.816442][ T5238] usb 7-1: USB disconnect, device number 86 [ 643.899674][ T5249] usb 6-1: USB disconnect, device number 72 [ 643.926087][ T7] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 644.176025][ T7] usb 8-1: Using ep0 maxpacket: 8 18:32:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 644.276483][T14361] usb 5-1: USB disconnect, device number 87 18:32:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 644.320097][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.324476][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 644.328905][ T7] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.334414][ T7] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 644.338579][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.387253][ T7] hub 8-1:1.0: bad descriptor, ignoring hub [ 644.390141][ T7] hub: probe of 8-1:1.0 failed with error -5 [ 644.392904][ T7] cdc_wdm 8-1:1.0: skipping garbage [ 644.395078][ T7] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 644.509281][ T812] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 644.586094][ T5249] usb 6-1: new high-speed USB device number 73 using dummy_hcd 18:32:08 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 644.756142][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 644.826039][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 644.886138][ T812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.891006][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 644.897969][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 644.903301][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 644.908783][ T821] usb 8-1: USB disconnect, device number 68 [ 644.913184][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 644.924382][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.946114][ T5249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.950409][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 644.954523][ T5249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 644.956545][T14579] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 644.959965][ T5249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 644.966386][ T5229] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 644.967250][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 644.974135][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.977661][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 644.981067][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 644.984752][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 644.987600][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 644.991398][ T812] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 644.994338][ T812] cdc_wdm 7-1:1.0: Unknown control protocol [ 645.006330][T14581] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 645.037902][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 645.040717][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 645.044078][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 645.047262][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 645.051770][ T5249] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 645.054508][ T5249] cdc_wdm 6-1:1.0: Unknown control protocol [ 645.217463][ T5229] usb 5-1: Using ep0 maxpacket: 8 18:32:09 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 645.336223][ T5229] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 645.341066][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 645.345346][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.351942][ T5229] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 645.357778][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.397560][ T5229] hub 5-1:1.0: bad descriptor, ignoring hub [ 645.400309][ T5229] hub: probe of 5-1:1.0 failed with error -5 [ 645.403000][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 645.404901][ T5229] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 645.596058][ T5249] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 645.706245][ T59] usb 6-1: USB disconnect, device number 73 [ 645.855984][ T5249] usb 8-1: Using ep0 maxpacket: 8 [ 645.986083][ T5249] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.989742][ T5249] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 645.993053][ T5249] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.998331][ T5249] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 646.001767][ T5249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.047592][ T5249] hub 8-1:1.0: bad descriptor, ignoring hub [ 646.050061][ T5249] hub: probe of 8-1:1.0 failed with error -5 [ 646.052697][ T5249] cdc_wdm 8-1:1.0: skipping garbage [ 646.054752][ T5249] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 646.226757][T14579] usb 7-1: reset high-speed USB device number 87 using dummy_hcd [ 646.568996][T14588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 646.636053][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.639004][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.666029][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.669090][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.685996][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.689056][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.706021][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.709470][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.726018][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.729077][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.745998][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.749117][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.766032][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.769142][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.786060][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.789330][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.806048][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.809631][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.826020][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.829136][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.846036][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.849449][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.866051][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.869130][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.886047][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.889065][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.906053][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.908710][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.926047][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.929135][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.946025][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.949404][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.966083][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.968961][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 646.986116][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 646.989037][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.006089][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.009420][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.026045][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.028525][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.046103][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.048560][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.066033][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.068901][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.086045][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.089176][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.106166][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.109068][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.126085][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.128962][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.146019][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.148970][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.166006][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.168828][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.186057][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.188912][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.206115][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.209418][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.226022][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.228895][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.246067][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.249371][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.266077][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.269332][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.286026][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.289420][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.306038][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 647.309075][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 647.311555][ T5229] usb 7-1: USB disconnect, device number 87 [ 647.311910][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 18:32:11 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 647.436473][ T7] usb 5-1: USB disconnect, device number 88 [ 647.436559][ T2673] usb 8-1: USB disconnect, device number 69 [ 647.717871][ T59] usb 6-1: new high-speed USB device number 74 using dummy_hcd 18:32:11 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:11 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:32:11 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 647.878166][ T1085] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 647.888145][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.891734][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:32:12 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 647.986085][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 648.116128][ T5249] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 648.116207][ T5229] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 648.116558][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.116580][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 648.116620][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 648.116643][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 648.116679][ T59] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 648.116699][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.146402][T14593] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 648.167583][ T59] hub 6-1:1.0: bad descriptor, ignoring hub [ 648.170394][ T59] hub: probe of 6-1:1.0 failed with error -5 [ 648.173758][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 648.176280][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 648.180112][ T59] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 648.183014][ T59] cdc_wdm 6-1:1.0: Unknown control protocol [ 648.226161][ T812] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 648.396189][ T5249] usb 8-1: Using ep0 maxpacket: 8 [ 648.405998][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 648.476332][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 648.536173][ T5249] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 648.540513][ T5249] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 648.544577][ T5249] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.547175][ T5229] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 648.550197][ T5249] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 648.553926][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 648.556864][ T5249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.562651][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.568142][ T5229] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 648.571686][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.616839][ T812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.618039][ T5249] hub 8-1:1.0: bad descriptor, ignoring hub [ 648.621222][ T812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 648.623847][ T5249] hub: probe of 8-1:1.0 failed with error -5 [ 648.629398][ T5229] hub 5-1:1.0: bad descriptor, ignoring hub [ 648.631723][ T5249] cdc_wdm 8-1:1.0: skipping garbage [ 648.634222][ T5229] hub: probe of 5-1:1.0 failed with error -5 [ 648.637041][ T5249] cdc_wdm 8-1:1.0: skipping garbage [ 648.640056][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 648.642473][ T5249] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 648.648113][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 648.652858][ T5229] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 648.656008][ T812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 648.661317][ T812] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 648.665532][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.686517][T14601] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 648.707897][ T812] hub 7-1:1.0: bad descriptor, ignoring hub [ 648.710529][ T812] hub: probe of 7-1:1.0 failed with error -5 [ 648.713273][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 648.715142][ T812] cdc_wdm 7-1:1.0: skipping garbage [ 648.789365][ T812] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 648.791829][ T812] cdc_wdm 7-1:1.0: Unknown control protocol [ 648.806057][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.809163][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.826016][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.829185][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.846054][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.849102][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.866033][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.868987][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.886137][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.889347][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.906090][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.908840][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.926027][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.929469][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.946184][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 648.949541][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 648.958928][T14361] usb 6-1: USB disconnect, device number 74 [ 648.966368][T14596] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 649.199703][ T5211] usb 8-1: USB disconnect, device number 70 [ 649.206087][ T5249] usb 5-1: USB disconnect, device number 89 [ 649.286358][ T5228] usb 7-1: USB disconnect, device number 88 18:32:13 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:32:13 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:32:13 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 649.666047][ T5228] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 649.779490][ T5249] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 649.886102][ T5229] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 649.886136][ T5211] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 649.916066][ T5228] usb 7-1: Using ep0 maxpacket: 8 [ 650.037633][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 650.046299][ T5228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.050895][ T5228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.054918][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 650.060183][ T5228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 650.065278][ T5228] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 650.069538][ T5228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.086666][T14601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 650.118252][ T5228] hub 7-1:1.0: bad descriptor, ignoring hub [ 650.121163][ T5228] hub: probe of 7-1:1.0 failed with error -5 [ 650.124366][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 650.126948][ T5228] cdc_wdm 7-1:1.0: skipping garbage [ 650.130793][ T5228] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 650.134368][ T5228] cdc_wdm 7-1:1.0: Unknown control protocol [ 650.146031][ T5211] usb 8-1: Using ep0 maxpacket: 8 [ 650.146035][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 650.186288][ T5249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.190846][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.195050][ T5249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 650.203625][ T5249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 650.208963][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 650.213459][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.236627][T14607] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.260663][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 650.263491][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 650.266312][ T5229] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 650.266849][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 650.270657][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.273075][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 650.274614][ T5249] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 650.277098][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.277123][ T5229] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 650.277133][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.297672][ T5211] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 650.302943][ T5211] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.307136][ T5211] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.313049][ T5211] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 650.317276][ T5249] cdc_wdm 6-1:1.0: Unknown control protocol [ 650.317631][ T5229] hub 5-1:1.0: bad descriptor, ignoring hub [ 650.321266][ T5211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.322492][ T5229] hub: probe of 5-1:1.0 failed with error -5 [ 650.329454][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 650.331851][ T5229] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 650.367722][ T5211] hub 8-1:1.0: bad descriptor, ignoring hub [ 650.370651][ T5211] hub: probe of 8-1:1.0 failed with error -5 [ 650.374012][ T5211] cdc_wdm 8-1:1.0: skipping garbage [ 650.376986][ T5211] cdc_wdm 8-1:1.0: skipping garbage [ 650.379710][ T5211] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 650.448182][ T59] usb 7-1: USB disconnect, device number 89 [ 650.807591][ T5229] usb 6-1: USB disconnect, device number 75 18:32:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 650.847028][ T59] usb 5-1: USB disconnect, device number 90 [ 650.886495][T14361] usb 8-1: USB disconnect, device number 71 [ 651.136060][ T59] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 651.156721][ T5229] usb 6-1: new high-speed USB device number 76 using dummy_hcd 18:32:15 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:32:15 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 651.376177][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 651.416068][ T5229] usb 6-1: Using ep0 maxpacket: 8 [ 651.496146][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.500934][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.504628][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 651.508903][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 651.512840][ T59] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 651.516049][T14361] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 651.517814][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.536535][T14613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 651.556274][ T5248] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 651.558905][ T5229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.560977][ T59] hub 7-1:1.0: bad descriptor, ignoring hub [ 651.564381][ T5229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.568263][ T59] hub: probe of 7-1:1.0 failed with error -5 [ 651.571121][ T5229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 651.574288][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 651.579129][ T5229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 651.579173][ T5229] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 651.579193][ T5229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.594802][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 651.596768][T14607] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 651.600349][ T59] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 651.604372][ T59] cdc_wdm 7-1:1.0: Unknown control protocol [ 651.627584][ T5229] hub 6-1:1.0: bad descriptor, ignoring hub [ 651.630297][ T5229] hub: probe of 6-1:1.0 failed with error -5 [ 651.633320][ T5229] cdc_wdm 6-1:1.0: skipping garbage [ 651.635548][ T5229] cdc_wdm 6-1:1.0: skipping garbage [ 651.640876][ T5229] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 651.643446][ T5229] cdc_wdm 6-1:1.0: Unknown control protocol [ 651.766144][T14361] usb 5-1: Using ep0 maxpacket: 8 [ 651.806058][ T5248] usb 8-1: Using ep0 maxpacket: 8 [ 651.926121][T14361] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 651.926146][ T5248] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 651.930520][T14361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.930566][T14361] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.934361][ T5248] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.938057][T14361] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 651.938079][T14361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.952836][ T5248] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.958673][ T5248] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 651.962328][ T5248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.967771][ T812] usb 6-1: USB disconnect, device number 76 [ 651.997878][T14361] hub 5-1:1.0: bad descriptor, ignoring hub [ 652.000870][T14361] hub: probe of 5-1:1.0 failed with error -5 [ 652.004116][T14361] cdc_wdm 5-1:1.0: skipping garbage [ 652.007545][ T5248] hub 8-1:1.0: bad descriptor, ignoring hub [ 652.010286][ T5248] hub: probe of 8-1:1.0 failed with error -5 [ 652.010457][T14361] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 652.013444][ T5248] cdc_wdm 8-1:1.0: skipping garbage [ 652.020343][ T5248] cdc_wdm 8-1:1.0: skipping garbage [ 652.023155][ T5248] cdc_wdm: probe of 8-1:1.0 failed with error -22 18:32:16 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 652.646072][ T5248] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 652.799503][T14613] usb 7-1: reset high-speed USB device number 90 using dummy_hcd [ 652.896294][ T5248] usb 6-1: Using ep0 maxpacket: 8 [ 653.036401][ T5248] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.040713][ T5248] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 653.044318][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 653.049195][ T5248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 653.053335][ T5248] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 653.056770][ T5248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.079082][T14623] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 653.097766][ T5248] hub 6-1:1.0: bad descriptor, ignoring hub [ 653.100381][ T5248] hub: probe of 6-1:1.0 failed with error -5 [ 653.104288][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 653.106284][ T5248] cdc_wdm 6-1:1.0: skipping garbage [ 653.148458][T14619] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 653.191764][ T5248] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 653.193982][ T5248] cdc_wdm 6-1:1.0: Unknown control protocol [ 653.216015][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 653.218963][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 653.236214][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 653.239152][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 653.265986][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 653.268774][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 653.296042][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 653.298508][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 653.316113][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 653.318717][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 653.321592][ T5211] usb 8-1: USB disconnect, device number 72 [ 653.324957][ T5249] usb 5-1: USB disconnect, device number 91 [ 653.345994][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 653.348651][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 653.376059][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 653.378877][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 653.395538][ T812] usb 7-1: USB disconnect, device number 90 [ 653.636251][T14361] usb 6-1: USB disconnect, device number 77 18:32:18 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:18 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:32:18 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 653.996071][ T812] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 654.196286][T14361] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 654.206051][ T5249] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 654.216165][ T5229] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 654.276127][ T812] usb 6-1: Using ep0 maxpacket: 8 [ 654.406245][ T812] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.410944][ T812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.414986][ T812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 654.420251][ T812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 654.425319][ T812] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 654.429586][ T812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.446198][T14361] usb 5-1: Using ep0 maxpacket: 8 [ 654.446534][T14623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.467625][ T812] hub 6-1:1.0: bad descriptor, ignoring hub [ 654.470337][ T812] hub: probe of 6-1:1.0 failed with error -5 [ 654.473283][ T812] cdc_wdm 6-1:1.0: skipping garbage [ 654.475357][ T812] cdc_wdm 6-1:1.0: skipping garbage [ 654.478284][ T5229] usb 8-1: Using ep0 maxpacket: 8 [ 654.480555][ T812] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 654.483015][ T812] cdc_wdm 6-1:1.0: Unknown control protocol [ 654.486499][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 654.566176][T14361] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 654.570703][T14361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.574826][T14361] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.580575][T14361] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 654.584473][T14361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.606116][ T5229] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 654.610836][ T5229] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.614525][ T5229] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.616147][ T5249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.619866][ T5229] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 654.623422][ T5249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.626814][ T5229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.633069][ T5249] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 654.637463][T14361] hub 5-1:1.0: bad descriptor, ignoring hub [ 654.637480][T14361] hub: probe of 5-1:1.0 failed with error -5 [ 654.637723][T14361] cdc_wdm 5-1:1.0: skipping garbage [ 654.639998][ T5249] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 654.642243][T14361] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 654.644087][ T5249] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 654.655330][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.668631][ T5229] hub 8-1:1.0: bad descriptor, ignoring hub [ 654.671707][ T5229] hub: probe of 8-1:1.0 failed with error -5 [ 654.675268][ T5229] cdc_wdm 8-1:1.0: skipping garbage [ 654.676469][T14628] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 654.678877][ T5229] cdc_wdm 8-1:1.0: skipping garbage [ 654.682878][ T5229] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 654.697721][ T5249] hub 7-1:1.0: bad descriptor, ignoring hub [ 654.700162][ T5249] hub: probe of 7-1:1.0 failed with error -5 [ 654.703151][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 654.705577][ T5249] cdc_wdm 7-1:1.0: skipping garbage [ 654.709170][ T5249] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 654.711356][ T5249] cdc_wdm 7-1:1.0: Unknown control protocol [ 654.796304][ T5248] usb 6-1: USB disconnect, device number 78 [ 655.168936][ T5229] usb 5-1: USB disconnect, device number 92 18:32:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) [ 655.186215][T14361] usb 8-1: USB disconnect, device number 73 [ 655.226211][ T5238] usb 7-1: USB disconnect, device number 91 [ 655.332868][ T37] audit: type=1804 audit(1698431539.470:978): pid=14631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/703/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 655.344927][ T37] audit: type=1804 audit(1698431539.480:979): pid=14631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/703/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 655.394540][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 655.403530][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.406605][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:32:19 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:32:19 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 655.846082][ T5211] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 655.886180][ T5249] usb 8-1: new high-speed USB device number 74 using dummy_hcd 18:32:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) [ 656.096054][ T5211] usb 5-1: Using ep0 maxpacket: 8 [ 656.106199][ T5248] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 656.145337][ T5249] usb 8-1: Using ep0 maxpacket: 8 [ 656.227121][ T5211] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 656.230853][ T5211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 656.234420][ T5211] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.239541][ T5211] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 656.240502][ T37] audit: type=1804 audit(1698431540.390:980): pid=14640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/704/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 656.243008][ T5211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.253428][ T37] audit: type=1804 audit(1698431540.390:981): pid=14640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/704/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 656.268232][ T5249] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 656.271888][ T5249] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 656.275335][ T5249] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.280872][ T5249] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 656.284140][ T5249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.309270][ T1084] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 656.316901][ T5211] hub 5-1:1.0: bad descriptor, ignoring hub [ 656.319794][ T5211] hub: probe of 5-1:1.0 failed with error -5 [ 656.322776][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.322965][ T5211] cdc_wdm 5-1:1.0: skipping garbage [ 656.326367][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.332062][ T5249] hub 8-1:1.0: bad descriptor, ignoring hub [ 656.334279][ T5249] hub: probe of 8-1:1.0 failed with error -5 [ 656.336699][ T5211] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 656.341687][ T5249] cdc_wdm 8-1:1.0: skipping garbage [ 656.344028][ T5249] cdc_wdm 8-1:1.0: skipping garbage [ 656.346586][ T5249] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 656.406385][ T5248] usb 7-1: Using ep0 maxpacket: 8 [ 656.526061][ T5248] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.530059][ T5248] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 656.533282][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 656.537425][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 656.541692][ T5248] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 656.545125][ T5248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.566553][T14638] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 656.587146][ T5248] hub 7-1:1.0: bad descriptor, ignoring hub [ 656.589589][ T5248] hub: probe of 7-1:1.0 failed with error -5 [ 656.592073][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 656.594629][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 656.598531][ T5248] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 656.600766][ T5248] cdc_wdm 7-1:1.0: Unknown control protocol [ 656.849277][T14361] usb 8-1: USB disconnect, device number 74 [ 656.976370][ T5238] usb 5-1: USB disconnect, device number 93 18:32:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) 18:32:21 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:21 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:32:21 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 657.526064][ T5229] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 657.636046][ T5238] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 657.646164][T14361] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 657.766027][ T5229] usb 8-1: Using ep0 maxpacket: 8 [ 657.876103][ T5238] usb 6-1: Using ep0 maxpacket: 8 [ 657.896478][T14361] usb 5-1: Using ep0 maxpacket: 8 [ 657.916336][ T5229] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 657.920256][ T5229] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 657.923463][ T5229] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.929858][ T5229] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 657.934076][ T5229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.987401][ T5229] hub 8-1:1.0: bad descriptor, ignoring hub [ 657.989951][ T5229] hub: probe of 8-1:1.0 failed with error -5 [ 657.992777][ T5229] cdc_wdm 8-1:1.0: skipping garbage [ 657.994968][ T5229] cdc_wdm 8-1:1.0: skipping garbage [ 657.997540][ T5229] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 657.998320][T14642] cdc_wdm 7-1:1.0: Error autopm - -16 [ 658.001299][ T5249] usb 7-1: USB disconnect, device number 92 [ 658.016524][ T5238] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.021064][ T5238] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 658.025261][ T5238] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 658.030746][ T5238] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 658.035673][ T5238] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 658.040277][T14361] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 658.044792][T14361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 658.049853][ T5238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.054502][T14361] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.064726][T14361] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 658.068929][T14361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.076289][T14650] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 658.097723][ T5238] hub 6-1:1.0: bad descriptor, ignoring hub [ 658.100477][ T5238] hub: probe of 6-1:1.0 failed with error -5 [ 658.103554][ T5238] cdc_wdm 6-1:1.0: skipping garbage [ 658.106337][ T5238] cdc_wdm 6-1:1.0: skipping garbage [ 658.110705][T14361] hub 5-1:1.0: bad descriptor, ignoring hub [ 658.113309][T14361] hub: probe of 5-1:1.0 failed with error -5 [ 658.116291][ T5238] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 658.119459][ T5238] cdc_wdm 6-1:1.0: Unknown control protocol [ 658.124652][T14361] cdc_wdm 5-1:1.0: skipping garbage [ 658.127032][T14361] cdc_wdm: probe of 5-1:1.0 failed with error -22 18:32:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 658.556414][ T5248] usb 8-1: USB disconnect, device number 75 [ 658.645754][ T37] audit: type=1804 audit(1698431542.780:982): pid=14657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir3900727001/syzkaller.3vyoua/858/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 658.658883][ T37] audit: type=1804 audit(1698431542.790:983): pid=14657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3900727001/syzkaller.3vyoua/858/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 658.987047][T14652] usb 6-1: reset high-speed USB device number 79 using dummy_hcd [ 659.336604][T14654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 18:32:23 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 659.612252][ T5229] usb 6-1: USB disconnect, device number 79 [ 659.627825][T14655] cdc_wdm 6-1:1.0: Error autopm - -16 [ 659.746250][T14361] usb 5-1: USB disconnect, device number 94 [ 659.756077][ T5248] usb 7-1: new high-speed USB device number 93 using dummy_hcd 18:32:24 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 659.996077][ T5248] usb 7-1: Using ep0 maxpacket: 8 [ 660.116431][ T5248] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.120937][ T5248] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.124948][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 660.130025][ T5248] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 660.135005][ T5248] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a 18:32:24 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 660.139120][ T5248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:32:24 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 660.156535][T14660] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 660.177658][ T5248] hub 7-1:1.0: bad descriptor, ignoring hub [ 660.180428][ T5248] hub: probe of 7-1:1.0 failed with error -5 [ 660.183766][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 660.186322][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 660.190282][ T5248] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 660.192903][ T5248] cdc_wdm 7-1:1.0: Unknown control protocol [ 660.196515][T14361] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 660.426137][ T5238] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 660.436080][ T2673] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 660.436321][T14361] usb 8-1: Using ep0 maxpacket: 8 [ 660.557885][T14361] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.561530][T14361] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.564714][T14361] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.570463][T14361] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 660.574345][T14361] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.618064][T14361] hub 8-1:1.0: bad descriptor, ignoring hub [ 660.620800][T14361] hub: probe of 8-1:1.0 failed with error -5 [ 660.623919][T14361] cdc_wdm 8-1:1.0: skipping garbage [ 660.626507][T14361] cdc_wdm 8-1:1.0: skipping garbage [ 660.628748][T14361] cdc_wdm 8-1:1.0: skipping garbage [ 660.630870][T14361] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 660.676215][ T5238] usb 5-1: Using ep0 maxpacket: 8 [ 660.686430][ T2673] usb 6-1: Using ep0 maxpacket: 8 [ 660.798706][ T5238] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 660.802112][ T5238] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.805095][ T5238] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.810088][ T5238] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 660.813839][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.826181][ T2673] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 660.830801][ T2673] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.834885][ T2673] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.840937][ T2673] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 660.845112][ T2673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.867647][ T5238] hub 5-1:1.0: bad descriptor, ignoring hub [ 660.870283][ T5238] hub: probe of 5-1:1.0 failed with error -5 [ 660.875292][ T5238] cdc_wdm 5-1:1.0: skipping garbage [ 660.879118][ T5238] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 660.897696][ T2673] hub 6-1:1.0: bad descriptor, ignoring hub [ 660.900440][ T2673] hub: probe of 6-1:1.0 failed with error -5 [ 660.903572][ T2673] cdc_wdm 6-1:1.0: skipping garbage [ 660.910421][ T2673] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 661.416776][T14660] usb 7-1: reset high-speed USB device number 93 using dummy_hcd [ 661.786281][T14667] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 662.851225][T14662] cdc_wdm 7-1:1.0: Error autopm - -16 [ 662.853861][T14665] cdc_wdm 7-1:1.0: Error autopm - -16 [ 662.854033][T14361] usb 7-1: USB disconnect, device number 93 [ 662.856608][T14666] cdc_wdm 7-1:1.0: Error autopm - -16 [ 662.861674][T14669] cdc_wdm 7-1:1.0: Error autopm - -16 [ 662.864167][T14670] cdc_wdm 7-1:1.0: Error autopm - -16 [ 662.976282][ T5248] usb 8-1: USB disconnect, device number 76 [ 662.986388][ T5238] usb 6-1: USB disconnect, device number 80 [ 662.996233][ T812] usb 5-1: USB disconnect, device number 95 18:32:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc1, 0xc1, 0xaf, 0x0, 0x45e, 0x46a, 0xb132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x2, 0xa0, 0xd4, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xa}, @uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:32:27 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:27 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01000000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:32:27 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 663.446230][T14361] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 663.646198][ T5248] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 663.676012][ T5249] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 663.676056][ T812] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 663.686076][T14361] usb 7-1: Using ep0 maxpacket: 8 [ 663.807003][T14361] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.811128][T14361] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 663.814787][T14361] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 663.819633][T14361] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 663.824219][T14361] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 663.827717][T14361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.846262][T14672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 663.867090][T14361] hub 7-1:1.0: bad descriptor, ignoring hub [ 663.869313][T14361] hub: probe of 7-1:1.0 failed with error -5 [ 663.871737][T14361] cdc_wdm 7-1:1.0: skipping garbage [ 663.873687][T14361] cdc_wdm 7-1:1.0: skipping garbage [ 663.877896][T14361] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 663.880108][T14361] cdc_wdm 7-1:1.0: Unknown control protocol [ 663.896121][ T5248] usb 8-1: Using ep0 maxpacket: 8 [ 663.935985][ T812] usb 6-1: Using ep0 maxpacket: 8 [ 663.935999][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 664.046103][ T5248] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.049932][ T5248] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 664.053259][ T5248] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.058685][ T5248] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 664.061983][ T5248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.086243][ T5249] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 664.088841][ T812] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 664.090760][ T5249] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 664.094763][ T812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 664.098576][ T5249] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.102072][ T812] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.107229][ T5249] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 664.107252][ T5249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.118120][ T5248] hub 8-1:1.0: bad descriptor, ignoring hub [ 664.120997][ T812] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 664.123347][ T5248] hub: probe of 8-1:1.0 failed with error -5 [ 664.127587][ T812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.133078][ T5248] cdc_wdm 8-1:1.0: skipping garbage [ 664.134967][ T5248] cdc_wdm 8-1:1.0: skipping garbage [ 664.136952][ T5248] cdc_wdm 8-1:1.0: skipping garbage [ 664.138863][ T5248] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 664.147335][ T5249] hub 5-1:1.0: bad descriptor, ignoring hub [ 664.149650][ T5249] hub: probe of 5-1:1.0 failed with error -5 [ 664.152213][ T5249] cdc_wdm 5-1:1.0: skipping garbage [ 664.154162][ T5249] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 664.177673][ T812] hub 6-1:1.0: bad descriptor, ignoring hub [ 664.180348][ T812] hub: probe of 6-1:1.0 failed with error -5 [ 664.182814][ T812] cdc_wdm 6-1:1.0: skipping garbage [ 664.185040][ T812] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 664.908485][T14674] usb 7-1: reset high-speed USB device number 94 using dummy_hcd [ 665.266481][T14679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 665.447109][ T5249] usb 8-1: USB disconnect, device number 77 [ 665.566412][ T5249] usb 7-1: USB disconnect, device number 94 [ 665.576130][T14676] cdc_wdm 7-1:1.0: Error autopm - -16 [ 665.578273][T14678] cdc_wdm 7-1:1.0: Error autopm - -16 [ 665.580537][T14681] cdc_wdm 7-1:1.0: Error autopm - -16 [ 665.582525][T14682] cdc_wdm 7-1:1.0: Error autopm - -16 [ 665.696711][T14361] usb 5-1: USB disconnect, device number 96 [ 665.706596][ T5211] usb 6-1: USB disconnect, device number 81 18:32:29 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a01000019", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:30 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:32:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01000000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 18:32:30 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f010000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 666.146126][ T812] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 666.376074][ T5248] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 666.396075][ T812] usb 8-1: Using ep0 maxpacket: 8 [ 666.398548][ T5229] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 666.399309][ T5249] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 666.526446][ T812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.530333][ T812] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 666.533672][ T812] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.538428][ T812] usb 8-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 666.542100][ T812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.587607][ T812] hub 8-1:1.0: bad descriptor, ignoring hub [ 666.590449][ T812] hub: probe of 8-1:1.0 failed with error -5 [ 666.593674][ T812] cdc_wdm 8-1:1.0: skipping garbage [ 666.596429][ T812] cdc_wdm 8-1:1.0: skipping garbage [ 666.598389][ T812] cdc_wdm 8-1:1.0: skipping garbage [ 666.600301][ T812] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 666.626077][ T5248] usb 7-1: Using ep0 maxpacket: 8 [ 666.646029][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 666.665998][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 666.746096][ T5248] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 666.750168][ T5248] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 666.753706][ T5248] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.759206][ T5248] usb 7-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 666.763064][ T5248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.796253][ T5229] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 666.800254][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 666.803864][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.806216][ T5249] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 666.807086][ T5248] hub 7-1:1.0: bad descriptor, ignoring hub [ 666.807107][ T5248] hub: probe of 7-1:1.0 failed with error -5 [ 666.807417][ T5248] cdc_wdm 7-1:1.0: skipping garbage [ 666.807428][ T5248] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 666.809041][ T5229] usb 5-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 666.813359][ T5249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 666.815884][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.818510][ T5249] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.841392][ T5249] usb 6-1: New USB device found, idVendor=0225, idProduct=d600, bcdDevice=ed.3a [ 666.844708][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.857735][ T5229] hub 5-1:1.0: bad descriptor, ignoring hub [ 666.860550][ T5229] hub: probe of 5-1:1.0 failed with error -5 [ 666.863000][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 666.865063][ T5229] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 666.901492][ T5249] hub 6-1:1.0: bad descriptor, ignoring hub [ 666.903859][ T5249] hub: probe of 6-1:1.0 failed with error -5 [ 666.906478][ T5249] cdc_wdm 6-1:1.0: skipping garbage [ 666.908525][ T5249] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 667.106404][T14361] usb 8-1: USB disconnect, device number 78 [ 667.336408][ T5248] usb 7-1: USB disconnect, device number 95 [ 667.376356][ T812] usb 5-1: USB disconnect, device number 97 [ 667.436338][ T5249] usb 6-1: USB disconnect, device number 82 18:32:31 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a0100001905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 18:32:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) 18:32:31 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200d63aed0000000109025c00020100f92a0904000001020900000524060001053408006f0d240f01000000000000000000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 667.779386][T14361] usb 8-1: new high-speed USB device number 79 using dummy_hcd 18:32:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 667.837549][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:32:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x3af4701e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) [ 667.842639][ T37] audit: type=1804 audit(1698431551.980:984): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir3900727001/syzkaller.3vyoua/862/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 667.853191][ T37] audit: type=1804 audit(1698431551.980:985): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3900727001/syzkaller.3vyoua/862/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 667.854197][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.867045][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.871525][T13127] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 18:32:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x8000) sendfile(r5, r4, 0x0, 0x10000a006) [ 667.883069][T12909] ------------[ cut here ]------------ [ 667.886751][T12909] WARNING: CPU: 1 PID: 12909 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x4ad/0x550 [ 667.891251][T12909] Modules linked in: [ 667.893061][T12909] CPU: 1 PID: 12909 Comm: kworker/u16:0 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 667.898146][T12909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 667.904489][T12909] Workqueue: cfg80211 cfg80211_event_work [ 667.907393][T12909] RIP: 0010:__cfg80211_ibss_joined+0x4ad/0x550 [ 667.910154][T12909] Code: e9 e5 fd ff ff e8 a3 a7 e6 f7 0f 0b e9 6c fe ff ff e8 e7 b7 3b f8 e9 4a fc ff ff e8 9d b7 3b f8 e9 8e fc ff ff e8 83 a7 e6 f7 <0f> 0b e9 99 fc ff ff e8 77 a7 e6 f7 0f 0b e8 e0 b7 3b f8 e9 e2 fb [ 667.919459][T12909] RSP: 0018:ffffc90005aafb70 EFLAGS: 00010293 [ 667.922857][T12909] RAX: 0000000000000000 RBX: ffff88805e5b4c90 RCX: 0000000000000000 [ 667.927029][T12909] RDX: ffff8880614fdb00 RSI: ffffffff89a030ed RDI: ffffffff8ae91320 [ 667.930832][T12909] RBP: ffffc90005aafc20 R08: 0000000000000001 R09: fffffbfff23375de [ 667.934457][T12909] R10: ffffffff919baef7 R11: 0000000000000000 R12: ffff88805e5b4000 [ 667.938118][T12909] R13: 1ffff92000b55f72 R14: 0000000000000000 R15: ffffc90005aafbb0 [ 667.941805][T12909] FS: 0000000000000000(0000) GS:ffff88806b700000(0000) knlGS:0000000000000000 [ 667.946118][T12909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.949251][T12909] CR2: 00005555564178f8 CR3: 0000000029e48000 CR4: 0000000000350ee0 [ 667.952207][T12909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 667.955248][T12909] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 667.958765][T12909] Call Trace: [ 667.959974][T12909] [ 667.961208][T12909] ? show_regs+0x8f/0xa0 [ 667.962878][T12909] ? __warn+0xe6/0x380 [ 667.964517][T12909] ? __cfg80211_ibss_joined+0x4ad/0x550 [ 667.967214][T12909] ? report_bug+0x3bc/0x580 [ 667.969139][T12909] ? handle_bug+0x3c/0x70 [ 667.970983][T12909] ? exc_invalid_op+0x17/0x40 [ 667.972802][T12909] ? asm_exc_invalid_op+0x1a/0x20 [ 667.974830][T12909] ? __cfg80211_ibss_joined+0x4ad/0x550 [ 667.977136][T12909] ? __cfg80211_ibss_joined+0x4ad/0x550 [ 667.979176][T12909] ? reacquire_held_locks+0x4b0/0x4b0 [ 667.981167][T12909] ? cfg80211_ibss_joined+0x590/0x590 [ 667.983213][T12909] ? mark_held_locks+0x9f/0xe0 [ 667.985008][T12909] ? cfg80211_process_wdev_events+0x407/0x5f0 [ 667.987410][T12909] cfg80211_process_wdev_events+0x407/0x5f0 [ 667.989530][T12909] cfg80211_process_rdev_events+0x9f/0x130 [ 667.991686][T12909] cfg80211_event_work+0x2b/0x40 [ 667.993602][T12909] process_one_work+0x884/0x15c0 [ 667.995390][T12909] ? lock_sync+0x190/0x190 [ 667.997136][T12909] ? init_worker_pool+0x770/0x770 [ 667.998985][T12909] ? assign_work+0x1a0/0x240 [ 668.000754][T12909] worker_thread+0x8b9/0x1290 [ 668.002475][T12909] ? process_one_work+0x15c0/0x15c0 [ 668.004401][T12909] kthread+0x33c/0x440 [ 668.006026][T12909] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.008197][T12909] ? kthread_complete_and_exit+0x40/0x40 [ 668.010504][T12909] ret_from_fork+0x45/0x80 [ 668.012768][T12909] ? kthread_complete_and_exit+0x40/0x40 [ 668.015246][T12909] ret_from_fork_asm+0x11/0x20 [ 668.017323][T12909] [ 668.018719][T12909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 668.019278][ T37] audit: type=1804 audit(1698431552.170:986): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/712/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 668.031537][ T37] audit: type=1804 audit(1698431552.170:987): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2602339311/syzkaller.58vxUX/712/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 668.043555][T12909] CPU: 1 PID: 12909 Comm: kworker/u16:0 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 668.048051][T12909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 668.053090][T12909] Workqueue: cfg80211 cfg80211_event_work [ 668.056013][T12909] Call Trace: [ 668.057802][T12909] [ 668.059198][T12909] dump_stack_lvl+0xd9/0x1b0 [ 668.061875][T12909] panic+0x6a6/0x750 [ 668.063853][T12909] ? panic_smp_self_stop+0xa0/0xa0 [ 668.066596][T12909] ? __cfg80211_ibss_joined+0x4ad/0x550 [ 668.069628][T12909] check_panic_on_warn+0xab/0xb0 [ 668.072379][T12909] __warn+0xf2/0x380 [ 668.074188][T12909] ? __cfg80211_ibss_joined+0x4ad/0x550 [ 668.076129][T14361] usb 8-1: Using ep0 maxpacket: 8 [ 668.076394][ T812] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 668.081851][T12909] report_bug+0x3bc/0x580 [ 668.083971][T12909] handle_bug+0x3c/0x70 [ 668.085856][T12909] exc_invalid_op+0x17/0x40 [ 668.087955][T12909] asm_exc_invalid_op+0x1a/0x20 [ 668.090324][T12909] RIP: 0010:__cfg80211_ibss_joined+0x4ad/0x550 [ 668.093262][T12909] Code: e9 e5 fd ff ff e8 a3 a7 e6 f7 0f 0b e9 6c fe ff ff e8 e7 b7 3b f8 e9 4a fc ff ff e8 9d b7 3b f8 e9 8e fc ff ff e8 83 a7 e6 f7 <0f> 0b e9 99 fc ff ff e8 77 a7 e6 f7 0f 0b e8 e0 b7 3b f8 e9 e2 fb [ 668.101187][T12909] RSP: 0018:ffffc90005aafb70 EFLAGS: 00010293 [ 668.103679][T12909] RAX: 0000000000000000 RBX: ffff88805e5b4c90 RCX: 0000000000000000 [ 668.106796][T12909] RDX: ffff8880614fdb00 RSI: ffffffff89a030ed RDI: ffffffff8ae91320 [ 668.109887][T12909] RBP: ffffc90005aafc20 R08: 0000000000000001 R09: fffffbfff23375de [ 668.112972][T12909] R10: ffffffff919baef7 R11: 0000000000000000 R12: ffff88805e5b4000 [ 668.116063][T12909] R13: 1ffff92000b55f72 R14: 0000000000000000 R15: ffffc90005aafbb0 [ 668.119112][T12909] ? __cfg80211_ibss_joined+0x4ad/0x550 [ 668.121330][T12909] ? reacquire_held_locks+0x4b0/0x4b0 [ 668.123565][T12909] ? cfg80211_ibss_joined+0x590/0x590 [ 668.125594][T12909] ? mark_held_locks+0x9f/0xe0 [ 668.127421][T12909] ? cfg80211_process_wdev_events+0x407/0x5f0 [ 668.129583][T12909] cfg80211_process_wdev_events+0x407/0x5f0 [ 668.131727][T12909] cfg80211_process_rdev_events+0x9f/0x130 [ 668.134994][T12909] cfg80211_event_work+0x2b/0x40 [ 668.137279][T12909] process_one_work+0x884/0x15c0 [ 668.139508][T12909] ? lock_sync+0x190/0x190 [ 668.141624][T12909] ? init_worker_pool+0x770/0x770 [ 668.144028][T12909] ? assign_work+0x1a0/0x240 [ 668.146405][T12909] worker_thread+0x8b9/0x1290 [ 668.148394][T12909] ? process_one_work+0x15c0/0x15c0 [ 668.150836][T12909] kthread+0x33c/0x440 [ 668.152683][T12909] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.155261][T12909] ? kthread_complete_and_exit+0x40/0x40 [ 668.158198][T12909] ret_from_fork+0x45/0x80 [ 668.160669][T12909] ? kthread_complete_and_exit+0x40/0x40 [ 668.163543][T12909] ret_from_fork_asm+0x11/0x20 [ 668.165531][T12909] [ 668.167623][T12909] Kernel Offset: disabled [ 668.169379][T12909] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:32:32 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc900296977d0 RCX=0000000000000000 RDX=1ffff920052d2f03 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90029697750 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8a60008b R13=0000000000000000 R14=ffffc90029697890 R15=ffffc90029697805 RIP=ffffffff813a57c8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f91e4d8d280 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f849000 CR3=000000001bc20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000000000 Opmask02=00000000ffffbdff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffffffff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 377961bae4f09c84 73732604630c535c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737371d2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d305b705d392d30 5b6b6c6270736d00 5d392d305b705d39 2d300064696b6c62 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d105b505d190d10 5b4b4c4250534d00 5d190d105b505d19 0d100044494b4c42 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 440a12c99783eff7 00005577107e77b7 00000000000002e1 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 440a12c99783eff7 00005577107e27c8 0000000000000111 0000000000000033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64002f656c75652f 6d2f7379732f001f 7373616c632f7379 732f002f7375622f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 777f7f7f7f7fffff 7f7f7f7b777fffbf 7b7b77ffe3fffffb 7f6f6f7f777f7e6f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a00383238 3a264c3f383a264e 3f383a26483f383a 264b3f383a264b3e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000373236353734 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002d 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff849b1fd5 RDI=ffffffff925350e0 RBP=ffffffff925350a0 RSP=ffffc90005aaf568 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=000000000000005d R14=ffffffff849b1f70 R15=0000000000000000 RIP=ffffffff849b1fff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555564178f8 CR3=0000000029e48000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc2b51660 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00007fafe83614c0 RBX=00007fafe8361448 RCX=ffffffff813a70e6 RDX=ffffffff813a70e6 RSI=ffffffff813a70e6 RDI=00007fafe83614e0 RBP=00007fafe8361428 RSP=00007ffde1520640 R8 =00007fafe8361480 R9 =00000000000011e7 R10=00000000813a582d R11=0000000000000246 R12=00007fafe8361420 R13=0000000000000012 R14=00007fafe8990000 R15=00007fafe899c018 RIP=00007fafe8838609 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555833480 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f854000 CR3=000000001e847000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000004000 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813a70e6 ffffffff813a70e6 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813a70e6 ffffffff813a70e6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813a70e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe88c7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe88c7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe88c7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe88c7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe88c7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe88c7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963685f74622465 7469727700747069 7263735f746d666e 6962246574697277 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000813a7821 RBX=00007f9017d9c018 RCX=0000000000003b48 RDX=00000000813a7821 RSI=00007f9017600008 RDI=000000000000812e RBP=00000000813a7821 RSP=00007ffc97a91af0 R8 =0000001b30020000 R9 =0000000000001821 R10=00000000813a7825 R11=0000000000000246 R12=0000000000003b48 R13=0000000000000001 R14=00007f9017d90000 R15=ffffffff813a7f1d RIP=00007f9017c38786 RFL=00000293 [--S-A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556416480 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2fa23000 CR3=0000000021ff0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000020180c0f Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812eb7cd ffffffff812eb76d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff812eb76d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9017cc7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9017cc7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9017cc7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9017cc7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9017cc7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9017cc7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30386c6e2464695f 796c696d61665f74 65675f6b6e696c74 656e65675f7a7973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000