Interval 255, changing to 11 [ 812.093342][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.104092][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.114582][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 812.125140][ T4153] usb 3-1: unable to get BOS descriptor or descriptor too short [ 812.133019][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 812.140643][T23781] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.143859][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 812.158654][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.177431][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.229975][ T17] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.240871][T10180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 812.241521][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.257733][ T17] usb 4-1: Product: syz [ 812.262011][ T17] usb 4-1: Manufacturer: syz [ 812.266631][ T17] usb 4-1: SerialNumber: syz [ 812.281161][ T4153] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 812.289083][ T4153] usb 3-1: can't read configurations, error -22 [ 812.299887][ T5] cdc_ncm 2-1:1.0: bind() failure [ 812.310733][ T17] cdc_ncm 4-1:1.0: bind() failure [ 812.319478][ T5] cdc_ncm 2-1:1.1: bind() failure [ 812.339966][T10180] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 812.340848][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.348668][T10180] usb 5-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 812.363810][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.368391][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.379073][T23781] usb 1-1: Product: syz [ 812.392928][T23781] usb 1-1: Manufacturer: syz [ 812.397719][T23781] usb 1-1: SerialNumber: syz [ 812.400748][ T5] usb 2-1: USB disconnect, device number 92 [ 812.432387][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.449581][T18901] usb 6-1: Product: syz [ 812.450971][T23781] usb 1-1: selecting invalid altsetting 1 [ 812.459913][T10180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 812.469024][T18901] usb 6-1: Manufacturer: syz [ 812.474190][T10180] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.496980][T18901] usb 6-1: SerialNumber: syz 12:57:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) r2 = signalfd4(r1, &(0x7f0000000140)={[0x10000]}, 0x8, 0x800) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)) fcntl$setstatus(r0, 0x4, 0x42800) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x0, 0x3a, 0x1, r0, 0x0, &(0x7f0000000000)={0x9c090c, 0x1ff, [], @value64=0x1}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x1000, &(0x7f00000007c0)="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", 0x7, 0x3, 0x8, 0xffff, 0x6, 0x2, 0x1f, 'syz1\x00'}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xfffffff8, 0x5, 0xd76, 0xfff, 0x11, "976bd04e2d50a6ec0c504876e1270889fae0bb"}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 812.533279][ T28] audit: type=1800 audit(1589633858.384:13): pid=777 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15751 res=0 [ 812.559784][ T17] usb 4-1: USB disconnect, device number 87 [ 812.559857][ T4153] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 812.575434][T18901] usb 6-1: can't set config #1, error -71 [ 812.599905][T18901] usb 6-1: USB disconnect, device number 79 [ 812.670211][T23781] cdc_ncm 1-1:1.0: bind() failure [ 812.724042][T23781] cdc_ncm 1-1:1.1: bind() failure 12:57:38 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x3448}], 0x1) [ 812.790372][T23781] usb 1-1: USB disconnect, device number 116 [ 812.843184][T10180] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.880549][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.888705][T10180] usb 5-1: Product: syz [ 812.916125][T10180] usb 5-1: Manufacturer: syz [ 812.925039][ T4153] usb 3-1: unable to get BOS descriptor or descriptor too short [ 812.950774][T10180] usb 5-1: can't set config #1, error -71 [ 812.958069][T10180] usb 5-1: USB disconnect, device number 110 [ 813.070539][ T4153] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 813.078552][ T4153] usb 3-1: can't read configurations, error -22 [ 813.085830][ T5] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 813.093750][ T4153] usb usb3-port1: attempt power cycle [ 813.189893][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 813.239838][T18901] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 813.349903][T18901] usb 6-1: Using ep0 maxpacket: 32 [ 813.355194][T10180] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 813.379985][T21384] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 813.419923][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.430407][T23781] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 813.434331][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.448924][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 813.459238][T10180] usb 5-1: Invalid ep0 maxpacket: 512 [ 813.466215][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 813.476717][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 813.482112][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 813.492839][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 813.540979][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 813.570928][T21384] usb 4-1: unable to get BOS descriptor or descriptor too short [ 813.610647][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.621720][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.633468][T10180] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 813.641582][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 813.653436][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 813.665736][T21384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.676444][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.685649][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 813.696728][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.705208][T21384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 813.714525][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 813.724731][ T5] usb 2-1: Product: syz [ 813.728884][ T5] usb 2-1: Manufacturer: syz [ 813.734194][T21384] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.740518][T23781] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.747920][T10180] usb 5-1: Invalid ep0 maxpacket: 512 [ 813.761711][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.762673][ T5] usb 2-1: SerialNumber: syz [ 813.774543][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.779498][T10180] usb usb5-port1: attempt power cycle 12:57:39 executing program 1: r0 = open(&(0x7f0000000940)='./file0\x00', 0x0, 0x40) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x80, 0x1, 0x8}}, 0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x140a, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040800}, 0x4004040) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a44000010203070000000000000000000904000001020d0000052406000105240000000d000006241a8000000905810300000000ec0904010000020d00000904010102020d00000905820200000000000905030200"/110], &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r3, 0x0, &(0x7f00000000c0)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) dup3(r4, r1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x1555a1681457a72f) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000880), 0x4) preadv(r3, &(0x7f0000000800)=[{&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000700)=""/146, 0x92}, {&(0x7f00000007c0)=""/28, 0x1c}], 0x8, 0xfff) [ 813.849769][ T4153] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 813.857646][ T5] usb 2-1: can't set config #1, error -71 [ 813.872788][ T5] usb 2-1: USB disconnect, device number 93 [ 813.940155][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.953711][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.970832][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.980975][T21384] usb 4-1: Product: syz [ 813.990465][T21384] usb 4-1: Manufacturer: syz [ 814.000823][T21384] usb 4-1: SerialNumber: syz [ 814.002694][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.023665][T23781] usb 1-1: Product: syz [ 814.027843][T23781] usb 1-1: Manufacturer: syz [ 814.032868][T23781] usb 1-1: SerialNumber: syz [ 814.039887][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 814.061537][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.071696][T21384] cdc_ncm 4-1:1.0: bind() failure [ 814.074198][T23781] usb 1-1: selecting invalid altsetting 1 [ 814.113312][T18901] usb 6-1: Product: syz [ 814.131512][T18901] usb 6-1: Manufacturer: syz [ 814.151784][T18901] usb 6-1: SerialNumber: syz 12:57:40 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x4, [{0xdc, &(0x7f0000000280)=@string={0xdc, 0x3, "86372632714b6a8a3127c108e6ce824e810c816501b90c66625827288ec4512feda043790d8ba1514a7d45374e2336699ebd8041236c963af02890c61ec9ae6884d9f027d9ea5ee49ee43bce457b4d2442f94ea0840f7fd979afe29e139f3df7d9866956842554fa2e6fdd9e041ab391f4b87e43b9c8d03ee59e0870503e6026107c14e2f8e5b4fe8a9b66a1417be0bf622ad7db571d7dd72b3d1e4ec1f3f4898826257c29c74a27073593f2b3197a7933e4e8353b48288ccad423f3d147f21586777ca262f66d82e7472753e0901660bd0b9f72ac8d7f18ed2d"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x448}}, {0x80, &(0x7f0000000040)=@string={0x80, 0x3, "2c02e5471a59da5c5d62449284b68c1e920be470d4131e22677b356b7115b3fadcd761e040b8400d8d083495c743ca55afb1c49d9253c015825d29b6a2bd301ba816c82153e0042f945b2ebd03f7ac85bf758c7c943bbaacbdeeaad020dc4e6f75cc26594fde894184721c56cf79215d8d422f486740b9294045791d4755"}}, {0xa2, &(0x7f0000000380)=@string={0xa2, 0x3, "5858e1830aa5803098ff301e37c1aac9c9353543228149c34936588c7f530d76f8322dc98fd2a7fb285af7b9d15bf6f46ad1b78f2db657eb86a10373a6a323ef35438a57aeb9e021a7c43419beadc1e57ecf5d1e127911c759f3808997026668e32b225474ed96a6fd9d75a1ae6ec3ea8d86caf38c8bc2812548fb8b63c1c7352a40aadc5d4d44ce2054bb872bad25116711988058ce9de2488f63a769509c12"}}]}) [ 814.279963][ T17] usb 4-1: USB disconnect, device number 88 [ 814.292275][ T4153] usb 3-1: unable to get BOS descriptor or descriptor too short [ 814.309779][T23781] cdc_ncm 1-1:1.0: bind() failure 12:57:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f00000000c0)={0x0, 0x50007, "5ead0afbe8f8a0f60a31760a7cb6630cd74ab0abf0920972", {0x8, 0x26ab}, 0x3ff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$NBD_DO_IT(r0, 0xab04) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0xfffffffffffffffd, 0x1, 0x1, 0x8, [{0x1000, 0xffffffffffffffe1, 0xfffffffffffffff7, [], 0x1}, {0x5, 0x0, 0x3, [], 0x2}, {0x9, 0x7f, 0x2, [], 0x2}, {0x3, 0xffffffff, 0xffffffff, [], 0x1c0c}, {0x6, 0x9, 0x7, [], 0x1100}, {0x3, 0xf90, 0x4bac, [], 0x208}, {0x3, 0x562, 0x6, [], 0x200}, {0x7, 0x200, 0x1, [], 0x400}]}) syz_usb_connect$cdc_ncm(0x0, 0xe3, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7ff}, {0x6}, [@mdlm_detail={0x71, 0x24, 0x13, 0x0, "8dfb3bd89c55a9b0c43a7675f539c093a651feba767b66a84aa0a6a7fd220f8e0ddf8713ec12f11c4722d9ef354fd4a863d4fbf1e29f2aa42379b992ec2a397df4b8e4ab2367145b03d12ffe63e76a0be1d6c428b7b700102700613570992761f177135a4a45bf2dc134e7f9fa"}, @acm={0x4, 0x24, 0x2, 0x2}]}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 814.336885][T23781] cdc_ncm 1-1:1.1: bind() failure 12:57:40 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ca0d00000000"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0x9) [ 814.375540][T23781] usb 1-1: USB disconnect, device number 117 [ 814.432107][ T5] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 814.457440][ T903] block nbd0: shutting down sockets [ 814.463004][ T4153] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 814.470826][T18901] cdc_ncm 6-1:1.0: bind() failure [ 814.478935][T18901] cdc_ncm 6-1:1.1: bind() failure [ 814.489725][ T4153] usb 3-1: can't read configurations, error -71 [ 814.516246][T18901] usb 6-1: USB disconnect, device number 80 [ 814.526567][T10180] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 814.540475][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 814.779819][T10180] usb 5-1: Invalid ep0 maxpacket: 512 [ 814.789891][ T17] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 814.809887][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 814.817624][ T5] usb 2-1: can't read configurations, error -61 [ 814.859768][ T4153] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 814.880007][ T17] usb 4-1: Using ep0 maxpacket: 32 12:57:40 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x100, 0x0, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) [ 814.899978][T23781] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 814.939729][T10180] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 814.970550][ T5] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 814.989802][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 815.060019][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 815.079762][ T17] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.091369][ T17] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.101358][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.112095][ T17] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 815.121909][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 815.129720][ T4153] usb 3-1: Using ep0 maxpacket: 32 [ 815.132199][ T17] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 815.179690][T10180] usb 5-1: Invalid ep0 maxpacket: 512 [ 815.185345][T10180] usb usb5-port1: unable to enumerate USB device [ 815.189812][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.202863][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.213325][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.223766][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 815.233955][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 815.244052][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 815.260522][T18901] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 815.300532][ T4153] usb 3-1: unable to get BOS descriptor or descriptor too short [ 815.320953][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 815.328504][ T5] usb 2-1: can't read configurations, error -61 [ 815.335779][ T5] usb usb2-port1: attempt power cycle [ 815.370465][T18901] usb 6-1: Using ep0 maxpacket: 32 [ 815.390512][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.401541][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.410437][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.413327][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.423518][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.430857][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 815.438640][T23781] usb 1-1: Product: syz [ 815.449306][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 815.456506][T23781] usb 1-1: Manufacturer: syz [ 815.462611][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 815.466858][T23781] usb 1-1: SerialNumber: syz [ 815.609815][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.620987][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.631987][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 815.642400][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 815.652830][ T4153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.661966][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 815.672505][ T4153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.681299][ T4153] usb 3-1: Product: syz [ 815.685535][ T4153] usb 3-1: Manufacturer: syz [ 815.691172][ T4153] usb 3-1: SerialNumber: syz [ 815.761977][T23781] cdc_ncm 1-1:1.0: bind() failure [ 815.771587][T23781] cdc_ncm 1-1:1.1: bind() failure [ 815.783351][T23781] usb 1-1: USB disconnect, device number 118 12:57:41 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) [ 815.899693][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.908820][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.917635][T18901] usb 6-1: Product: syz [ 815.922257][T18901] usb 6-1: Manufacturer: syz [ 815.926901][T18901] usb 6-1: SerialNumber: syz [ 815.969729][ T4153] cdc_ncm 3-1:1.0: bind() failure [ 816.000548][ T4153] cdc_ncm 3-1:1.1: bind() failure [ 816.025032][ T4153] usb 3-1: USB disconnect, device number 75 [ 816.069720][ T5] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 816.219656][T18901] cdc_ncm 6-1:1.0: bind() failure [ 816.228172][T18901] cdc_ncm 6-1:1.1: bind() failure [ 816.247399][T18901] usb 6-1: USB disconnect, device number 81 [ 816.257273][ T956] block nbd0: Device being setup by another task [ 816.274062][ T903] block nbd0: shutting down sockets 12:57:42 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @multicast, 'veth0_vlan\x00'}}) [ 816.319636][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 816.429673][ T49] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 816.529734][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 816.560339][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 816.568006][ T5] usb 2-1: can't read configurations, error -61 [ 816.650241][T23781] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 816.720036][ T48] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 816.727804][ T5] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 816.739758][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 816.750467][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.761412][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.771611][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 816.782151][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 816.791963][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 816.801732][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 816.821140][ T48] usb 3-1: Using ep0 maxpacket: 32 12:57:42 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40002, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1c) [ 816.939618][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.959986][ T9921] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 816.970320][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.979354][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.989323][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.999816][ T49] usb 5-1: Product: syz [ 817.004209][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 817.014219][ T49] usb 5-1: Manufacturer: syz [ 817.020048][ T49] usb 5-1: SerialNumber: syz [ 817.022781][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 817.024852][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 817.044776][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 817.055631][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 817.081099][ T9921] usb 6-1: Using ep0 maxpacket: 32 [ 817.121362][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.132357][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.143166][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 817.153208][ T48] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 817.163602][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 817.173511][ T48] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 817.219628][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.229314][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.238039][T23781] usb 1-1: Product: syz [ 817.243327][T23781] usb 1-1: Manufacturer: syz [ 817.247913][T23781] usb 1-1: SerialNumber: syz [ 817.279608][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.296628][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 817.308408][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 817.321200][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 817.332445][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 817.342779][ T49] cdc_ncm 5-1:1.0: bind() failure [ 817.349596][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.356890][ T49] cdc_ncm 5-1:1.1: bind() failure [ 817.362352][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.374383][ T49] usb 5-1: USB disconnect, device number 115 [ 817.397557][ T48] usb 3-1: Product: syz 12:57:43 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe53, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 817.435229][ T48] usb 3-1: Manufacturer: syz [ 817.440063][ T5] usb 2-1: device not accepting address 97, error -71 [ 817.457474][ T5] usb usb2-port1: unable to enumerate USB device [ 817.468321][ T48] usb 3-1: SerialNumber: syz [ 817.501866][ T48] usb 3-1: can't set config #1, error -71 [ 817.514511][ T17] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.517537][ T48] usb 3-1: USB disconnect, device number 76 [ 817.524522][ T9921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.558233][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.566515][T23781] cdc_ncm 1-1:1.0: bind() failure [ 817.581806][ T9921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.601037][T23781] cdc_ncm 1-1:1.1: bind() failure [ 817.639558][ T9921] usb 6-1: Product: syz [ 817.645152][T23781] usb 1-1: USB disconnect, device number 119 [ 817.656133][ T9921] usb 6-1: Manufacturer: syz [ 817.661079][ T17] usb 4-1: can't set config #1, error -71 [ 817.670998][ T17] usb 4-1: USB disconnect, device number 89 [ 817.677229][ T9921] usb 6-1: SerialNumber: syz 12:57:43 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c00000068351e1848e1c0b7dbc11b64e6ee3961164cc2da1f259989d25858c7b56aaf845308b67fb597273c48c8a2", @ANYRES16=r1, @ANYBLOB="000126bd7000c405000003000000080002000200000008000200020000000800020002000000080001000200000008000100020000000800020002000000080001000100000008000200020000000800010000000000"], 0x5c}}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="05000000eee185ff146d4c914ffa8f053a08b2d3361dee4d3672cc928567a994be0eb7eb743d2c7498ff03036e7bdc6fd629c933a262f8a6b5e9397c8081947d1bc52b50f6a36ba88736bd40bbf6c8f9aa1211ef0ed8a168557308825a992bb307e5a2ae3af07ae95ba2a5b5803ccb337e4dedea3f1cdb30f5fed04dfe26acff133160c8466dc8bbf57725ff59dad7b635f7e216485d8a3421077691d4751a1417a872573e8e1e9bcc176a13dd", @ANYRES16=r1, @ANYBLOB="c00227bd7000fedbdf2503000000080002000200000008000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) [ 817.839693][ T5] usb 2-1: new high-speed USB device number 98 using dummy_hcd 12:57:43 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800e2ff", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250700000014000800766c616e3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) [ 817.930188][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 817.969547][ T9921] cdc_ncm 6-1:1.0: bind() failure [ 817.989511][ T48] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 817.993031][ T9921] cdc_ncm 6-1:1.1: bind() failure [ 818.032661][ T9921] usb 6-1: USB disconnect, device number 82 [ 818.060319][ T4153] usb 5-1: new high-speed USB device number 116 using dummy_hcd 12:57:43 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x181001, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4000}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 818.080393][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 818.140422][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.154672][ T4153] usb 5-1: Using ep0 maxpacket: 32 [ 818.160771][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.179216][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.190176][ T17] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 818.193811][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 818.212202][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.223612][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 818.279516][ T48] usb 3-1: config index 0 descriptor too short (expected 65107, got 92) [ 818.279578][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 818.288119][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.304080][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.315093][ T48] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 818.326066][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.337014][ T48] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 818.379596][T10180] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 818.387350][ T4153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.398413][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.408061][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.417831][ T4153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.428048][ T5] usb 2-1: Product: syz [ 818.432645][ T4153] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.442878][ T5] usb 2-1: Manufacturer: syz [ 818.447469][ T5] usb 2-1: SerialNumber: syz [ 818.452779][ T4153] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 818.464135][ T4153] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.475165][ T4153] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 818.490445][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 818.492181][ T17] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.507016][ T17] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.519283][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.520277][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.529047][ T17] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 818.541293][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.550410][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.557638][ T48] usb 3-1: Product: syz [ 818.568646][ T17] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 818.571401][ T48] usb 3-1: Manufacturer: syz [ 818.585775][ T48] usb 3-1: SerialNumber: syz [ 818.619538][ T9921] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 818.659565][ T4153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.669607][ T4153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.677653][ T4153] usb 5-1: Product: syz [ 818.683339][ T4153] usb 5-1: Manufacturer: syz [ 818.687927][ T4153] usb 5-1: SerialNumber: syz [ 818.699543][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.717656][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.728860][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.732620][ T9921] usb 6-1: Using ep0 maxpacket: 32 [ 818.742861][ T5] cdc_ncm 2-1:1.0: bind() failure [ 818.756034][ T5] cdc_ncm 2-1:1.1: bind() failure [ 818.769649][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 818.784055][ T5] usb 2-1: USB disconnect, device number 98 [ 818.794550][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.802487][ T17] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.806650][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 818.818531][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.859207][ T17] usb 4-1: Product: syz [ 818.859521][ T48] cdc_ncm 3-1:1.0: bind() failure [ 818.870789][ T17] usb 4-1: Manufacturer: syz [ 818.878508][ T17] usb 4-1: SerialNumber: syz [ 818.884398][ T48] cdc_ncm 3-1:1.1: bind() failure [ 818.920233][ T48] usb 3-1: USB disconnect, device number 77 [ 818.970316][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.980134][ T4153] cdc_ncm 5-1:1.0: bind() failure [ 818.987934][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.000239][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.009287][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:57:44 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x1f, 0xa2, 0xa0}, @rc={0x1f, @none, 0xff}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='dummy0\x00', 0x5, 0x200, 0xff80}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000f97331346926348c8a8ad4bfa7489a58a3a5fc32fe91d00287e765581eaa231970bde1a7497796fef75b5658bfc1c669eb2ef359211498b2784a9470e3bd05be41c39aacd9f526fe0101c9b941d00692ccfbabc84748997b40e3fb8c0ce396a35ab32e7c6a0f90910932c6c465780c01c07558511ad77a330974897684b66644cfff7ac5ad39fd1c52da498700c84725fb9f9f8b25df77d0214a74f2676cb5bac80afb10f717c54b3e5dabde0da3bd70f73712f7464bda0824e4083dfcdb402c51da132256b90184640913e6ae959c188ecd60163a9b23d9a41313adfa0ff4a16004aa247ac793dd9e4859f1c90c00"/285], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x28001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x14, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc16a, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008815}, 0x20044091) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 819.021231][ T4153] cdc_ncm 5-1:1.1: bind() failure [ 819.039288][ T4153] usb 5-1: USB disconnect, device number 116 [ 819.051643][T10180] usb 1-1: Product: syz [ 819.055951][T10180] usb 1-1: Manufacturer: syz [ 819.060797][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.080917][T10180] usb 1-1: SerialNumber: syz [ 819.088306][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 819.109062][ T1075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 819.119466][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.140714][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 819.212240][ T17] cdc_ncm 4-1:1.0: bind() failure [ 819.227034][ T17] cdc_ncm 4-1:1.1: bind() failure [ 819.273884][ T17] usb 4-1: USB disconnect, device number 90 [ 819.310412][ T9921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.329720][ T9921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.338372][ T9921] usb 6-1: Product: syz [ 819.346845][ T9921] usb 6-1: Manufacturer: syz [ 819.352162][ T9921] usb 6-1: SerialNumber: syz [ 819.359587][T10180] cdc_ncm 1-1:1.0: bind() failure [ 819.376595][T10180] cdc_ncm 1-1:1.1: bind() failure 12:57:45 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="050f08000103100a30e656781dd1c0ed3e98787af0d5a8927cd0f65fd5bbcf867a7ebe53b20f9082854c964b7fc4d1facce01745462e2eceee6fce967bf0a782d276b55031b067dcb1dd03b0e57db90b278aa2d09fa9d20dd74ef5169dd16f0ce52a23d231f59e26fc2d09a5683feab0870d52fae3b06f2fc2b6a27d917cb70c210ba8811106bc10b0a3e53d9179b20b"]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 819.413031][T10180] usb 1-1: USB disconnect, device number 120 [ 819.509435][ T48] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 819.599463][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 819.609578][ T5] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 819.620285][ T4153] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 819.659455][ T9921] cdc_ncm 6-1:1.0: bind() failure [ 819.681796][ T9921] cdc_ncm 6-1:1.1: bind() failure [ 819.701118][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 819.710312][ T4153] usb 5-1: Using ep0 maxpacket: 32 [ 819.713357][ T9921] usb 6-1: USB disconnect, device number 83 [ 819.799464][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.811780][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.823060][T10180] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 819.831785][ T48] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.841986][ T48] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 819.853051][ T48] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.863448][ T48] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 819.910211][ T5] usb 3-1: config index 0 descriptor too short (expected 65107, got 92) [ 819.918718][ T4153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.929992][T21384] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 819.937671][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 819.942910][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.956901][ T4153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.967339][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.977609][ T4153] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.988142][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 819.998681][ T4153] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 12:57:45 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'bridge0\x00', 0x2}, 0x18) [ 820.009618][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.019250][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 820.030173][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 820.035385][ T4153] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.045857][ T4153] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 820.089631][ T48] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.105477][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.128652][ T48] usb 2-1: Product: syz [ 820.150896][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.161917][ T48] usb 2-1: Manufacturer: syz [ 820.166853][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.189376][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.199228][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 820.210149][ T48] usb 2-1: can't set config #1, error -71 [ 820.219026][ T48] usb 2-1: USB disconnect, device number 99 [ 820.230060][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.239107][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.247924][ T4153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.257519][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.271589][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.289381][ T4153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.297387][ T4153] usb 5-1: Product: syz [ 820.302716][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.314258][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 820.324729][ T5] usb 3-1: Product: syz [ 820.328913][ T5] usb 3-1: Manufacturer: syz [ 820.334561][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.345607][ T4153] usb 5-1: Manufacturer: syz [ 820.351025][ T5] usb 3-1: SerialNumber: syz [ 820.356042][ T4153] usb 5-1: SerialNumber: syz [ 820.366271][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 820.390058][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.408508][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 820.419396][ T9921] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 820.510260][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.511327][ T9921] usb 6-1: Using ep0 maxpacket: 32 [ 820.522558][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.533543][T10180] usb 1-1: Product: syz [ 820.537728][T10180] usb 1-1: Manufacturer: syz [ 820.545500][T10180] usb 1-1: SerialNumber: syz 12:57:46 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@empty, @broadcast}, 0x8) [ 820.581785][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.608246][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.619389][ T5] cdc_ncm 3-1:1.0: bind() failure [ 820.637039][ T5] cdc_ncm 3-1:1.1: bind() failure [ 820.642326][ T4153] cdc_ncm 5-1:1.0: bind() failure [ 820.656792][ T4153] cdc_ncm 5-1:1.1: bind() failure [ 820.664304][T21384] usb 4-1: Product: syz [ 820.671672][ T48] usb 2-1: new high-speed USB device number 100 using dummy_hcd 12:57:46 executing program 2: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x101000, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f0000000140)=""/32, 0x20) ioctl$TIOCCONS(r0, 0x541d) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000302000020a505a1a440000102030109025c0002010000000904000001020d0005240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905820200000000000905030200"/110], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="1da445f6d7a29e7fce648ddce92d8bf00d286352f5e9804f00a3a1aaa9edd21b2caec0bc23fea23e689233b7c4154a60a21e4505bb5b29f1f1ab6ff1d043bd5884af6c29965ea6cebd983fa99fa9e79926ec8018c61d0d08ef3feb631343a2b65ded3d3a73fe30ced53d8c9818129cbda4d22394362a1325add5166a9aed2d28e73bd86ceb7353340fc60f4f34c420be87a4968092b46d6e4573918ec354df5572993e21d9b89a18bb") [ 820.702690][T21384] usb 4-1: Manufacturer: syz [ 820.708690][ T5] usb 3-1: USB disconnect, device number 78 [ 820.717662][T21384] usb 4-1: SerialNumber: syz [ 820.728108][ T4153] usb 5-1: USB disconnect, device number 117 [ 820.740141][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.770673][ T48] usb 2-1: Using ep0 maxpacket: 32 12:57:46 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 820.808515][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.823019][T21384] usb 4-1: can't set config #1, error -71 [ 820.834796][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.836104][T21384] usb 4-1: USB disconnect, device number 91 [ 820.869422][T10180] cdc_ncm 1-1:1.0: bind() failure [ 820.885655][T10180] cdc_ncm 1-1:1.1: bind() failure [ 820.913496][T10180] usb 1-1: USB disconnect, device number 121 [ 820.919134][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 820.942456][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.953323][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 820.991559][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.009382][ T48] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.019149][ T48] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 821.042726][ T48] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 821.101350][ T48] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:57:47 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010203020000202505a1a440000102030109025c0002013c626208a6bfc61e0000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000f7ffffff0300000000000904010000020d00000904010102020d000009058202000000000009"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 821.159467][ T9921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.179582][ T9921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:57:47 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 821.214294][ T9921] usb 6-1: Product: syz [ 821.224053][ T9921] usb 6-1: Manufacturer: syz [ 821.229671][ T9921] usb 6-1: SerialNumber: syz [ 821.229960][ T5] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 821.250625][ T9921] usb 6-1: can't set config #1, error -71 [ 821.262614][T21384] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 821.264270][ T9921] usb 6-1: USB disconnect, device number 84 [ 821.282361][ T48] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.301814][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.316853][ T48] usb 2-1: Product: syz [ 821.324117][ T48] usb 2-1: Manufacturer: syz [ 821.328810][ T48] usb 2-1: SerialNumber: syz [ 821.362117][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 821.367569][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 821.559325][ T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.569863][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.580824][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 821.591202][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.601512][ T4153] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 821.610085][T10180] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 821.617759][ T5] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.632555][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.642905][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 821.653283][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 821.664445][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 821.674650][ T48] cdc_ncm 2-1:1.0: bind() failure [ 821.684503][ T48] cdc_ncm 2-1:1.1: bind() failure [ 821.700809][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 821.708609][ T48] usb 2-1: USB disconnect, device number 100 [ 821.719424][ T9921] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 821.723702][ T4153] usb 5-1: Using ep0 maxpacket: 32 [ 821.804146][ T5] usb 3-1: New USB device found, idVendor=05a5, idProduct=a4a1, bcdDevice= 0.40 [ 821.816796][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.828130][ T5] usb 3-1: Product: syz [ 821.829961][ T9921] usb 6-1: Using ep0 maxpacket: 32 [ 821.833490][ T5] usb 3-1: Manufacturer: syz [ 821.844828][ T5] usb 3-1: SerialNumber: syz [ 821.850936][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.861523][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.870397][T21384] usb 4-1: Product: syz [ 821.874597][T21384] usb 4-1: Manufacturer: syz [ 821.889390][T21384] usb 4-1: SerialNumber: syz [ 821.899368][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.911453][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.921771][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.933219][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 821.945069][ T4153] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 821.955923][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 821.967691][ T4153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 821.976918][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 821.988529][ T4153] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 822.069280][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.081299][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.091507][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 822.102862][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 822.113076][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 822.140864][ T5] cdc_ncm 3-1:1.0: skipping garbage [ 822.146270][ T5] cdc_ncm 3-1:1.0: bind() failure [ 822.160750][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.170535][ T4153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.182394][T21384] cdc_ncm 4-1:1.0: bind() failure [ 822.210105][ T5] usb 3-1: USB disconnect, device number 79 [ 822.217592][T21384] cdc_ncm 4-1:1.1: bind() failure [ 822.224112][ T4153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.233726][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.248132][T10180] usb 1-1: Product: syz [ 822.253745][T21384] usb 4-1: USB disconnect, device number 92 [ 822.261316][ T4153] usb 5-1: Product: syz [ 822.265500][ T4153] usb 5-1: Manufacturer: syz [ 822.274431][T10180] usb 1-1: Manufacturer: syz [ 822.290867][T10180] usb 1-1: SerialNumber: syz [ 822.296198][ T4153] usb 5-1: SerialNumber: syz [ 822.310412][ T9921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.325263][ T9921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.365293][ T9921] usb 6-1: Product: syz [ 822.369951][ T9921] usb 6-1: Manufacturer: syz [ 822.374675][ T9921] usb 6-1: SerialNumber: syz [ 822.429284][ T17] usb 2-1: new high-speed USB device number 101 using dummy_hcd 12:57:48 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x0, r1, 0x2d, r2}, 0x10) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000000), &(0x7f0000000200)=0x14) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000"]}) [ 822.499270][T10180] cdc_ncm 1-1:1.0: bind() failure [ 822.507681][T10180] cdc_ncm 1-1:1.1: bind() failure [ 822.542936][ T17] usb 2-1: Using ep0 maxpacket: 32 [ 822.559942][T10180] usb 1-1: USB disconnect, device number 122 [ 822.600125][ T4153] cdc_ncm 5-1:1.0: bind() failure [ 822.619346][ T4153] usb 5-1: USB disconnect, device number 118 [ 822.692378][ T9921] cdc_ncm 6-1:1.0: bind() failure [ 822.715338][ T9921] cdc_ncm 6-1:1.1: bind() failure [ 822.760125][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.788447][ T9921] usb 6-1: USB disconnect, device number 85 [ 822.800201][ T17] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 12:57:48 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d000005240600a0000000ced867d9d18da5bf05240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d008009058200000000", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64]}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000002c0)={'vxcan1\x00', 0x8, 0x4}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080)=0x8001) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r2, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x4, 0xb8e}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x20800, 0x0) [ 822.821655][ T17] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 822.834696][ T17] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 822.845054][ T17] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 822.919240][T10180] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 823.009233][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 823.019367][T23781] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 823.059271][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.068918][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.077112][ T17] usb 2-1: Product: syz [ 823.081607][ T17] usb 2-1: Manufacturer: syz [ 823.093973][ T17] usb 2-1: SerialNumber: syz 12:57:48 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x3}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 823.119651][T23781] usb 4-1: Using ep0 maxpacket: 32 [ 823.139256][ T17] usb 2-1: can't set config #1, error -71 [ 823.156194][ T17] usb 2-1: USB disconnect, device number 101 [ 823.169848][T10180] usb 1-1: unable to get BOS descriptor or descriptor too short [ 823.249211][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.269179][T21384] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 823.277274][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.295820][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.305694][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 823.319384][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.329767][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 823.349565][T23781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.360032][T21384] usb 3-1: Using ep0 maxpacket: 32 [ 823.360761][T23781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.375748][ T9921] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 823.383676][T23781] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.393458][T23781] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 823.403273][T23781] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.413270][T23781] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 823.459221][ T49] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 823.479222][ T9921] usb 5-1: Using ep0 maxpacket: 32 [ 823.510721][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.520554][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.528527][T10180] usb 1-1: Product: syz [ 823.534306][T21384] usb 3-1: unable to get BOS descriptor or descriptor too short [ 823.541986][T10180] usb 1-1: Manufacturer: syz [ 823.546569][T10180] usb 1-1: SerialNumber: syz [ 823.550254][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 823.579735][T23781] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.589020][T23781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.598073][T23781] usb 4-1: Product: syz [ 823.603115][T23781] usb 4-1: Manufacturer: syz [ 823.607760][T23781] usb 4-1: SerialNumber: syz [ 823.613084][ T17] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 823.632143][T21384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.649254][T21384] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 823.658123][T21384] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.680172][ T9921] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 823.691423][ T9921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 823.701232][ T9921] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.715698][ T17] usb 2-1: Using ep0 maxpacket: 32 [ 823.749230][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.761054][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.771759][ T49] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 823.783812][ T49] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.794051][ T49] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 823.849217][T21384] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.858355][T10180] cdc_ncm 1-1:1.0: bind() failure [ 823.866564][T10180] cdc_ncm 1-1:1.1: bind() failure [ 823.879155][T21384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.880645][ T9921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:57:49 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0x3, 0x10001, 0x6, 0x800, 0x800, 0x3, 0xff, 0x10000, 0x80, 0xffff, 0x1, 0x6}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x0, &(0x7f00000000c0)) fcntl$setflags(r1, 0x2, 0x0) [ 823.887156][T21384] usb 3-1: Product: syz [ 823.900801][ T9921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.908977][ T9921] usb 5-1: Product: syz [ 823.915359][T10180] usb 1-1: USB disconnect, device number 123 [ 823.921673][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.940270][T21384] usb 3-1: Manufacturer: syz [ 823.945077][T21384] usb 3-1: SerialNumber: syz [ 823.970038][ T49] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.979354][T23781] cdc_ncm 4-1:1.0: bind() failure [ 823.985534][ T9921] usb 5-1: Manufacturer: syz [ 823.997169][T23781] cdc_ncm 4-1:1.1: bind() failure [ 824.002368][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.010144][T21384] cdc_ncm 3-1:1.0: bind() failure [ 824.012369][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.029924][ T9921] usb 5-1: SerialNumber: syz [ 824.055931][T23781] usb 4-1: USB disconnect, device number 93 [ 824.074985][ T17] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.098765][ T49] usb 6-1: Product: syz [ 824.120903][ T49] usb 6-1: Manufacturer: syz [ 824.127728][ T17] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.143156][ T49] usb 6-1: SerialNumber: syz [ 824.183465][ T17] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 824.198946][ T17] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:57:50 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="050f08000103100ac1176c9baf146b557ebde33b682d531b34f71da440de043105982af121ddf7f318f1bdbd73898cf38cf064c183dd5eb07ee09d0468ce7d09a07207296946171075eb67028b459ca1b74a396accc05af3fe0de6827f9204af362d56b4f429d81b5b60038b3728cafb18a47252bd2b1c7839f0444e5630755af50d254e90366e19cd69b0c51fb8e9db17cb7b385d7c9faf2284defb4a497e"]}) [ 824.257945][T14691] usb 3-1: USB disconnect, device number 80 [ 824.270127][ T9921] cdc_ncm 5-1:1.0: bind() failure [ 824.284443][ T9921] usb 5-1: USB disconnect, device number 119 12:57:50 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) write$P9_RFSYNC(r0, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x72a95d4c, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)}) 12:57:50 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6c}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3f}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 824.359896][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 824.368977][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.378279][ T49] cdc_ncm 6-1:1.0: bind() failure [ 824.388073][ T49] cdc_ncm 6-1:1.1: bind() failure [ 824.431041][ T17] usb 2-1: Product: syz [ 824.435358][ T49] usb 6-1: USB disconnect, device number 86 [ 824.451213][ T17] usb 2-1: Manufacturer: syz [ 824.464534][ T17] usb 2-1: SerialNumber: syz 12:57:50 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) [ 824.479123][T23781] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 824.579334][T23781] usb 4-1: Using ep0 maxpacket: 32 [ 824.749151][ T17] cdc_ncm 2-1:1.0: bind() failure [ 824.759206][ T9921] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 824.779367][T23781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.799287][T10180] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 824.802388][T23781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.818770][ T17] cdc_ncm 2-1:1.1: bind() failure [ 824.856957][ T17] usb 2-1: USB disconnect, device number 102 [ 824.888489][T23781] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.900163][ T9921] usb 5-1: Using ep0 maxpacket: 32 [ 824.909566][ T49] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 824.918333][T23781] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.932090][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 824.934300][T23781] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 824.959414][T23781] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 824.999470][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 825.059130][T21384] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 825.109146][ T9921] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.121934][ T9921] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.133186][ T9921] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.144108][T23781] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.153770][ T9921] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 825.159954][T21384] usb 3-1: Using ep0 maxpacket: 32 [ 825.165411][T23781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.177673][ T9921] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 825.187896][T23781] usb 4-1: Product: syz [ 825.189839][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.192823][T23781] usb 4-1: Manufacturer: syz [ 825.208105][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.208351][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.219264][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.228879][ T9921] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 825.247210][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 825.250496][T23781] usb 4-1: SerialNumber: syz [ 825.262642][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.273397][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 825.276505][ T49] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.297113][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 825.311170][ T49] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 825.320992][ T49] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 825.331849][ T49] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 825.349100][T21384] usb 3-1: unable to get BOS descriptor or descriptor too short [ 825.429113][ T9921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.438298][ T9921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.447513][ T9921] usb 5-1: Product: syz [ 825.452349][ T9921] usb 5-1: Manufacturer: syz [ 825.456968][ T9921] usb 5-1: SerialNumber: syz [ 825.459916][T21384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.481636][T21384] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 825.491293][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.499843][ T49] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.501059][T21384] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.513797][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.527230][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.534982][ T49] usb 6-1: Product: syz [ 825.543267][ T49] usb 6-1: Manufacturer: syz [ 825.543712][T10180] usb 1-1: Product: syz [ 825.548233][ T49] usb 6-1: SerialNumber: syz [ 825.562959][T10180] usb 1-1: Manufacturer: syz [ 825.567577][T10180] usb 1-1: SerialNumber: syz [ 825.582691][T23781] cdc_ncm 4-1:1.0: bind() failure [ 825.596738][T23781] cdc_ncm 4-1:1.1: bind() failure [ 825.599012][ T4153] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 825.622763][T23781] usb 4-1: USB disconnect, device number 94 [ 825.729614][ T4153] usb 2-1: Using ep0 maxpacket: 32 [ 825.751342][ T9921] cdc_ncm 5-1:1.0: bind() failure [ 825.764011][ T9921] cdc_ncm 5-1:1.1: bind() failure [ 825.774861][ T9921] usb 5-1: USB disconnect, device number 120 [ 825.780550][T21384] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.797253][T21384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.822262][T21384] usb 3-1: Product: syz [ 825.827604][T21384] usb 3-1: Manufacturer: syz [ 825.839041][ T49] cdc_ncm 6-1:1.0: bind() failure [ 825.842498][T21384] usb 3-1: SerialNumber: syz [ 825.857613][ T49] cdc_ncm 6-1:1.1: bind() failure [ 825.869025][T10180] cdc_ncm 1-1:1.0: bind() failure [ 825.889341][T10180] cdc_ncm 1-1:1.1: bind() failure [ 825.911398][ T49] usb 6-1: USB disconnect, device number 87 12:57:51 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2e}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x7b, &(0x7f0000000000)={0x5, 0xf, 0x7b, 0x1, [@generic={0x76, 0x10, 0xa, "f503a2992504da229380c1993de922a0fd0e879fa446f9025d00ea23d83733a0ca0b3b5e02a37efd4ca32201dbc875837d442a6b343eddbdb4178124c8b3794afa22d29f5675f5fd317cfdd4987d67b152361de17fa38928da05fdc4232ff92b41a11b8e9372c133abb49fd76bd555196a3722"}]}}) [ 825.932501][T10180] usb 1-1: USB disconnect, device number 124 [ 825.958097][T21384] usb 3-1: can't set config #1, error -71 [ 825.969630][T21384] usb 3-1: USB disconnect, device number 81 [ 826.009809][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.032011][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.042230][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.053439][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.072236][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 826.082485][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:57:52 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}) [ 826.329038][ T4153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.338216][ T4153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.356619][ T4153] usb 2-1: Product: syz [ 826.370407][ T5] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 826.389046][ T4153] usb 2-1: can't set config #1, error -71 [ 826.399313][ T4153] usb 2-1: USB disconnect, device number 103 [ 826.449285][T21384] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 826.469070][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 826.489046][ T49] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 826.550019][T21384] usb 3-1: Using ep0 maxpacket: 32 [ 826.579001][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 826.584227][ T9921] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 826.648994][T23781] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 826.679034][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.690193][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.699839][ T9921] usb 6-1: Using ep0 maxpacket: 32 [ 826.702313][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.714852][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.724714][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 826.735216][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 826.750454][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 826.769065][T21384] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.780133][ T4153] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 826.789897][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.791638][T21384] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.803755][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.812283][T21384] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.824110][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.832348][T21384] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.840306][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.850121][T21384] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 826.864937][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 826.870140][T21384] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 826.882137][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 826.889562][ T4153] usb 2-1: Using ep0 maxpacket: 32 [ 826.909225][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.918422][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.927497][ T5] usb 4-1: Product: syz [ 826.931971][ T5] usb 4-1: Manufacturer: syz [ 826.936601][ T5] usb 4-1: SerialNumber: syz [ 826.951211][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.970345][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.982835][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 12:57:52 executing program 3: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x4}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "590d9414bc9fc7d25c2cdf7d73e5c8f2"}]}}) set_tid_address(&(0x7f0000000000)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000280)={[0xa932, 0x8001, 0xffffd6d1, 0x1, 0x7f, 0x20, 0x1, 0x7, 0x7, 0x5, 0x80000000, 0x8, 0x7f, 0x4, 0x8, 0x49c2a3d8, 0x7, 0x1, 0x4, 0x0, 0x2, 0x7, 0x4, 0x3d793a75, 0x3, 0x234, 0x549, 0xb18, 0x6, 0xf7af, 0xfffffffd, 0x5, 0x7fffffff, 0x80000001, 0x3ff, 0xd910, 0xfffffff8, 0x20, 0x1ff, 0x5, 0x1000, 0x7, 0x2, 0x5, 0x1, 0x6, 0x5, 0x8, 0x0, 0x8, 0x2, 0x9, 0x20, 0x85, 0x1, 0x351, 0x3ad2, 0x81, 0x2, 0x4e5, 0xb1, 0x7, 0x1f, 0x1, 0x7, 0x2, 0x1, 0x9f, 0xfff, 0x0, 0x7, 0x0, 0x3, 0x8, 0x6, 0x2, 0x7fffffff, 0x8001, 0x1000, 0xedde, 0x20, 0x7fff, 0x401, 0x20, 0x6, 0xfffffffa, 0x1, 0xffff, 0x3, 0x0, 0x80000000, 0xfff, 0x8, 0x9, 0x1, 0x3f, 0x78, 0x8, 0x8, 0xd8, 0x1a92, 0x8, 0x4, 0x0, 0x7f, 0x3ff, 0x8c7, 0x0, 0x1, 0x2, 0x1, 0x6, 0xdc4, 0x3, 0x2174, 0xffff, 0x7, 0x1f, 0x9, 0xcf, 0x2, 0xe36, 0x5c03, 0x2, 0xe1, 0x5, 0xc80, 0x80000000, 0x2, 0x3, 0x6b, 0x2, 0x1, 0x1, 0x8, 0x9, 0x0, 0x4, 0x4, 0x9, 0x3, 0x948, 0x0, 0x2, 0x3f, 0x0, 0x4, 0xaa, 0x2, 0x5, 0x8, 0xff, 0x6, 0x1, 0x1ff, 0x2, 0x94, 0x8001, 0x0, 0x3, 0x7, 0x8, 0x27f9, 0x5, 0x9, 0x660, 0x8, 0x1000, 0x8100000, 0x44, 0x8, 0x2, 0xb6, 0x401, 0x4, 0x8, 0x0, 0x3ff, 0x4, 0x3e, 0x854b, 0x3fbb, 0xfffff001, 0x2, 0x3, 0x7, 0xa296, 0x3, 0x99, 0x9, 0x0, 0xffff9907, 0x4, 0x3f, 0x8a5b, 0x7fffffff, 0x7ff, 0x4, 0x0, 0x80000000, 0x3, 0xec, 0x9, 0x30d, 0x8, 0x3758, 0x8, 0x3, 0x8, 0x0, 0x3, 0x20, 0x1, 0x336a, 0x0, 0xf457, 0x400, 0x2, 0x7fffffff, 0x2, 0x8, 0x8001, 0x40, 0x7fff, 0x0, 0xffffffff, 0xfffffffb, 0x5, 0xfe, 0x80, 0x3214, 0x53ee8695, 0x6, 0x3, 0x4, 0x7, 0x3, 0x7ff, 0x7f, 0x5, 0x7, 0x5, 0x1, 0xfffffffe, 0xf3d7, 0x5, 0x8, 0x4803, 0x5df9, 0x9, 0x9, 0x6, 0x4, 0x8, 0x1, 0x9, 0x0, 0x29e00000, 0x46adeefe, 0x6, 0x15f989b7, 0x3f3, 0x0, 0x141, 0x2, 0x1f, 0x5c6, 0x401, 0x8, 0x101, 0x605, 0x1, 0xfff, 0x1ff, 0x5, 0xffffffff, 0xa54, 0x10001, 0x1, 0xe6c, 0xffffffff, 0x0, 0x99, 0x0, 0x4d1, 0xffff81c6, 0x5, 0xffffffff, 0x8000, 0xfff, 0x9, 0x4, 0x0, 0x6, 0x4, 0x400, 0x8000, 0xff, 0x0, 0x27, 0x1, 0x5, 0x3ff, 0xd017, 0x10001, 0x9, 0x0, 0x7, 0x200, 0xfffffa1b, 0x8, 0x7f, 0x6, 0xb6b, 0x4, 0x7fffffff, 0x9, 0x8, 0x9, 0xfff, 0x9, 0x1, 0x0, 0x1000, 0x7, 0x6, 0x7, 0x8cbf, 0x1, 0x80, 0x0, 0xffff, 0x0, 0x52b, 0x100, 0x6, 0x5, 0x7f, 0xffff, 0xff, 0x5, 0x5, 0x80000000, 0x100, 0x9, 0x6, 0x800, 0x7ff, 0x9, 0x3, 0x65, 0x2, 0x2, 0x2, 0x3, 0x9, 0x7fffffff, 0x3, 0x7fff, 0x5, 0x8, 0x81, 0x6, 0x8001, 0x401, 0x74c1, 0x350, 0x0, 0xb0, 0x1000, 0x3f, 0x4, 0x8a, 0x9, 0x4, 0xc2a, 0x5, 0x6, 0xd952, 0x3, 0x4, 0x9, 0x40, 0x200, 0x0, 0x9, 0x100, 0xcc26, 0x0, 0x5, 0x60, 0x7f, 0xcd, 0x7, 0x8, 0x3, 0x7, 0x3, 0x6, 0x4, 0x50a28e3d, 0x401, 0x0, 0x22, 0x400, 0x2e42, 0x3f, 0x57bb, 0x1, 0x10000, 0x9, 0x4, 0x7, 0xf0, 0x0, 0xb5, 0xb2, 0x10001, 0xd7, 0x7, 0x67a, 0x4, 0x7fff, 0x9, 0x400, 0x0, 0x1, 0x3bc2, 0x6, 0x8, 0x194, 0x7, 0x80000001, 0x0, 0x7fffffff, 0x2, 0xe23, 0x0, 0x4, 0x7fffffff, 0x7f, 0x5, 0x7ff, 0x80000000, 0x3, 0x8, 0x5, 0x3f, 0x5, 0x4f7e, 0x4, 0x6, 0x2, 0x2, 0x2, 0x20, 0x6, 0x8afb4a3, 0xb06cbd, 0xffffffe6, 0x2, 0x2, 0x401, 0x0, 0x74, 0xfffffffb, 0x0, 0x2, 0x7fffffff, 0x9, 0x8, 0xe74, 0x9, 0x80000000, 0x8, 0x3, 0x0, 0x3f, 0x7, 0x1, 0x2, 0xf9, 0x7f, 0x0, 0x5, 0xfffffffa, 0xb06e, 0x1f, 0x20, 0xff, 0x5, 0x200, 0x0, 0xfffffc4f, 0x4, 0xf08, 0x70253071, 0x9, 0x90, 0x0, 0x784a, 0x1, 0xff, 0x2, 0x3f, 0xb254, 0x0, 0x370, 0x0, 0x362, 0x6b8, 0x55757525, 0x3, 0x6, 0x8, 0x8193, 0x2, 0x1, 0x28, 0xb3, 0x3, 0x6, 0x5, 0xffffffff, 0x4, 0x7fffffff, 0x3, 0x7ff, 0x2, 0x4, 0x46ca, 0x81, 0x4, 0x3, 0x7fff, 0x6, 0x8, 0x92e7, 0x9ff, 0x0, 0x5, 0x9, 0xffffffff, 0x1e8f, 0x9, 0x1ff, 0x7, 0x52e, 0x1, 0x5, 0x8, 0xd5f9, 0xffffffff, 0x7f9b, 0x32a, 0xffffffe0, 0x70d6, 0x3, 0x1f, 0x6, 0x8, 0x4ba, 0xe0, 0x778, 0x8001, 0x0, 0x7ff, 0x2, 0x6, 0x18000000, 0x40, 0x6, 0x24b, 0x1, 0x2, 0x4, 0x9, 0x1, 0x2, 0x1ff, 0x0, 0x6, 0xf289, 0x6, 0xffff0000, 0x20, 0x4, 0x4, 0xa66a, 0x4, 0x6, 0x6, 0x8000, 0xe4, 0x916a, 0x0, 0x4, 0x1000, 0x100, 0x3, 0x7, 0x7, 0x2, 0x7, 0xc56, 0x81, 0xfffffeff, 0x7fff, 0x0, 0x8, 0x8, 0x34, 0x36, 0x0, 0x0, 0x9, 0x2, 0x80, 0x101, 0x7, 0x9, 0x6, 0x3, 0x4, 0x6d06ce27, 0x6, 0x8, 0x93bc, 0xff, 0x4, 0x35f9, 0x480000, 0x800, 0x859, 0x80000000, 0x6, 0x7, 0x81, 0x80000001, 0x80, 0x0, 0x20, 0x0, 0x7ff, 0x2, 0x3, 0x4, 0x2, 0xcd4a, 0x1, 0x9, 0x8, 0x3, 0x0, 0x0, 0x7, 0xfffffff8, 0x563b, 0x5, 0x6, 0x0, 0x7, 0x5, 0x6, 0xff, 0x0, 0x47, 0x81, 0xfffffffd, 0x6, 0x80, 0x0, 0x1, 0x800, 0x7, 0x80000001, 0xffffff81, 0x1f, 0xfffff3f0, 0xf46c, 0x474, 0x1, 0x7, 0x1, 0xf36, 0x10000, 0x9, 0x8, 0x9, 0x5, 0x8000, 0x7, 0xe1fe, 0x1ff, 0x8, 0xaa82, 0x6, 0x80000001, 0x101, 0x7, 0x3, 0xffffffff, 0x0, 0x9, 0x4, 0x30, 0x1, 0x2, 0x52b, 0x7f, 0x7, 0x8f, 0x10000, 0x5356c6ce, 0x9, 0x20, 0x1, 0x0, 0xfffffff7, 0x3, 0x4, 0xc17, 0x400, 0xc1, 0x3, 0x8000, 0x6, 0x8, 0x77, 0x8, 0x3, 0x5, 0x1ff, 0x7, 0x3, 0x4, 0xecec, 0x5, 0x7, 0xff, 0x3, 0x4, 0x5, 0x9, 0x0, 0xf6, 0x7, 0xc000, 0xff, 0x2, 0x7fff, 0x6, 0xfc, 0x0, 0x2, 0x9, 0x81, 0x800, 0xd02, 0x0, 0x1ff, 0x4, 0x3, 0x7, 0x2, 0x1f, 0xfffffffa, 0x4, 0x2, 0x5, 0x220d7f1d, 0x3, 0x10001, 0x9, 0x4, 0x810, 0x3, 0x8a3, 0x5, 0xfff, 0x401, 0x9, 0xfff, 0xffffffff, 0xbe, 0xfffffaa4, 0x3ff, 0x5, 0xf624, 0xffffff80, 0x1, 0x1, 0x63d, 0x1, 0x1ff, 0x9, 0x0, 0x1, 0x7c4, 0x2b0, 0x4, 0x0, 0x7f6, 0x4, 0x4, 0x9, 0x40, 0x0, 0xa77, 0x48000000, 0x5, 0x1, 0xffffffff, 0x4, 0x178d, 0x6, 0x5, 0xffff8001, 0x7, 0x40, 0x8, 0x5b, 0x200, 0x0, 0x4, 0x6, 0x22f2, 0x9, 0x4, 0x6, 0x0, 0x40d39bc4, 0x1, 0x1, 0x9, 0x1f900, 0x9, 0x7, 0xffff, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0xbe4, 0x7, 0x6, 0x8, 0x7fffffff, 0x13, 0x4137, 0x5, 0xffff, 0x4, 0x38f7, 0x7, 0xd28, 0x200, 0x656c13b4, 0x5, 0x10000, 0x3, 0x6, 0x80, 0x1, 0x6, 0x8, 0xffffffff, 0x5, 0x1000, 0x3f9b, 0x401, 0x6, 0x3, 0x7ff, 0x0, 0x4, 0x426, 0x0, 0x10000, 0xff, 0xfffffffc, 0x81, 0x1ff, 0x6, 0x6, 0x2, 0x7, 0x0, 0x0, 0x9, 0x800, 0x4, 0x4, 0x0, 0x7, 0xffffba1a, 0x1000, 0x3, 0x10000, 0x0, 0x1, 0x7, 0xffff, 0x1, 0x20, 0x10000, 0x1, 0x7ff, 0xb0, 0x2, 0x6, 0x2, 0x4, 0x6712, 0x9, 0x2, 0x3, 0x9, 0x1, 0x9, 0x8100, 0x5, 0x7f, 0x8001, 0x5, 0x0, 0x8000, 0x2, 0x6, 0x7fff, 0x6, 0x6, 0x8001, 0x1, 0x37, 0x7, 0xfb89, 0xffff, 0x6, 0x3, 0x3f, 0xffffffc0, 0x6, 0x1, 0x80000000, 0x7b, 0x0, 0x1d3, 0x3, 0x0, 0x1, 0x5, 0x9, 0x3, 0x0, 0x9, 0x3, 0x4d, 0x4, 0x1, 0x200, 0x7, 0x5d, 0x8, 0x597, 0x100, 0x100, 0x10000, 0xfffffffe, 0xbfe, 0x14000, 0x2, 0x3, 0x28d, 0x9, 0xe7e6, 0x7, 0x4, 0x5, 0xffffee54, 0x9, 0x0, 0x6, 0x9, 0x2, 0x1, 0x2, 0xfffffff7, 0x400, 0x6, 0x5, 0x400, 0x400, 0x3, 0x8, 0x3b5, 0x2, 0x9f8, 0x4, 0xfffffffb, 0xfffffffc, 0x7, 0xffffffff, 0x2, 0x0, 0x3, 0x7fffffff, 0x5, 0xfff, 0x7, 0x7, 0x7, 0x20, 0x0, 0x4, 0x3, 0xff, 0x1, 0x2, 0x6, 0xd5, 0x0, 0xfffffffe]}) [ 826.994536][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 827.004923][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 827.016629][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.027734][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 827.039352][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.058966][ T5] cdc_ncm 4-1:1.0: bind() failure [ 827.064905][ T4153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 827.073431][T21384] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.073943][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 827.092421][ T5] cdc_ncm 4-1:1.1: bind() failure [ 827.098757][T21384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.098840][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.119279][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 827.122947][ T5] usb 4-1: USB disconnect, device number 95 [ 827.137603][T21384] usb 3-1: Product: syz [ 827.139708][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.150781][T21384] usb 3-1: Manufacturer: syz [ 827.163413][T21384] usb 3-1: SerialNumber: syz [ 827.170652][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.183803][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 827.184453][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.195564][ T49] usb 5-1: Product: syz [ 827.208544][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 827.218638][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 827.220642][ T49] usb 5-1: Manufacturer: syz [ 827.232633][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 827.234261][ T9921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.243640][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 827.254713][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 827.283470][ T9921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.291702][ T49] usb 5-1: SerialNumber: syz [ 827.309170][ T9921] usb 6-1: Product: syz 12:57:53 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 827.313389][ T9921] usb 6-1: Manufacturer: syz [ 827.318006][ T9921] usb 6-1: SerialNumber: syz [ 827.380025][ T49] usb 5-1: can't set config #1, error -71 [ 827.406560][ T49] usb 5-1: USB disconnect, device number 121 [ 827.419686][ T4153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.428745][ T4153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.460646][ T4153] usb 2-1: Product: syz [ 827.465040][ T4153] usb 2-1: Manufacturer: syz [ 827.471184][T21384] cdc_ncm 3-1:1.0: bind() failure 12:57:53 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x106, 0x1, 0x6}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x490}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616669643d3078303030303030303030303030303130312c6163636573733d6359dfa95f44781444a0a83beee8d9cebac4058ee5f625891dce21d9fc7197559e81be024e2f1a82af13bc", @ANYRESDEC=r1, @ANYBLOB=',cachetag=\\!:security],subj_type=,\x00']) [ 827.491197][T21384] cdc_ncm 3-1:1.1: bind() failure [ 827.504870][ T4153] usb 2-1: SerialNumber: syz [ 827.521183][T21384] usb 3-1: USB disconnect, device number 82 [ 827.548991][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.561923][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:57:53 executing program 5: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 827.592090][T23781] usb 1-1: Product: syz [ 827.612544][T23781] usb 1-1: Manufacturer: syz [ 827.619005][ T9921] cdc_ncm 6-1:1.0: bind() failure [ 827.633711][ T9921] cdc_ncm 6-1:1.1: bind() failure [ 827.646062][ T9921] usb 6-1: USB disconnect, device number 88 [ 827.652243][T23781] usb 1-1: can't set config #1, error -71 [ 827.659642][T23781] usb 1-1: USB disconnect, device number 125 12:57:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000040904000001020d0000052406000105240000000d248c2bb8790b0f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905820200000000000905030200000000006dc5482ef511859b877875521ee5383bee2edc163fc13e3633933cebc4d1db6aedd4ce1452"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0]}) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x6, 0x7}, &(0x7f0000000100)=0xc) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r1}, 0x20, 0x8, 0x461}) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x35, 0x6, 0x14, 0x1, 0x7, 0x1, 0x0, 0x122}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r4, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000200), &(0x7f0000000340)=0x10) [ 827.808913][ T4153] cdc_ncm 2-1:1.0: bind() failure [ 827.817076][ T4153] cdc_ncm 2-1:1.1: bind() failure [ 827.848007][ T4153] usb 2-1: USB disconnect, device number 104 [ 827.858880][ T49] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 827.969627][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 828.048928][T23781] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 828.058901][T21384] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 828.128925][ T9921] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 828.168968][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 828.168976][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 828.188965][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.188993][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.189099][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.219523][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 828.229815][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 828.243820][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 828.263251][ T9921] usb 6-1: Using ep0 maxpacket: 32 [ 828.288867][ T17] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 828.342911][T21384] usb 4-1: unable to get BOS descriptor or descriptor too short [ 828.381472][ T17] usb 3-1: Using ep0 maxpacket: 32 [ 828.408944][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.420181][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1168, setting to 1024 [ 828.432664][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 828.433036][T21384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.443795][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 828.457968][T21384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 828.463576][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.476627][T21384] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.480827][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 828.503993][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.513394][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.524377][ T49] usb 5-1: Product: syz [ 828.528557][ T49] usb 5-1: Manufacturer: syz [ 828.534320][ T9921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.544857][ T49] usb 5-1: SerialNumber: syz [ 828.550363][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.561928][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 828.584705][ T9921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 828.596661][ T9921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 828.610359][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.623161][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.634280][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.644667][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 828.648895][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.656007][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 828.668240][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.679506][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 828.681813][T21384] usb 4-1: Product: syz [ 828.695464][T21384] usb 4-1: Manufacturer: syz [ 828.700408][T21384] usb 4-1: SerialNumber: syz [ 828.712378][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.721596][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.731518][T23781] usb 1-1: Product: syz [ 828.736459][T23781] usb 1-1: Manufacturer: syz [ 828.740286][T21384] cdc_ncm 4-1:1.0: bind() failure [ 828.746543][T23781] usb 1-1: SerialNumber: syz [ 828.768922][T14691] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 828.779529][ T9921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.788569][ T9921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.801541][ T9921] usb 6-1: Product: syz [ 828.805918][ T9921] usb 6-1: Manufacturer: syz [ 828.812844][ T9921] usb 6-1: SerialNumber: syz [ 828.858898][ T49] cdc_ncm 5-1:1.0: bind() failure [ 828.868371][ T49] cdc_ncm 5-1:1.1: bind() failure [ 828.878879][T14691] usb 2-1: Using ep0 maxpacket: 32 [ 828.884116][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.909517][ T49] usb 5-1: USB disconnect, device number 122 [ 828.916487][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.928275][ T17] usb 3-1: Product: syz [ 828.933767][ T17] usb 3-1: Manufacturer: syz [ 828.938370][ T17] usb 3-1: SerialNumber: syz [ 829.066797][T14691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 829.068876][T21384] usb 4-1: USB disconnect, device number 96 [ 829.074653][T23781] cdc_ncm 1-1:1.0: bind() failure [ 829.085660][ T9921] cdc_ncm 6-1:1.0: bind() failure [ 829.115070][T23781] cdc_ncm 1-1:1.1: bind() failure [ 829.127797][ T9921] cdc_ncm 6-1:1.1: bind() failure 12:57:55 executing program 2: setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0xc4, 0x2, 0x7f, "705786fd8387ae2401f8ac72039e29ab", "428a89e56439c27dcf994f13cdcccf35d7c52083f359bf6712b11deea905713752c255a099da94cf978802f41ed916964ca89db6b55c635800ce9035dd71b0539417ff6269577a2582165c36a5cbdeb7fdc10d99faf822898033f738b7c3ed9470aa95d2603a36222d5386f6faa84e9f9cec2a505593cbadbf98eb16176dea08d55cff4b444b8bb543ac550898b745b8553eaf051ec56ea2cdf47459db2633a03ee83a2236e4ca270d1cf3ae178dd2"}, 0xc4, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x74, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ff0100000000"}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/285], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000507000000000000120000000000375621afd8c4f09cdcb0b82a5f16cafda0e2c0c8a25541474756ada31718058a1e8c85fb694790d06cdbd04dbf124d82330e014862ec9dc1d33f00e854a8afbf1a6f2335a09422b12d9f45a793e1121b8605418fb0aad09da723403591e7f6b909bc973f7711910669", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x28001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@local, 0x63, r6}) [ 829.163667][T23781] usb 1-1: USB disconnect, device number 126 [ 829.185508][ T9921] usb 6-1: USB disconnect, device number 89 [ 829.195443][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.218851][ T17] cdc_ncm 3-1:1.0: bind() failure [ 829.240365][ T17] cdc_ncm 3-1:1.1: bind() failure [ 829.248409][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.284443][ T17] usb 3-1: USB disconnect, device number 83 [ 829.302053][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 12:57:55 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000040000904010000020d00000904010102020d0000090582020000000000090503020000000000e2e4bc285232ab53b87ef484a0a835f8ac204a190a02"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="d7afd444e5050f0b"]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={r1}, &(0x7f00000003c0)=0x8) r2 = add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)="754081423353aebbcbe33abf77018e67e659da1028c7efdb8f37259ef975d55817f47e7bfa3e95eee8c178c73d0a646834d4267f2e8ecd276b8f612378bd3258841416f2dd0b795af89ce915339775d7b09ea0c9b8f34afc01225578c3325e6cd69dc151c0b35394be72326c0dc2f8520c00402223296c41cc36f981c91b2ed06b2fb08f08232dbd489bc65591fa6e0856e17e06bd76", 0x96, 0xfffffffffffffff9) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="85f4668fe948ed084dbd730bd88af294c2080c47eb303b37d3323833a7f4f415", 0x20, r2) [ 829.341025][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 829.363214][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 829.373718][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 829.468809][T14691] usb 2-1: string descriptor 0 read error: -71 [ 829.478273][T14691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.488292][T14691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.571860][T14691] usb 2-1: can't set config #1, error -71 [ 829.583592][T14691] usb 2-1: USB disconnect, device number 105 12:57:55 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000000000062402ce00000905810300000000000904010000020d00001004010102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7ff, 0x80) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000300)={{0xe6, 0xfff}, 0x8}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="676b4c0ecdb669bcbf4a1867a4af213ed611e30c836fad8799d3d619c3df84a5ddee129e72eb44", 0x27, 0x4c000, &(0x7f0000000200)={0x2, 0x401, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) prctl$PR_SET_PDEATHSIG(0x1, 0x29) [ 829.678774][ T17] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 829.678786][T21384] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 829.778820][T21384] usb 5-1: Using ep0 maxpacket: 32 [ 829.781410][ T17] usb 3-1: Using ep0 maxpacket: 32 [ 829.798791][ T5] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 829.838778][ T4153] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 829.891120][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 829.929185][T10180] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 829.936854][ T4153] usb 4-1: Using ep0 maxpacket: 32 [ 829.978815][T21384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.988818][T14691] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 829.990939][T21384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.007363][T21384] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 830.009658][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.019951][T21384] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 830.035418][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.040585][T10180] usb 6-1: Using ep0 maxpacket: 32 [ 830.051172][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 830.055481][T21384] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 830.063593][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 830.073718][T21384] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 830.085831][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 830.103746][T14691] usb 2-1: Using ep0 maxpacket: 32 [ 830.138837][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.149984][ T4153] usb 4-1: unable to get BOS descriptor or descriptor too short [ 830.157687][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1168, setting to 1024 [ 830.171519][ T5] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 830.182301][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 830.193576][ T5] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 830.229072][ T4153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.239288][ T4153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 830.248195][ T4153] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 830.279712][T21384] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.289027][T21384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.297071][T21384] usb 5-1: Product: syz [ 830.299639][T14691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 830.303244][T10180] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.309653][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.319189][T21384] usb 5-1: Manufacturer: syz [ 830.331644][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.334538][T10180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.344786][ T17] usb 3-1: Product: syz [ 830.353811][T21384] usb 5-1: SerialNumber: syz [ 830.356079][ T17] usb 3-1: Manufacturer: syz [ 830.362693][T10180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.370606][ T17] usb 3-1: SerialNumber: syz [ 830.385555][T10180] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 830.400100][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.411668][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.411835][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.427394][ T5] usb 1-1: Product: syz 12:57:56 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xb80c0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x0, &(0x7f00000000c0)) ioctl$FIONCLEX(r1, 0x5450) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 830.442163][ T5] usb 1-1: Manufacturer: syz [ 830.447265][ T5] usb 1-1: SerialNumber: syz [ 830.452272][ T4153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.463449][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.464664][ T4153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.507045][ T4153] usb 4-1: Product: syz [ 830.511752][T21384] cdc_ncm 5-1:1.0: bind() failure [ 830.514384][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 830.527839][ T4153] usb 4-1: Manufacturer: syz [ 830.537966][T21384] cdc_ncm 5-1:1.1: bind() failure [ 830.549737][ T4153] usb 4-1: SerialNumber: syz [ 830.552144][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 830.581164][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 830.586606][T21384] usb 5-1: USB disconnect, device number 123 [ 830.609361][T10180] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.618435][T10180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.623747][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 830.630954][ T4153] cdc_ncm 4-1:1.0: bind() failure 12:57:56 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x6, 0x4) [ 830.652737][ T1570] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 830.690326][T10180] usb 6-1: Product: syz [ 830.694521][T10180] usb 6-1: Manufacturer: syz [ 830.700265][ T5] cdc_ncm 1-1:1.0: bind() failure [ 830.711187][ T5] cdc_ncm 1-1:1.1: bind() failure [ 830.720215][T10180] usb 6-1: SerialNumber: syz [ 830.742833][ T5] usb 1-1: USB disconnect, device number 127 [ 830.748783][ T17] cdc_ncm 3-1:1.0: bind() failure [ 830.796190][ T17] cdc_ncm 3-1:1.1: bind() failure [ 830.799848][T10180] cdc_ncm 6-1:1.0: bind() failure [ 830.848483][T10180] cdc_ncm 6-1:1.1: bind() failure [ 830.856813][ T17] usb 3-1: USB disconnect, device number 84 [ 830.879819][T14691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.906802][T14691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.951640][T14691] usb 2-1: Product: syz [ 830.969668][T14691] usb 2-1: Manufacturer: syz [ 830.985662][T14691] usb 2-1: SerialNumber: syz [ 831.008948][T21384] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 831.042275][T18901] usb 6-1: USB disconnect, device number 90 [ 831.099451][T21384] usb 5-1: Using ep0 maxpacket: 32 [ 831.160442][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 831.249290][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 831.261514][ T1656] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 831.278725][T14691] cdc_ncm 2-1:1.0: bind() failure [ 831.299862][T21384] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.312310][T14691] cdc_ncm 2-1:1.1: bind() failure [ 831.349638][T21384] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 831.425120][T14691] usb 2-1: USB disconnect, device number 106 [ 831.448338][T21384] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.462410][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.510077][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 12:57:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)=']\x00', r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x40, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x17, &(0x7f0000000180)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x1, 0xa7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x9, 0x7f, 0x4, 0x6}]}}) [ 831.610706][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 12:57:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x5d, "d5353ce0afc1baad64d5f1cd4497e712169f5a86163122a26261e8c42ef185c4ed4e79b7f0b5f4600b8b837cf958e6f458fe3c4db0c6efae3e03359f43e65cc54096aef3e30a1741499e220eadd22e31f13979c7e3cb8660c3d429f22d"}, &(0x7f0000000140)=0x81) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 831.659915][ T5] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 831.676070][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 831.686108][ T5] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 831.697923][T10180] usb 4-1: USB disconnect, device number 97 [ 831.750415][T21384] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.784122][T21384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.800746][T21384] usb 5-1: Product: syz [ 831.804993][T21384] usb 5-1: Manufacturer: syz [ 831.824136][T21384] usb 5-1: SerialNumber: syz [ 831.849237][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.858289][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.868826][ T5] usb 1-1: Product: syz [ 831.873013][ T5] usb 1-1: Manufacturer: syz [ 831.877603][ T5] usb 1-1: SerialNumber: syz [ 831.883285][T21384] cdc_ncm 5-1:1.0: bind() failure [ 831.988668][T18901] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 832.029312][T14691] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 832.039182][ T17] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 832.079453][T18901] usb 6-1: Using ep0 maxpacket: 32 [ 832.087598][ T9921] usb 5-1: USB disconnect, device number 124 [ 832.138659][T14691] usb 2-1: Using ep0 maxpacket: 32 [ 832.143976][ T17] usb 3-1: Using ep0 maxpacket: 32 [ 832.169116][T10180] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 832.208791][ T5] cdc_ncm 1-1:1.0: bind() failure [ 832.216843][ T5] cdc_ncm 1-1:1.1: bind() failure [ 832.229702][ T5] usb 1-1: USB disconnect, device number 2 [ 832.281622][T10180] usb 4-1: Using ep0 maxpacket: 32 [ 832.298652][T18901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.308914][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.321712][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.331743][T18901] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 832.348635][T14691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 832.398654][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.409977][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.420625][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 832.430968][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 832.441322][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 832.451588][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.462565][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 832.473046][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.479629][T10180] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.483697][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 832.496795][T10180] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.504497][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 832.515864][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.526212][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 832.537207][T10180] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 832.545497][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 832.555966][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.574149][T18901] usb 6-1: Product: syz [ 832.578327][T18901] usb 6-1: Manufacturer: syz [ 832.582989][T10180] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 832.595006][T18901] usb 6-1: SerialNumber: syz [ 832.600063][T10180] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 832.612266][T10180] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:57:58 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d00000524060001052400bd5cc837e54821cc5ca77a0d0500000d240f0100000000000000000006241a0000000905850300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f0000000640)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba72764f460593d41d43e9f589502652fe815ef1da2c0975e828d69536eb96c2c27f564dcc44d2a18bf98a8698f09764ff95bda5a0520964e8e84670e557cc255a621254e23c5e3afd68721e31a0caa4ac9e40a612dd4bff3553cc00a47f618b8289ce1086193ea338ae5473fc048d1e696a52f65d00d34ed03cfb8125020463ba3054af5f7a2fd4c733242927960b07d0d81f303157417af8907b820d74a1dc84ea78e317584a11da56d5842dec5823a376d939a621adf86c8297db303ab14b7fa0cfa4316987c1ac3303f6acdaa8a946496cb09a6a0785a49f67cfe7725ff477933e4f38d99e6062f1bec6c4e857d64a8ba966cc4c024177bb10e4f5c05db8e7d4cd2437cff4067d9c6f68d8faf4342112a53e640e2c070ed68a364a209139ad", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x100, 0x4) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ffc000/0x3000)=nil}) [ 832.649581][T18901] cdc_ncm 6-1:1.0: bind() failure [ 832.658503][T18901] cdc_ncm 6-1:1.1: bind() failure [ 832.689371][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:57:58 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="050f08001103000af142b1dc"]}) [ 832.698436][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.701451][T18901] usb 6-1: USB disconnect, device number 91 [ 832.714584][ T17] usb 3-1: Product: syz [ 832.719991][ T17] usb 3-1: Manufacturer: syz [ 832.724682][ T17] usb 3-1: SerialNumber: syz 12:57:58 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = accept$ax25(r0, 0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @bcast, r3}) [ 832.778888][T10180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.792400][T10180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.802415][T10180] usb 4-1: Product: syz [ 832.821758][T10180] usb 4-1: Manufacturer: syz [ 832.832489][T10180] usb 4-1: SerialNumber: syz [ 832.838639][T14691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.847690][T14691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.879776][T14691] usb 2-1: Product: syz [ 832.883964][T14691] usb 2-1: Manufacturer: syz [ 832.928652][T14691] usb 2-1: can't set config #1, error -71 [ 832.938317][T14691] usb 2-1: USB disconnect, device number 107 [ 832.958594][ T9921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 833.073059][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 833.078585][ T49] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 833.118584][T10180] cdc_ncm 4-1:1.0: bind() failure [ 833.132625][ T17] cdc_ncm 3-1:1.0: bind() failure [ 833.142880][ T17] cdc_ncm 3-1:1.1: bind() failure [ 833.155465][T10180] cdc_ncm 4-1:1.1: bind() failure [ 833.168593][T18901] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 833.192425][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 833.207667][ T17] usb 3-1: USB disconnect, device number 85 [ 833.229503][T10180] usb 4-1: USB disconnect, device number 98 [ 833.259321][T18901] usb 6-1: Using ep0 maxpacket: 32 [ 833.283952][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.306478][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.329358][T14691] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 833.341223][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 833.357393][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 833.371082][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 833.383600][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 833.418550][ T49] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 833.429002][T14691] usb 2-1: Using ep0 maxpacket: 32 [ 833.434227][ T49] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 833.443944][ T49] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.469379][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.480290][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.490443][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 833.500242][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 833.510048][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 833.519747][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 833.568639][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 833.579344][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.587497][ T9921] usb 1-1: Product: syz [ 833.593479][ T9921] usb 1-1: Manufacturer: syz [ 833.600004][ T9921] usb 1-1: SerialNumber: syz [ 833.629371][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 833.638634][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.653700][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.664978][T14691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 12:57:59 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xff) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0x2) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x6, 0x1f}, 0x13}, 0x10) [ 833.676668][ T49] usb 5-1: Product: syz [ 833.681614][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 833.689437][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 833.692295][ T49] usb 5-1: Manufacturer: syz [ 833.705469][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 833.706693][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.716041][ T49] usb 5-1: SerialNumber: syz [ 833.726607][T18901] usb 6-1: Product: syz [ 833.732587][T18901] usb 6-1: Manufacturer: syz [ 833.737403][T18901] usb 6-1: SerialNumber: syz [ 833.744802][T14691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 12:57:59 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 833.772182][T14691] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 833.789547][ T49] cdc_ncm 5-1:1.0: bind() failure [ 833.798721][T10180] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 833.808559][ T9921] cdc_ncm 1-1:1.0: bind() failure [ 833.830662][ T9921] cdc_ncm 1-1:1.1: bind() failure [ 833.868033][ T9921] usb 1-1: USB disconnect, device number 3 [ 833.889305][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 834.018659][T18901] cdc_ncm 6-1:1.0: bind() failure [ 834.019567][T14691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.026883][ T5] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 834.042613][T14691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.050388][T18901] cdc_ncm 6-1:1.1: bind() failure [ 834.062177][T14691] usb 2-1: Product: syz [ 834.073459][T14691] usb 2-1: Manufacturer: syz [ 834.082982][T14691] usb 2-1: SerialNumber: syz [ 834.083162][T18901] usb 6-1: USB disconnect, device number 92 [ 834.094367][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.117319][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.142391][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 834.153464][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 834.178622][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 834.188412][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 834.191391][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 834.207302][T21384] usb 5-1: USB disconnect, device number 125 [ 834.318512][ T9921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 834.358504][T14691] cdc_ncm 2-1:1.0: bind() failure [ 834.358536][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.367398][T14691] cdc_ncm 2-1:1.1: bind() failure [ 834.376724][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.386039][T10180] usb 3-1: Product: syz [ 834.395514][T10180] usb 3-1: Manufacturer: syz [ 834.400338][T10180] usb 3-1: SerialNumber: syz [ 834.403666][T14691] usb 2-1: USB disconnect, device number 108 [ 834.410953][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.419170][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 834.427534][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.442703][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 834.456052][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 834.468572][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 834.478325][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:00 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) [ 834.648698][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.659334][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.661538][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.681152][ T5] usb 4-1: Product: syz [ 834.685432][ T5] usb 4-1: Manufacturer: syz [ 834.688769][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.690524][ T5] usb 4-1: SerialNumber: syz [ 834.704605][T10180] cdc_ncm 3-1:1.0: bind() failure [ 834.720715][T10180] cdc_ncm 3-1:1.1: bind() failure [ 834.731822][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 834.738009][T10180] usb 3-1: USB disconnect, device number 86 [ 834.758440][T21384] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 834.768607][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 834.798449][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 834.808324][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 834.859144][T21384] usb 6-1: Using ep0 maxpacket: 32 [ 834.988470][ T5] cdc_ncm 4-1:1.0: bind() failure [ 834.996951][ T5] cdc_ncm 4-1:1.1: bind() failure [ 835.011571][T14691] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 835.015699][ T5] usb 4-1: USB disconnect, device number 99 [ 835.039254][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.048531][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.056595][ T9921] usb 1-1: Product: syz [ 835.064272][ T9921] usb 1-1: Manufacturer: syz [ 835.068476][T21384] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.079979][ T9921] usb 1-1: SerialNumber: syz [ 835.097206][T21384] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.108024][T21384] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.118683][T18901] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 835.126562][T21384] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 835.137085][T10180] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 835.144919][T21384] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 835.148445][T14691] usb 5-1: Using ep0 maxpacket: 32 [ 835.155854][T21384] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 835.238453][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 835.244126][T18901] usb 2-1: Using ep0 maxpacket: 32 [ 835.329562][T21384] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.338706][T21384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.346722][T21384] usb 6-1: Product: syz [ 835.352088][T21384] usb 6-1: Manufacturer: syz [ 835.356716][T21384] usb 6-1: SerialNumber: syz [ 835.369242][T14691] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 835.388423][ T9921] cdc_ncm 1-1:1.0: bind() failure [ 835.402152][ T9921] cdc_ncm 1-1:1.1: bind() failure [ 835.415910][T14691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 835.439056][ T9921] usb 1-1: USB disconnect, device number 4 [ 835.445500][T14691] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.449180][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.469528][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.483819][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.494519][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.505031][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.515596][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.526129][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 835.537895][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 835.548476][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 835.559014][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 835.569664][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 835.579955][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 835.638455][T21384] cdc_ncm 6-1:1.0: bind() failure [ 835.641750][T14691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.658388][T21384] cdc_ncm 6-1:1.1: bind() failure [ 835.658587][T14691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.688054][T14691] usb 5-1: Product: syz [ 835.696738][T21384] usb 6-1: USB disconnect, device number 93 [ 835.699709][T14691] usb 5-1: Manufacturer: syz [ 835.717777][T14691] usb 5-1: SerialNumber: syz 12:58:01 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="e44b7fa809877701", 0x8}, {&(0x7f0000000280)="a07f50c53726a03e649a3af890f9e1cfd9ee60b12138175887ef129339dd5e0da500aad510d5cd1e8e7e62fc89cf08eea379de81f854bceda215c948d714a57bdea98ebb3bb5be0ea27ea68c82222bce7047ad7cea587db52a57bc986999616b06d03831a55ca6c71efdb142be1a5299e861460ee4aab57afbf2cd3af1e020addffced3fe07c340881ecfeb509a6fc9861398041bf41c2446617f2c179a28591b39123fc5dc31576e9c6c028703af5075c", 0xb1}, {&(0x7f0000000340)="0ce99b86dabb30855df58a1c1d95ca3170c366985c3f377a2cd44a6bcfce507c5f12a51740982052a2cc4b4f3031dc39ddf5352781c64d5f0dee0d473b0db8b1ab618324a78cc48a1bbd69990e6c7da2e60aad315c9ea11e341d3b35cb5b874a1b1a48a8367833925cd8b1bd5cff3bd3ab0d297041f416350cd6a37e50204fba9a280d8250c662325d81f5d97c6edcc9228a4a3a92ec47cecc316a3fa7087b3a89056dddd4b2d896cc5d73770b7398e5d7bf4b56658c5ce8ab54a020af2d71bcc6733149fd4a3092d776f6434bf6992d23fe6d", 0xd3}], 0x3, 0x4) [ 835.751322][T18901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.761213][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.774895][T18901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.775040][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.778557][T14691] usb 5-1: can't set config #1, error -71 [ 835.806702][T10180] usb 3-1: Product: syz [ 835.813320][T18901] usb 2-1: Product: syz [ 835.817683][T14691] usb 5-1: USB disconnect, device number 126 [ 835.825332][T10180] usb 3-1: Manufacturer: syz [ 835.831294][T18901] usb 2-1: Manufacturer: syz [ 835.859968][T10180] usb 3-1: SerialNumber: syz [ 835.864885][T18901] usb 2-1: SerialNumber: syz [ 835.869766][ T5] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 835.921953][T18901] usb 2-1: can't set config #1, error -71 [ 835.930135][T18901] usb 2-1: USB disconnect, device number 109 12:58:01 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xf76}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="050f080001cb57da"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x0, 0xb5}, 0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x6}}}, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x0, 0xb5}, 0x10) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x7f63cd051f164543, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)={0x9, 0x8, 0x4, 0x40, 0x7fffffff, {0x77359400}, {0x0, 0x2, 0x0, 0x1f, 0x3, 0xe1, "9d0d94ab"}, 0xe67, 0x1, @planes=&(0x7f0000000000)={0x7c, 0x3, @fd=r0, 0xe1700000}, 0x3, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={r2, 0x8, 0x2, 0x7}, &(0x7f00000003c0)=0x10) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000080)=0x7f, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x3, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) [ 835.968620][ T5] usb 4-1: Using ep0 maxpacket: 32 12:58:01 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r5, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000003c0)="582fa80fa81550fe42faac8f8287b2795b874b5b5d9ef73e9fce699f2666ea9a7bbdd4a7bcee25586ec183c5510a41921ef756ce65acb2bc06939c676951322361afbb68263e65866bc8c2129854a8cf8eeb0e2b6628b5c617cbf575c041794fea6527a5809922a388731f9dcf0fdff21482fe8eb6413e67b7fca0e101ec", 0x7e}, {&(0x7f00000005c0)="ce4a9021591d34b8b6c52e555608c8ff25133e1a7a0aa9d865a382dd393bbc96ebd5f133eb326c5e4199910bbd64a004bf88cbfdff0b59c24ec1eb57945f110aff8cf5ec97718142b058dec80f17c0360fa52fc1d05048a11030c8ec9e833c372cc8", 0x62}, {&(0x7f0000000640)="a0572f96c8676ed4c552fddcc6274af2599760e80be980a1ecd0a658797a7989ce92859ee23330612cd134c722c046f7567c8a385eebf9258bb95c1882510b8a8d2e8008ad4b11a60e4cffd903f8a04ab5dae3f49e3b3e06bdd134dbd89cd48b373fd2e16c83e8dd7641ab1202fc2c6660dea2eda0001d6d07ba3fd05db50c3571e8f6acf51b58015a481785175d009c42e16e81209ffbf4880d46fe6d6dc26e749e7e661a721eadb58600b2619b2a5a8b0c92640b78434d080fd70d20f032f596aefc9716ac53c3", 0xc8}], 0x3, &(0x7f0000000980)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r5]}}], 0xc8}, 0xc8c1) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="902c20f5", @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf2502000000080002000200000008000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x5c, r2, 0x100, 0x70bd26, 0x5c4, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f08000103100a71a92f00901a10ee400e7e935329cbeb96f9d82f9685a09b0425ee519573248112d99ec92ac7c313a46e543003b7b891ff5d5c43418ef0f787363104d981892993751ddbd1e3ea97018d2dde7e731ddbb93feae743dfb1fba47110f5c5283d2c102b59f5e9"]}) 12:58:01 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x701500) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x1f, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 836.138373][ T9921] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 836.168789][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.202957][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.218398][T10180] cdc_ncm 3-1:1.0: bind() failure [ 836.236234][T10180] cdc_ncm 3-1:1.1: bind() failure [ 836.253329][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 836.256780][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.308598][T10180] usb 3-1: USB disconnect, device number 87 [ 836.333121][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 836.337314][T14691] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 836.345805][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.375831][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 836.380920][T18901] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 836.458369][T14691] usb 5-1: Using ep0 maxpacket: 32 [ 836.478382][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.488438][T18901] usb 2-1: Using ep0 maxpacket: 32 [ 836.490326][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.505251][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.515027][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 836.525456][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.536300][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 836.558607][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.569249][T23781] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 836.571126][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.585470][ T5] usb 4-1: Product: syz [ 836.592248][ T5] usb 4-1: Manufacturer: syz [ 836.596840][ T5] usb 4-1: SerialNumber: syz [ 836.659205][T23781] usb 6-1: Using ep0 maxpacket: 32 [ 836.678450][T14691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.688393][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.689531][T14691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.719158][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.723881][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.731625][T14691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.749214][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 12:58:02 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x0, &(0x7f00000000c0)) ioctl$sock_proto_private(r1, 0x89e8, &(0x7f0000000280)="339c967ca6dd723d9c905e51e5a1dda155cfc2f9f28006c93fad67f0bcc7cb825cc12666a2e3024737777b927a9551532f1cec244aa1da9c986d674d7112aa8e7978fd3e52a8936888da7da5b2e180ef1e8a187e65ebd4d925b8b3103a43bafd1c9183cad0f9151eaeba281d221b286e6b35920c0fe82d8635caf1b42e2a198a91321ecb71c04c18a896afd137510e5a89a2b6bc295ad67ff8c66ad903b0378b60622809a19dd6c08f7f96e475648999d0d811c815a3805cafa3e4339c6c") r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 836.749453][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.771802][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 836.797923][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.800635][ T9921] usb 1-1: Product: syz [ 836.808766][ T5] cdc_ncm 4-1:1.0: bind() failure [ 836.814421][T14691] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 836.827025][ T9921] usb 1-1: Manufacturer: syz [ 836.832724][ T9921] usb 1-1: SerialNumber: syz [ 836.835037][ T5] cdc_ncm 4-1:1.1: bind() failure [ 836.837444][T14691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.853983][T14691] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 836.863825][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 836.893589][ T5] usb 4-1: USB disconnect, device number 100 12:58:02 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000000000003000000000000000905810300000000000904010000020d0000090401010202f000000905820200000081000000030200000000000d7ba088f883b3867aac965b56e5a4028f7f249343"], &(0x7f0000000240)={0x0, 0x0, 0xe3, &(0x7f0000000040)={0x5, 0xf, 0xe3, 0x1, [@generic={0xde, 0x10, 0xa, "8359670f436b93230e198f7fc7688f5e1311d03c1b98b161ab95a6ef510f0c12b8d485659b582d7df3e65b3e809e8ac851b5c4c419bf0de91c345a175fb78b4bfb915020881e3aae11a7ea769e2c9720ce95dcd57b6ac66827697c4755a139aa6790f72fcc4c1ce04bc9143b4f2559516e20915ea0fc61ec8aaf797095a5c5d942ee52f559b095b41d9426dd8ee6181331ee828f425269903776a77d159abd82bb0903f5ea3c6ab4e8cbf2caab8494e5624b07d29730950dba5bd44f16eaed4a12d3cf003a79f1a442c56ce287c41551c237e18d509896dcc214df"}]}}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000340)={{0x10000, 0x5000, 0xb, 0x9, 0x6, 0x1, 0x8, 0xd3, 0x2, 0x3, 0x6, 0x2}, {0x9000, 0x2000, 0xc, 0xe1, 0x80, 0x24, 0x9, 0x1f, 0xff, 0x9f, 0x1f, 0x8}, {0x4, 0x100000, 0xe, 0x8, 0x1, 0x9, 0x9, 0x0, 0x0, 0xe3, 0x4, 0x4}, {0x5000, 0x1, 0x4, 0x4, 0x79, 0x0, 0x0, 0x0, 0xa, 0xa2, 0x20, 0x2}, {0x2000, 0x101003, 0x7, 0x1, 0xa0, 0x87, 0x78, 0x8, 0x29, 0x3, 0x40, 0xd7}, {0x2000, 0x10000, 0x1b, 0x7, 0x20, 0x9, 0x9, 0x7, 0x2, 0x6, 0x9, 0x7}, {0x1000, 0x4000, 0x10, 0x8, 0x81, 0x1, 0x4, 0x7f, 0x7, 0x5, 0x5, 0x8}, {0x1000, 0x108004, 0xe, 0x80, 0x8, 0x18, 0x3f, 0x6, 0x7, 0x6, 0x3, 0x1}, {0xd000, 0xffff}, {0x4000, 0x712}, 0x20000002, 0x0, 0x4, 0x2, 0x6, 0x8000, 0x0, [0xb0, 0x4, 0x73ec, 0x3]}) [ 836.909886][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.929150][ T9921] usb 1-1: can't set config #1, error -71 [ 836.941838][ T9921] usb 1-1: USB disconnect, device number 5 [ 836.960949][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.997933][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 837.017544][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 837.032537][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 837.044676][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 837.056466][T14691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.066329][T14691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.070667][T18901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.075830][T14691] usb 5-1: Product: syz [ 837.089266][T14691] usb 5-1: Manufacturer: syz [ 837.093950][T14691] usb 5-1: SerialNumber: syz [ 837.101710][T18901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.121697][T18901] usb 2-1: Product: syz [ 837.132830][T18901] usb 2-1: Manufacturer: syz [ 837.157457][T18901] usb 2-1: SerialNumber: syz [ 837.178314][T10180] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 837.279053][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 837.289191][T23781] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.302004][T23781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.318920][T23781] usb 6-1: Product: syz [ 837.328497][T23781] usb 6-1: Manufacturer: syz [ 837.337601][T23781] usb 6-1: SerialNumber: syz [ 837.381163][T14691] cdc_ncm 5-1:1.0: bind() failure [ 837.401145][T14691] cdc_ncm 5-1:1.1: bind() failure [ 837.410940][ T5] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 837.419191][T14691] usb 5-1: USB disconnect, device number 127 [ 837.478342][T18901] cdc_ncm 2-1:1.0: bind() failure [ 837.485951][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.513239][T18901] cdc_ncm 2-1:1.1: bind() failure [ 837.522850][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.539191][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 837.568358][T18901] usb 2-1: USB disconnect, device number 110 [ 837.577781][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 837.613157][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 837.637828][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 837.638334][T23781] cdc_ncm 6-1:1.0: bind() failure [ 837.679667][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 837.684191][T23781] cdc_ncm 6-1:1.1: bind() failure [ 837.704666][T23781] usb 6-1: USB disconnect, device number 94 [ 837.748580][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.772747][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 12:58:03 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)={0x22, 0x1e, &(0x7f0000000280)}) ioctl$KDDISABIO(r0, 0x4b37) [ 837.808305][T10180] usb 3-1: string descriptor 0 read error: -71 [ 837.815821][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.831972][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.872814][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.908283][T10180] usb 3-1: can't set config #1, error -71 [ 837.916607][T10180] usb 3-1: USB disconnect, device number 88 [ 838.061119][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.078167][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.110358][ T5] usb 4-1: Product: syz [ 838.128326][ T5] usb 4-1: Manufacturer: syz [ 838.142183][ T5] usb 4-1: SerialNumber: syz [ 838.169924][T18901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 838.189976][ T5] cdc_ncm 4-1:1.0: bind() failure [ 838.268239][T18901] usb 5-1: Using ep0 maxpacket: 32 [ 838.288231][T10180] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 838.300799][T21384] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 838.381247][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 838.392990][ T4153] usb 4-1: USB disconnect, device number 101 [ 838.399865][T21384] usb 2-1: Using ep0 maxpacket: 32 [ 838.419230][ T5] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 838.468294][T18901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.484546][T18901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.502261][T18901] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 838.512951][T18901] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 838.527357][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 838.532823][T18901] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 838.547154][T18901] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 838.578958][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.594316][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.607177][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 838.622782][T21384] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.634122][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 838.649635][T21384] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.663020][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 838.675299][T21384] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 838.690155][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 838.702545][T21384] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 838.715317][T21384] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 838.727803][T21384] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 838.741700][T18901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.751589][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.764924][T18901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.774558][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.788084][T18901] usb 5-1: Product: syz [ 838.792765][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 838.806019][T18901] usb 5-1: Manufacturer: syz [ 838.811149][T18901] usb 5-1: SerialNumber: syz [ 838.815805][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 838.833258][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 838.846392][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:04 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="521a29a184c2d61a90cbf4143aafd9ea6958cddf20b32fa9ffa9baba638b2861941b3cb4e971f5f2616ee04af5fcab7864555be0a06eb37af02ddebdfc6e1c31932c4c6ee94f94b4fc1ab7f242b276ee91234941c6d17551"]}) [ 838.878252][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.896180][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.912522][T18901] usb 5-1: can't set config #1, error -71 [ 838.920541][T21384] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.944197][T18901] usb 5-1: USB disconnect, device number 2 [ 838.977211][T21384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.002621][T10180] usb 3-1: Product: syz [ 839.009336][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.028568][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.036698][T21384] usb 2-1: Product: syz [ 839.045877][T10180] usb 3-1: Manufacturer: syz [ 839.065095][T21384] usb 2-1: Manufacturer: syz [ 839.071143][T10180] usb 3-1: SerialNumber: syz 12:58:04 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}) [ 839.080414][ T5] usb 6-1: Product: syz [ 839.085970][T21384] usb 2-1: SerialNumber: syz [ 839.096056][ T5] usb 6-1: Manufacturer: syz [ 839.107507][ T5] usb 6-1: SerialNumber: syz [ 839.118180][T21384] usb 2-1: can't set config #1, error -71 [ 839.127351][T21384] usb 2-1: USB disconnect, device number 111 [ 839.198227][ T9921] usb 4-1: new high-speed USB device number 102 using dummy_hcd 12:58:05 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="05ed0700ee66b22e"]}) [ 839.259861][ T5] usb 6-1: can't set config #1, error -71 [ 839.273992][ T5] usb 6-1: USB disconnect, device number 95 [ 839.288671][ T9921] usb 4-1: Using ep0 maxpacket: 32 [ 839.378201][T10180] cdc_ncm 3-1:1.0: bind() failure [ 839.399571][T18901] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 839.413731][T10180] cdc_ncm 3-1:1.1: bind() failure [ 839.443294][T10180] usb 3-1: USB disconnect, device number 89 [ 839.509291][T18901] usb 5-1: Using ep0 maxpacket: 32 [ 839.514824][T21384] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 839.528383][ T9921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.550376][ T9921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 839.579044][ T9921] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.611231][T21384] usb 2-1: Using ep0 maxpacket: 32 [ 839.679376][T18901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 839.718199][ T5] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 839.759235][T18901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.771632][T21384] usb 2-1: unable to get BOS descriptor or descriptor too short [ 839.809026][T18901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.820347][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 839.845441][T18901] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 839.866052][T18901] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 839.877631][T21384] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.878314][ T9921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.892103][T18901] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 839.911867][ T9921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.912546][T21384] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.953824][T18901] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 839.962091][ T9921] usb 4-1: Product: syz [ 839.965522][T21384] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 839.970183][ T9921] usb 4-1: Manufacturer: syz [ 839.982546][T21384] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 839.993735][ T5] usb 6-1: unable to get BOS descriptor or descriptor too short [ 840.005263][T21384] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 840.016980][ T9921] usb 4-1: SerialNumber: syz [ 840.017070][T21384] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:05 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="849534ac066282d0"]}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)) getsockopt(r0, 0x3, 0x1000, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) [ 840.078180][ T9921] usb 4-1: can't set config #1, error -71 [ 840.097855][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.098212][ T9921] usb 4-1: USB disconnect, device number 102 [ 840.113803][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.146733][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.160828][T18901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.173300][T18901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.186399][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 840.200796][T18901] usb 5-1: Product: syz [ 840.205115][T18901] usb 5-1: Manufacturer: syz [ 840.211958][T21384] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.223730][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 840.235186][T18901] usb 5-1: SerialNumber: syz [ 840.243032][T21384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.255233][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 840.267867][T21384] usb 2-1: Product: syz [ 840.276564][T21384] usb 2-1: Manufacturer: syz [ 840.284229][T21384] usb 2-1: SerialNumber: syz [ 840.438131][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.447312][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.456033][T10180] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 840.468124][ T5] usb 6-1: Product: syz [ 840.472310][ T5] usb 6-1: Manufacturer: syz [ 840.476905][ T5] usb 6-1: SerialNumber: syz [ 840.528130][T18901] cdc_ncm 5-1:1.0: bind() failure [ 840.554204][T18901] cdc_ncm 5-1:1.1: bind() failure [ 840.560434][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 840.569889][T21384] cdc_ncm 2-1:1.0: bind() failure [ 840.588091][ T9921] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 840.595720][T21384] cdc_ncm 2-1:1.1: bind() failure [ 840.622997][T18901] usb 5-1: USB disconnect, device number 3 [ 840.641529][T21384] usb 2-1: USB disconnect, device number 112 [ 840.688101][ T9921] usb 4-1: Using ep0 maxpacket: 32 [ 840.758124][ T5] cdc_ncm 6-1:1.0: bind() failure [ 840.767040][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.785967][ T5] cdc_ncm 6-1:1.1: bind() failure [ 840.791351][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.815758][ T5] usb 6-1: USB disconnect, device number 96 [ 840.827669][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.855068][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 840.888356][ T9921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 840.902099][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 840.914945][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:06 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010001000000000000000f0000000500300001000000060028000000000008003900d709000005002f000000000005002f000000000008000b000000000008003c000002000005002f00f0ffff0005002e000100000008000300", @ANYRES32=r3], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/285], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x28001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb50}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) [ 840.978088][T10180] usb 3-1: string descriptor 0 read error: -71 [ 840.986878][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.997311][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.998312][ T9921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.028168][T10180] usb 3-1: can't set config #1, error -71 [ 841.040908][T10180] usb 3-1: USB disconnect, device number 90 [ 841.048978][ T9921] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 841.072431][ T2079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:58:07 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011000020000202505a1a440000102030109025c0002010800000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905c20e3ad4fb2c740bfa6248cdc2820200"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 841.248311][ T9921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.260747][ T9921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.278060][T18901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 841.298050][ T9921] usb 4-1: Product: syz [ 841.302640][ T9921] usb 4-1: Manufacturer: syz [ 841.307233][ T9921] usb 4-1: SerialNumber: syz [ 841.348046][T23781] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 841.378762][T18901] usb 5-1: Using ep0 maxpacket: 32 [ 841.438887][T23781] usb 2-1: Using ep0 maxpacket: 32 [ 841.518072][T14691] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 841.538791][T18901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 841.597516][ T49] usb 4-1: USB disconnect, device number 103 [ 841.618696][T14691] usb 6-1: Using ep0 maxpacket: 32 [ 841.619569][T18901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.623872][ T17] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 841.643181][T23781] usb 2-1: unable to get BOS descriptor or descriptor too short [ 841.661298][T18901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.691214][T18901] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 841.715159][T18901] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 841.741879][T18901] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 841.759682][T23781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.767582][T18901] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 841.781884][T23781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.793334][ T17] usb 3-1: Using ep0 maxpacket: 32 [ 841.808045][T14691] usb 6-1: unable to get BOS descriptor or descriptor too short [ 841.828922][T23781] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 841.849022][T23781] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 841.865699][T23781] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 841.886703][T23781] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 841.896848][T14691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.914475][T14691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.935353][T14691] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 841.949553][ T17] usb 3-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 841.949628][T18901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.964349][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.983140][T14691] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 841.998284][T18901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.004071][T14691] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 842.020552][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.027570][T18901] usb 5-1: Product: syz [ 842.040224][T14691] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 842.044385][T18901] usb 5-1: Manufacturer: syz [ 842.051102][ T17] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xC2, skipping [ 842.079735][T18901] usb 5-1: SerialNumber: syz 12:58:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 842.095857][ T17] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 842.118017][T18901] usb 5-1: can't set config #1, error -71 [ 842.143495][T18901] usb 5-1: USB disconnect, device number 4 12:58:08 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="050f08000103100a5f721e567b44feb08495a5956a806d619c176942020abbe92ca0971bf0b0429b40828097fa096a26cbdf8c87e0cd12ff3defe3d5645a14df"]}) [ 842.218786][T23781] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 842.227873][T23781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.268838][T14691] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 842.277904][T14691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.318633][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 842.327744][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.340495][T23781] usb 2-1: Product: syz [ 842.365278][T23781] usb 2-1: Manufacturer: syz [ 842.379098][T14691] usb 6-1: Product: syz [ 842.405181][T14691] usb 6-1: Manufacturer: syz [ 842.414599][ T17] usb 3-1: Product: syz [ 842.419450][T23781] usb 2-1: can't set config #1, error -71 [ 842.444106][T14691] usb 6-1: SerialNumber: syz [ 842.452689][ T17] usb 3-1: Manufacturer: syz 12:58:08 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x11, 0x42, 0x4, 0x69}, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x0, &(0x7f00000000c0)) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000080)=0x2c) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 842.465959][T23781] usb 2-1: USB disconnect, device number 113 [ 842.481087][ T17] usb 3-1: SerialNumber: syz [ 842.500830][T14691] usb 6-1: can't set config #1, error -71 [ 842.509099][T14691] usb 6-1: USB disconnect, device number 97 [ 842.521006][ T49] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 842.640728][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 842.778235][ T9921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 842.818287][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 842.838320][ T17] cdc_ncm 3-1:1.0: bind() failure [ 842.868284][T23781] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 842.887076][ T17] cdc_ncm 3-1:1.1: bind() failure [ 842.897996][ T9921] usb 5-1: Using ep0 maxpacket: 32 [ 842.908239][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.930650][ T49] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 842.945393][ T17] usb 3-1: USB disconnect, device number 91 [ 842.959901][T23781] usb 2-1: Using ep0 maxpacket: 32 [ 842.968341][T14691] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 843.068201][T14691] usb 6-1: Using ep0 maxpacket: 32 [ 843.118169][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.127237][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.159329][ T49] usb 4-1: Product: syz [ 843.163517][ T49] usb 4-1: Manufacturer: syz [ 843.170736][T23781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.190117][ T49] usb 4-1: SerialNumber: syz 12:58:09 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x3b6e6655, 0x7a, 0x81, 0x20, 0x8, 0x79}) [ 843.202721][T23781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.238989][T23781] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.251249][ T49] usb 4-1: can't set config #1, error -71 [ 843.267988][T14691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.283812][ T49] usb 4-1: USB disconnect, device number 104 [ 843.290078][ T9921] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.320205][T14691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.337919][ T9921] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.347661][ T9921] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.361230][T23781] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 843.387894][T14691] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.397646][T14691] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 843.411206][T23781] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 843.421814][ T9921] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 12:58:09 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x713c81, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, r3, 0x1c, 0x1, @in={0x2, 0x4e22, @multicast1}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x4a439dc5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}, r3}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) [ 843.435011][T23781] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 843.445490][T14691] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 843.458569][ T9921] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 843.470669][T14691] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 843.481581][ T9921] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 843.618157][ T5] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 843.659243][T23781] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.678480][T23781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.686520][T23781] usb 2-1: Product: syz [ 843.698072][ T9921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.707116][ T9921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.708575][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 843.716216][T14691] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.729633][T23781] usb 2-1: Manufacturer: syz [ 843.734236][T23781] usb 2-1: SerialNumber: syz [ 843.740064][T14691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.749069][ T9921] usb 5-1: Product: syz [ 843.753246][ T9921] usb 5-1: Manufacturer: syz [ 843.759029][T14691] usb 6-1: Product: syz [ 843.763199][T14691] usb 6-1: Manufacturer: syz [ 843.767805][T14691] usb 6-1: SerialNumber: syz [ 843.768724][ T9921] usb 5-1: SerialNumber: syz [ 843.798951][ T4956] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 843.806495][ T49] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 843.860949][ T5] usb 3-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 843.871332][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.884767][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.887893][ T4956] usb 1-1: Using ep0 maxpacket: 32 [ 843.895576][ T5] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xC2, skipping [ 843.899731][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 843.913463][ T5] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.038272][T23781] cdc_ncm 2-1:1.0: bind() failure [ 844.047693][T23781] cdc_ncm 2-1:1.1: bind() failure [ 844.059096][T14691] cdc_ncm 6-1:1.0: bind() failure [ 844.081260][T14691] cdc_ncm 6-1:1.1: bind() failure [ 844.097926][ T9921] cdc_ncm 5-1:1.0: bind() failure [ 844.106739][ T9921] cdc_ncm 5-1:1.1: bind() failure [ 844.112125][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.123101][ T4956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.135801][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.137203][T23781] usb 2-1: USB disconnect, device number 114 [ 844.153209][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.156347][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.162999][ T4956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.163023][ T4956] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.197637][ T5] usb 3-1: Product: syz [ 844.202835][T14691] usb 6-1: USB disconnect, device number 98 [ 844.207756][ T5] usb 3-1: Manufacturer: syz [ 844.218559][ T9921] usb 5-1: USB disconnect, device number 5 [ 844.225778][ T5] usb 3-1: SerialNumber: syz [ 844.248581][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.290130][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.311073][ T4956] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.330542][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 12:58:10 executing program 2: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)=""/61, &(0x7f00000000c0)=0x3d) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000db00000009055f490000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 844.343782][ T4956] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 844.356824][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 844.367747][ T4956] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 844.457856][ T5] cdc_ncm 3-1:1.0: bind() failure [ 844.491131][ T5] cdc_ncm 3-1:1.1: bind() failure [ 844.535196][ T5] usb 3-1: USB disconnect, device number 92 [ 844.538333][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.551169][ T4956] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.568179][ T4956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.578989][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.587267][ T4956] usb 1-1: Product: syz [ 844.591915][ T49] usb 4-1: Product: syz [ 844.596369][ T4956] usb 1-1: Manufacturer: syz [ 844.601364][ T49] usb 4-1: Manufacturer: syz [ 844.606237][ T4956] usb 1-1: SerialNumber: syz [ 844.611650][ T49] usb 4-1: SerialNumber: syz 12:58:10 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0xb2, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0xe28}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x58c9, 0x1, 0x1f, 0x7, 0x3f}, @mbim={0xc, 0x24, 0x1b, 0x401, 0x3, 0x40, 0x3, 0x6, 0xe1}, @obex={0x5, 0x24, 0x15, 0x8002}, @country_functional={0xe, 0x24, 0x7, 0x8, 0xff, [0x51b, 0x800, 0x9, 0x1]}, @acm={0x4, 0x24, 0x2, 0xe5452ed4266a3c43}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x1d, &(0x7f00000000c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xa2, 0x3, 0x5, 0x0, 0x4, [0xf, 0x3f00, 0xff0030]}]}}) [ 844.837879][T18901] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 844.897884][ T4956] cdc_ncm 1-1:1.0: bind() failure [ 844.903018][T23781] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 844.910695][ T49] cdc_ncm 4-1:1.0: bind() failure [ 844.921967][ T4956] cdc_ncm 1-1:1.1: bind() failure [ 844.928261][T18901] usb 2-1: Using ep0 maxpacket: 32 [ 844.928759][ T49] cdc_ncm 4-1:1.1: bind() failure [ 844.948454][ T4956] usb 1-1: USB disconnect, device number 6 [ 844.950951][ T4153] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 844.960103][ T49] usb 4-1: USB disconnect, device number 105 [ 844.961890][ T5] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 845.022055][T23781] usb 6-1: Using ep0 maxpacket: 32 [ 845.079496][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 845.088417][ T4153] usb 5-1: Invalid ep0 maxpacket: 512 [ 845.137959][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.148921][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.160539][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.170967][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 845.181911][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 845.192273][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 845.227933][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.227998][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.240964][ T4153] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 845.253139][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.266072][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 845.277959][ T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.279758][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 845.291537][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.299050][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 845.310946][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.330022][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.340087][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 845.354144][ T4153] usb 5-1: Invalid ep0 maxpacket: 512 [ 845.359665][ T4153] usb usb5-port1: attempt power cycle [ 845.365059][ T5] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.382141][T18901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 845.393754][T18901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.401836][T18901] usb 2-1: Product: syz [ 845.406011][T18901] usb 2-1: Manufacturer: syz [ 845.410673][T18901] usb 2-1: SerialNumber: syz 12:58:11 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x18000000, 0x6, 0x4, 0x40000000, 0x8d, {r0, r1/1000+10000}, {0x2, 0x1, 0x7, 0x2, 0x2, 0x1f, "679305e2"}, 0x1, 0x8542ca90945cd44f, @fd=r2, 0x7f, 0x0, 0xffffffffffffffff}) ioctl$TIOCCONS(r3, 0x541d) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 845.517786][T23781] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 845.537778][T23781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.545797][T23781] usb 6-1: Product: syz [ 845.570000][T18901] cdc_ncm 2-1:1.0: bind() failure [ 845.578574][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 845.594496][T18901] cdc_ncm 2-1:1.1: bind() failure [ 845.594551][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.610065][T23781] usb 6-1: Manufacturer: syz 12:58:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x4040800) [ 845.623227][T23781] usb 6-1: SerialNumber: syz [ 845.635902][T18901] usb 2-1: USB disconnect, device number 115 [ 845.665856][ T5] usb 3-1: Product: syz [ 845.667804][T23781] usb 6-1: can't set config #1, error -71 [ 845.677348][ T5] usb 3-1: Manufacturer: syz [ 845.681022][T23781] usb 6-1: USB disconnect, device number 99 [ 845.682152][T10180] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 845.695439][T21384] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 845.710700][ T5] usb 3-1: SerialNumber: syz [ 845.788551][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 845.798164][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 845.987799][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.998992][ T5] cdc_ncm 3-1:1.0: bind() failure [ 846.007288][ T5] cdc_ncm 3-1:1.1: bind() failure [ 846.012441][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.023475][T18901] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 846.034094][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.043875][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.056869][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 846.066718][ T5] usb 3-1: USB disconnect, device number 93 [ 846.072733][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 846.083751][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 846.094191][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 846.117748][ T4153] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 846.125253][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 846.135171][T18901] usb 2-1: Using ep0 maxpacket: 32 [ 846.141159][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 846.150884][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 846.166573][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 846.197790][T23781] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 846.298472][T23781] usb 6-1: Using ep0 maxpacket: 32 12:58:12 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) rt_tgsigqueueinfo(r1, r2, 0x8, &(0x7f0000000000)={0x31, 0x6, 0x8}) [ 846.327855][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.338548][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.349537][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.358963][ T4153] usb 5-1: Invalid ep0 maxpacket: 512 [ 846.369303][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.378126][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.392099][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.407744][T10180] usb 1-1: Product: syz [ 846.412040][T10180] usb 1-1: Manufacturer: syz [ 846.416892][T10180] usb 1-1: SerialNumber: syz [ 846.423316][T21384] usb 4-1: Product: syz [ 846.427523][T21384] usb 4-1: Manufacturer: syz [ 846.433058][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 846.445044][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 846.457746][T21384] usb 4-1: can't set config #1, error -71 [ 846.464513][T21384] usb 4-1: USB disconnect, device number 106 12:58:12 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x1}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x3d}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 846.487969][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 846.507810][ T4153] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 846.520294][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000002c0)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r1, r3, r6) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 846.540606][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.567697][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.579748][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 846.598441][T10180] cdc_ncm 1-1:1.0: bind() failure [ 846.606425][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 846.606855][T10180] cdc_ncm 1-1:1.1: bind() failure [ 846.634681][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 846.652353][T10180] usb 1-1: USB disconnect, device number 7 [ 846.656230][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 846.710038][T18901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.723930][T18901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.737748][T18901] usb 2-1: Product: syz [ 846.742233][T18901] usb 2-1: Manufacturer: syz [ 846.746990][T18901] usb 2-1: SerialNumber: syz [ 846.754185][ T4153] usb 5-1: Invalid ep0 maxpacket: 512 [ 846.759809][ T4153] usb usb5-port1: unable to enumerate USB device [ 846.877720][T21384] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 846.878594][T23781] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.894727][T23781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.902855][T23781] usb 6-1: Product: syz [ 846.907003][T23781] usb 6-1: Manufacturer: syz [ 846.911635][T23781] usb 6-1: SerialNumber: syz [ 846.967789][ T49] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 846.967932][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 847.017952][T10180] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 847.048137][T18901] cdc_ncm 2-1:1.0: bind() failure [ 847.056493][T18901] cdc_ncm 2-1:1.1: bind() failure [ 847.068556][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 847.089274][T18901] usb 2-1: USB disconnect, device number 116 [ 847.109376][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 847.187750][T23781] cdc_ncm 6-1:1.0: bind() failure [ 847.188467][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.205943][T23781] cdc_ncm 6-1:1.1: bind() failure [ 847.209269][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.217471][T23781] usb 6-1: USB disconnect, device number 100 [ 847.239484][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.267648][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 847.277480][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 847.288755][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 847.315619][ T49] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 847.325767][ T49] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 847.328458][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.336928][ T49] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.347334][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.368658][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.378743][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 847.388701][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 847.398622][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 847.457757][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.471707][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.480766][T21384] usb 4-1: Product: syz [ 847.484927][T21384] usb 4-1: Manufacturer: syz [ 847.492390][T21384] usb 4-1: SerialNumber: syz 12:58:13 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003020000202505a1b740000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302000000000009da96e6c642e528ebd9595d0db960724ebf4fb0b86d8c85041a68"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x1, 0x2}) [ 847.548461][ T49] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.558061][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.566111][ T49] usb 3-1: Product: syz [ 847.570126][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.572179][ T49] usb 3-1: Manufacturer: syz [ 847.584694][ T49] usb 3-1: SerialNumber: syz [ 847.587181][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.604928][T10180] usb 1-1: Product: syz [ 847.610212][T10180] usb 1-1: Manufacturer: syz [ 847.615012][T10180] usb 1-1: SerialNumber: syz [ 847.628635][ T49] cdc_ncm 3-1:1.0: bind() failure 12:58:13 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="050f09000103100a"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 12:58:13 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003020000202551bd77a4c5b2a8e8db58a4c8283bfa40000102030109025c0002010000000904000001020d000005240600010587d403120d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'syzkaller0\x00'}) 12:58:13 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)) close(r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 847.841415][T23781] usb 3-1: USB disconnect, device number 94 [ 847.857816][T21384] cdc_ncm 4-1:1.0: bind() failure [ 847.881496][T21384] cdc_ncm 4-1:1.1: bind() failure [ 847.897731][T10180] cdc_ncm 1-1:1.0: bind() failure [ 847.914597][T10180] cdc_ncm 1-1:1.1: bind() failure [ 847.919910][T18901] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 847.931733][T21384] usb 4-1: USB disconnect, device number 107 [ 847.949907][T10180] usb 1-1: USB disconnect, device number 8 [ 848.028151][T18901] usb 2-1: Using ep0 maxpacket: 32 [ 848.227627][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.238635][ T5] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 848.249880][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.260282][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 848.270162][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 848.280024][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.290428][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 848.338379][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 848.358355][T21384] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 848.389858][ T4153] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 848.447648][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 848.457637][ T5] usb 5-1: unable to get BOS descriptor set [ 848.463676][T18901] usb 2-1: New USB device found, idVendor=0525, idProduct=b7a1, bcdDevice= 0.40 [ 848.474781][T18901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.483542][T18901] usb 2-1: Product: syz [ 848.488692][ T4153] usb 6-1: Using ep0 maxpacket: 32 [ 848.493831][T18901] usb 2-1: Manufacturer: syz [ 848.498934][T18901] usb 2-1: SerialNumber: syz [ 848.537773][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.550608][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.561368][ T5] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 848.573089][ T5] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.583396][ T5] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 848.608885][ T4153] usb 6-1: too many configurations: 219, using maximum allowed: 8 [ 848.618282][ T49] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 848.648670][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.659832][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.670381][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 848.677605][T23781] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 848.680208][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 848.697341][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.707176][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 848.737823][ T4153] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 848.738522][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 848.745594][ T4153] usb 6-1: can't read configurations, error -61 [ 848.758485][ T5] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.768694][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.777143][ T5] usb 5-1: Product: syz [ 848.781722][ T5] usb 5-1: Manufacturer: syz [ 848.786471][ T5] usb 5-1: SerialNumber: syz [ 848.791302][T18901] cdc_ncm 2-1:1.0: bind() failure [ 848.797615][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 848.801102][T18901] cdc_ncm 2-1:1.1: bind() failure [ 848.813113][T18901] usb 2-1: USB disconnect, device number 117 [ 848.890179][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.899435][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.907416][T21384] usb 4-1: Product: syz [ 848.912182][T21384] usb 4-1: Manufacturer: syz [ 848.918255][ T4153] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 848.926280][T21384] usb 4-1: SerialNumber: syz [ 848.988419][ T49] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 848.998550][ T49] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 849.007420][ T49] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.007604][ T4153] usb 6-1: Using ep0 maxpacket: 32 [ 849.038391][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.051538][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.062525][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 849.072842][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 849.083651][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 849.087642][ T5] cdc_ncm 5-1:1.0: bind() failure [ 849.093731][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 849.114878][ T5] cdc_ncm 5-1:1.1: bind() failure [ 849.130335][ T5] usb 5-1: USB disconnect, device number 10 [ 849.142743][ T4153] usb 6-1: too many configurations: 219, using maximum allowed: 8 [ 849.198375][ T49] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.207471][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.208388][T21384] cdc_ncm 4-1:1.0: bind() failure [ 849.221899][ T49] usb 3-1: Product: syz [ 849.226305][ T49] usb 3-1: Manufacturer: syz [ 849.228638][T21384] cdc_ncm 4-1:1.1: bind() failure [ 849.232778][ T49] usb 3-1: SerialNumber: syz [ 849.266882][T21384] usb 4-1: USB disconnect, device number 108 [ 849.272981][ T4153] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 849.283233][ T4153] usb 6-1: can't read configurations, error -61 [ 849.289126][ T49] cdc_ncm 3-1:1.0: bind() failure [ 849.297961][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.303081][ T4153] usb usb6-port1: attempt power cycle [ 849.316813][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.346142][T23781] usb 1-1: Product: syz [ 849.361364][T23781] usb 1-1: Manufacturer: syz [ 849.366031][T23781] usb 1-1: SerialNumber: syz 12:58:15 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="050f050001"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, r3, 0x1c, 0x1, @in={0x2, 0x4e22, @multicast1}}}, 0xa0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x22, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 849.497587][T10180] usb 3-1: USB disconnect, device number 95 12:58:15 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "c64979e797cf"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6112}, {0x6, 0x24, 0x1a, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x85}, @obex={0x5, 0x24, 0x15, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="cf2466bcc6828177132acd786987692008af1a8acb58aae71e4623fb860d729e96cd2b220287eedace668766853196ef9fd7a4351d0735ceec4820faab533fe0eef077b2d7cd7c4a0dad81cc0404603065e7e9ad7a74e65a79ccfdc3b6"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}, {0xca, &(0x7f0000000280)=@string={0xca, 0x3, "71433caaa31044e08f728a3e53bb5950a1f15f0d1877b948495a4078ae428d68ce865da70bc629e047f918c3cc8e99a765190e6d9a871c917a42ac24576a430fc0a17d55871010bc41acd06e4d3c4f57dd43c65d9015d011910e60e3fdc30dc43a3331e7ca801188f52ed1b7006887760c3bef2741fff63e7c7f2e8d4056d6466e3a0fc77327594c3517ac164d87d3a806ee7bd183466a5e1b0c02e2424d631b55e3ae1cebc24e2eda169568dc36849091af0488ce8d991f04aa3fdeb81b3cfba94b15784376e7e8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0xf2, &(0x7f0000000380)=@string={0xf2, 0x3, "9ec43bc567c391a4bad8f82ac445663709b93fa47a60522ef0e9a15c907de1a3f771e8808d4fed31d94a508264947dae9691f9bed12439651ef5655dee19df0bd9b752189e285ce279c8c51e78c04c802b963b2108a8db0e03192a04c6c592ab6f00a71d8a65038e13fd4a2f2d142c053011811042960eec05e21ecc065c4da0b7f93d7233986f18f56967f31b71143ffdfde58d75c7e2326f21ff7a55c84dca47cc930c5f8abfe345ccff7105017c6d66ebbff3ad833a12a03cfbf4a28744c5bde2a6c6186dbc5f176d3dc8a92a613e7b845870cea95f782806a5b5bd92662089a52c0568842958f8567832fdc2be03"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x438}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000100)={0x20, 0x0, 0x80}) [ 849.579994][T18901] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 849.637555][T23781] cdc_ncm 1-1:1.0: bind() failure [ 849.662236][T23781] cdc_ncm 1-1:1.1: bind() failure [ 849.680594][T18901] usb 2-1: Using ep0 maxpacket: 32 [ 849.711009][T23781] usb 1-1: USB disconnect, device number 9 [ 849.841288][T21384] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 849.877545][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.888774][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.899608][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 849.910217][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 849.921168][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 849.931549][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 849.942581][T21384] usb 5-1: Using ep0 maxpacket: 32 [ 849.957513][ T5] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 849.965273][T10180] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 850.017568][ T4153] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 850.058767][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 850.064048][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 850.069259][T21384] usb 5-1: unable to get BOS descriptor set [ 850.107574][T18901] usb 2-1: New USB device found, idVendor=0525, idProduct=b7a1, bcdDevice= 0.40 [ 850.116930][T18901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.125272][T18901] usb 2-1: Product: syz [ 850.129645][T18901] usb 2-1: Manufacturer: syz [ 850.134572][T18901] usb 2-1: SerialNumber: syz [ 850.147579][T21384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.150931][T23781] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 850.167532][T21384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.185254][T21384] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 850.195442][T21384] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 850.205546][T21384] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 850.268682][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 850.277526][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.288533][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.300016][ T4153] usb 6-1: Using ep0 maxpacket: 32 [ 850.305284][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.315128][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.324978][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.334986][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.345015][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 850.354877][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 850.364691][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 850.374381][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 850.384307][T21384] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.393823][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 850.404199][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:16 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x1, 0x4, 0x40, 0x1, {r0, r1/1000+10000}, {0x2, 0xc, 0x4, 0x6, 0xff, 0xff, "08d472eb"}, 0x10001, 0x3, @fd=r2, 0x19, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="000103100a000000"]}) [ 850.414172][T21384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.423008][ T4153] usb 6-1: too many configurations: 219, using maximum allowed: 8 [ 850.437488][T18901] cdc_ncm 2-1:1.0: bind() failure [ 850.441105][T23781] usb 1-1: unable to get BOS descriptor or descriptor too short [ 850.446362][T18901] cdc_ncm 2-1:1.1: bind() failure [ 850.477493][T21384] usb 5-1: Product: syz [ 850.481746][T21384] usb 5-1: Manufacturer: syz [ 850.486361][T21384] usb 5-1: SerialNumber: syz [ 850.508248][T18901] usb 2-1: USB disconnect, device number 118 [ 850.539748][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.558137][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.577458][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 850.579781][ T4153] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 850.597637][ T4153] usb 6-1: can't read configurations, error -61 [ 850.600401][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 850.627505][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.636597][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.644681][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.657464][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 850.663854][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.682158][T10180] usb 3-1: Product: syz [ 850.686512][ T5] usb 4-1: Product: syz [ 850.692664][T10180] usb 3-1: Manufacturer: syz [ 850.698353][ T5] usb 4-1: Manufacturer: syz [ 850.703199][T10180] usb 3-1: SerialNumber: syz [ 850.708684][ T5] usb 4-1: SerialNumber: syz 12:58:16 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3f}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 850.749353][ T4153] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 850.808182][T21384] cdc_ncm 5-1:1.0: bind() failure [ 850.835026][T21384] cdc_ncm 5-1:1.1: bind() failure [ 850.858279][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.867360][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.877514][T21384] usb 5-1: USB disconnect, device number 11 [ 850.878437][T23781] usb 1-1: Product: ဉ [ 850.892516][T23781] usb 1-1: Manufacturer: 䍱꨼Ⴃ犏㺊뭓偙ൟ眘䢹婉础䊮梍蛎ꝝ옋磊쌘軌ꞙᥥ洎螚鄜䉺⒬橗གྷꇀ啽ႇ밐걁滐㱍坏䏝巆ᖐᇐຑ쏽쐍㌺胊蠑⻵럑栀皇㬌⟯ａ㻶罼贮噀䛖㩮윏❳䱙᜵ᚬ蝍꣓텻䚃幪ఛ䵂᭣Ხ싫⹎ᛚ梕㛜還꾑蠄跎ᾙꨄ᮸לּ䮩砕癃 [ 850.917437][T18901] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 850.926844][T23781] usb 1-1: SerialNumber: 쒞씻썧꒑⫸䗄㝦뤉ꐿ恺⹒岡綐ꏡ燷胨侍㇭䫙艐鑤깽醖뻹ⓑ改嵥᧮௟럙ᡒ⢞졹ễ쁸职阫℻ꠈ໛ᤃЪ없ꮒoᶧ斊踃ﴓ⽊ᐭԬᄰႁ陂찞将ꁍ醴爽頳ᡯ槵焛㼔﷽跥익㋢Ⅿ竿졕쩍챇ಓ詟책燿ą浼莭ሺ㲠螢아욦洘徼洗젽⪩㹡葻灘꧎硟ب떥銽⁦ꖉԬ葨堩囸㉸싽ξ [ 850.997475][ T4153] usb 6-1: Using ep0 maxpacket: 32 12:58:16 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 12:58:16 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x286) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$midi(r0, &(0x7f0000000000)="b3383172b02e5ab76f4ad78f0c11307dbb49c5f545eb610d93b6a6d588fb1d4810768175efb7a2ab24948a7eab16dba2867dd0d29124e1aa75236f87f93e61def490dfba3dc56e6120f011e7f2fd5379d74b5789059117ec3a363bd0ec2605a9eb5feb2d11d51cb6855d20e4fd4b3c12328625d4aefde1acbcade8fc4059f6b501b8f926", 0x84) syz_usb_connect$cdc_ncm(0x0, 0x18d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) [ 851.007597][T10180] cdc_ncm 3-1:1.0: bind() failure [ 851.027511][ T5] cdc_ncm 4-1:1.0: bind() failure [ 851.036236][ T5] cdc_ncm 4-1:1.1: bind() failure [ 851.045012][T10180] cdc_ncm 3-1:1.1: bind() failure [ 851.058202][ T4153] usb 6-1: device descriptor read/all, error -71 [ 851.066795][ T4153] usb usb6-port1: unable to enumerate USB device [ 851.078264][T18901] usb 2-1: Using ep0 maxpacket: 32 [ 851.089519][T10180] usb 3-1: USB disconnect, device number 96 [ 851.123365][ T5] usb 4-1: USB disconnect, device number 109 [ 851.238150][T18901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 851.258219][T21384] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 851.277428][T23781] cdc_ncm 1-1:1.0: bind() failure [ 851.286139][T23781] cdc_ncm 1-1:1.1: bind() failure [ 851.318588][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.341583][T23781] usb 1-1: USB disconnect, device number 10 [ 851.341988][T18901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.360412][T21384] usb 5-1: Using ep0 maxpacket: 32 [ 851.404045][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 851.420142][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 851.445479][T18901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 851.460255][ T4153] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 851.473688][T18901] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 851.537535][ T5] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 851.557510][ T4153] usb 6-1: Using ep0 maxpacket: 32 [ 851.568061][T21384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 851.579283][T21384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.590038][T21384] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 851.600438][T21384] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 851.610906][T21384] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 851.621456][T21384] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 851.631859][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 851.657478][T18901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.667245][T18901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.676428][T18901] usb 2-1: Product: syz [ 851.680818][T18901] usb 2-1: Manufacturer: syz [ 851.685460][T18901] usb 2-1: SerialNumber: syz [ 851.757429][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.772456][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.782873][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 851.793646][T21384] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.806410][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 851.816090][T21384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.824201][T21384] usb 5-1: Product: syz [ 851.828923][T21384] usb 5-1: Manufacturer: syz [ 851.833514][T21384] usb 5-1: SerialNumber: syz [ 851.838822][ T5] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 851.848976][T10180] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 851.857020][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 851.867792][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.937408][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 851.967407][T18901] cdc_ncm 2-1:1.0: bind() failure [ 851.976014][T18901] cdc_ncm 2-1:1.1: bind() failure [ 851.987454][ T4153] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.996619][ T4153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.018054][T18901] usb 2-1: USB disconnect, device number 119 [ 852.025853][ T4153] usb 6-1: Product: syz [ 852.031629][ T4153] usb 6-1: Manufacturer: syz [ 852.036240][ T4153] usb 6-1: SerialNumber: syz [ 852.041881][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.051356][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.060961][ T5] usb 4-1: Product: syz [ 852.065140][ T5] usb 4-1: Manufacturer: syz [ 852.074957][ T5] usb 4-1: SerialNumber: syz [ 852.138317][ T5] cdc_ncm 4-1:1.0: bind() failure [ 852.147547][T21384] cdc_ncm 5-1:1.0: bind() failure [ 852.157440][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.174309][T21384] cdc_ncm 5-1:1.1: bind() failure [ 852.179785][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.196885][T21384] usb 5-1: USB disconnect, device number 12 [ 852.203074][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 852.217577][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 852.232048][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 852.242731][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 852.255301][ T2268] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 852.337454][ T4153] cdc_ncm 6-1:1.0: bind() failure [ 852.342915][ T4956] usb 4-1: USB disconnect, device number 110 [ 852.347496][ T2268] usb 1-1: Using ep0 maxpacket: 32 [ 852.358566][ T4153] cdc_ncm 6-1:1.1: bind() failure [ 852.383028][ T4153] usb 6-1: USB disconnect, device number 105 [ 852.417438][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.426515][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:58:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f00000001c0)=[0xcfb, 0x6, 0x10001, 0x27089251, 0xd3, 0xe2, 0x2], 0x7, 0x3, 0x3, 0xdb, 0x9, 0x5c1, 0x5, {0x3f, 0x9, 0x8, 0x1ff, 0x7, 0x3, 0x8, 0x2, 0x64bb, 0x4, 0x7, 0x81, 0xb7, 0x6, "17a1442dab60d36294b3c606a3457a092a7c744960c4596dbb11c27f543d3f11"}}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x344, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003020000202504a1a440000102030109025c0002010000200904001a0102c39301052406000105240000000d240f0100000000000000000006241a00050000008103000000000009047dcf00020d00000904010102020d00000905820200020000000905bb917f5f4807934d0403025802000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 852.461573][T10180] usb 3-1: Product: syz [ 852.467040][T10180] usb 3-1: Manufacturer: syz [ 852.472860][T10180] usb 3-1: SerialNumber: syz [ 852.518010][ T2268] usb 1-1: unable to get BOS descriptor or descriptor too short 12:58:18 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000080)=ANY=[@ANYBLOB="12011801020000202505a1a44000010203010902620002010010000904000001020d00000b2406000180ec1160f4a105240000000d240f0102000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582024000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x8, 0x4) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 852.598155][ T2268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.609191][T10180] cdc_ncm 3-1:1.0: bind() failure [ 852.635674][T10180] cdc_ncm 3-1:1.1: bind() failure [ 852.644700][ T2268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.686080][T10180] usb 3-1: USB disconnect, device number 97 12:58:18 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x4}]}}) [ 852.701150][ T2268] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 852.740963][ T2268] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 852.761153][ T2268] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 852.807432][ T2268] usb 1-1: string descriptor 0 read error: -71 [ 852.813658][ T2268] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.827198][ T2268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:58:18 executing program 3: rt_sigreturn() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x10a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x7a, 0x24, 0x13, 0x7a, "28754a2bc075e454d14dce88ed5e0389c4fefe26595269b02391773aa138d772a0ea882da2df418c4695cb426ecb541d0eae9cce873c33346dadacd9fdbd6eb6eba44a28905139f2e23471a279c68a90b864726aed0173931abeeaa4f7fb7ae40080427f835bf8eb8ed6b3facb3173c54638123c8817"}, @network_terminal={0x7, 0x24, 0xa, 0x30, 0x7, 0x80, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x5, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x3f, 0x2, 0x3f, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x9000, 0x7f, 0x5}]}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000005d"]}) [ 852.857338][ T4956] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 852.859843][ T2268] usb 1-1: can't set config #1, error -71 [ 852.872588][ T2268] usb 1-1: USB disconnect, device number 11 [ 852.897355][T23781] usb 5-1: new high-speed USB device number 13 using dummy_hcd 12:58:18 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x2d, &(0x7f0000000000)={0x5, 0xf, 0x2d, 0x1, [@generic={0x28, 0x10, 0xa, "7d27f7c244f1c117e00bd4b3b0d7921069605c2afb7c7cae124b400a8ad730bf1ff3528fc4"}]}}) [ 852.981199][ T4956] usb 2-1: Using ep0 maxpacket: 32 [ 853.001208][T23781] usb 5-1: Using ep0 maxpacket: 32 [ 853.107365][ T49] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 853.137558][T10180] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 853.208305][ T4956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.218561][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 853.223685][ T4956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 853.227394][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 853.235649][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 853.237826][ T2268] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 853.249773][ T4956] usb 2-1: config 1 interface 0 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.271248][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.282551][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.293738][ T4956] usb 2-1: config 1 interface 0 has no altsetting 0 [ 853.301391][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 853.312154][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 853.317317][T21384] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 853.323509][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 853.347344][ T2268] usb 1-1: Using ep0 maxpacket: 32 [ 853.377330][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.389866][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.399983][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 853.410751][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 853.421257][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 853.432624][T21384] usb 4-1: Using ep0 maxpacket: 32 [ 853.438078][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.438100][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.438124][ T49] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 853.438151][ T49] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 853.517349][ T4956] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 853.526487][ T4956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.534665][ T4956] usb 2-1: Product: syz [ 853.541321][ T4956] usb 2-1: Manufacturer: syz [ 853.546209][ T4956] usb 2-1: SerialNumber: syz [ 853.548024][ T2268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.568158][T23781] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.578118][ T2268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.580542][T23781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.588685][ T2268] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.597789][T23781] usb 5-1: Product: syz [ 853.606694][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.614327][T23781] usb 5-1: Manufacturer: syz [ 853.621240][ T2268] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 853.624377][T23781] usb 5-1: SerialNumber: syz [ 853.635173][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.647561][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.658949][T10180] usb 3-1: Product: syz [ 853.663278][ T2268] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 853.674354][T10180] usb 3-1: Manufacturer: syz [ 853.679662][T21384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.687365][ T49] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.690601][T10180] usb 3-1: SerialNumber: syz [ 853.704006][ T2268] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 853.704066][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.714730][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 853.724370][ T49] usb 6-1: Product: syz [ 853.733160][T21384] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 853.736219][ T49] usb 6-1: Manufacturer: syz [ 853.747171][T21384] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 853.759456][ T49] usb 6-1: SerialNumber: syz 12:58:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000180)=0x2ce5, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0300010000000000d77acf2524abf1fdb244b5a07a29dd0a8893d29eb19e51ffa708b9e485387107b85a5bf347288047cc6fec520ff03de725f6b28d69ac3cf997ada57f3e1718000b201905b8f65f82079b57fe170390d01d971cb3e3ed3c96dd1472c8f1df4eb1ad1905cfc317a88a99661ca7ce1f8053e90ef30ca0935d99c6b5c9f85efaeb1b594c84de5ee4f27675491129eb8b81224b8eef"]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x5427) [ 853.835901][ T4956] usb 2-1: USB disconnect, device number 120 [ 853.887380][T23781] cdc_ncm 5-1:1.0: bind() failure [ 853.890258][ T2268] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.898729][T23781] cdc_ncm 5-1:1.1: bind() failure [ 853.917454][T21384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.929525][T23781] usb 5-1: USB disconnect, device number 13 [ 853.932537][T21384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.945225][ T2268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.962661][ T2268] usb 1-1: Product: syz [ 853.966998][ T2268] usb 1-1: Manufacturer: syz [ 853.972572][T21384] usb 4-1: Product: syz [ 853.976873][ T2268] usb 1-1: SerialNumber: syz [ 853.982429][T21384] usb 4-1: Manufacturer: syz [ 853.987672][T21384] usb 4-1: SerialNumber: syz [ 854.017291][T10180] cdc_ncm 3-1:1.0: bind() failure [ 854.037570][T10180] cdc_ncm 3-1:1.1: bind() failure [ 854.046731][T10180] usb 3-1: USB disconnect, device number 98 [ 854.077316][ T49] cdc_ncm 6-1:1.0: bind() failure [ 854.091872][ T49] cdc_ncm 6-1:1.1: bind() failure 12:58:20 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000000d478e3948aa58e2f2e943cb0203a0000000000"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xfffffff7, 0x0, 0x1, 0x4, 0x9, 0xbf11}, 0x20) [ 854.161880][ T49] usb 6-1: USB disconnect, device number 106 [ 854.267263][ T2268] cdc_ncm 1-1:1.0: bind() failure [ 854.272404][T21384] cdc_ncm 4-1:1.0: bind() failure [ 854.306853][T21384] cdc_ncm 4-1:1.1: bind() failure [ 854.312435][ T2268] cdc_ncm 1-1:1.1: bind() failure [ 854.367224][T23781] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 854.374104][T21384] usb 4-1: USB disconnect, device number 111 [ 854.383089][ T2268] usb 1-1: USB disconnect, device number 12 12:58:20 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) setrlimit(0x4, &(0x7f0000000000)={0x100, 0xff}) [ 854.467291][T23781] usb 5-1: Using ep0 maxpacket: 32 [ 854.627254][ T49] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 854.650719][T23781] usb 5-1: unable to get BOS descriptor or descriptor too short [ 854.728435][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 854.748677][T10180] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 854.759092][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.770112][ T9921] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 854.786783][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.801211][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.812939][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 854.823654][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.834440][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 854.837256][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 854.878005][ T9921] usb 3-1: Using ep0 maxpacket: 32 [ 854.917229][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 855.007280][T23781] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.016395][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.027575][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.038564][T14691] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 855.046142][ T4956] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 855.047256][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.056537][T23781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.068538][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.073936][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.083885][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.093508][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.104527][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 855.113125][T23781] usb 5-1: Product: syz [ 855.124204][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 855.127173][ T49] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.135723][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 855.147519][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 855.165477][ T4956] usb 4-1: Using ep0 maxpacket: 32 [ 855.171368][T14691] usb 1-1: Using ep0 maxpacket: 32 [ 855.178273][T23781] usb 5-1: Manufacturer: syz [ 855.182997][T23781] usb 5-1: SerialNumber: syz [ 855.190678][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 855.201500][ T49] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 855.216399][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 855.229207][ T49] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 855.239562][ T49] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 855.317215][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.326482][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.335420][T10180] usb 2-1: Product: syz [ 855.340154][T10180] usb 2-1: Manufacturer: syz [ 855.344756][T10180] usb 2-1: SerialNumber: syz [ 855.369852][T14691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.381416][ T4956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.392405][ T4956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.402301][ T9921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.411657][T14691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.421648][ T49] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.430920][ T9921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.439306][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.447485][ T4956] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 855.457444][T14691] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.467476][T23781] cdc_ncm 5-1:1.0: bind() failure [ 855.475541][T23781] cdc_ncm 5-1:1.1: bind() failure [ 855.480647][ T9921] usb 3-1: Product: syz [ 855.484814][ T9921] usb 3-1: Manufacturer: syz [ 855.489462][ T49] usb 6-1: Product: syz [ 855.493613][ T49] usb 6-1: Manufacturer: syz [ 855.501839][ T4956] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 855.511828][T14691] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 855.521933][ T9921] usb 3-1: SerialNumber: syz [ 855.529547][T23781] usb 5-1: USB disconnect, device number 14 [ 855.537613][ T49] usb 6-1: SerialNumber: syz [ 855.544876][ T4956] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 855.559879][T14691] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 855.581564][T14691] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:21 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0xcf, &(0x7f0000000280)={0x5, 0xf, 0xcf, 0x1, [@generic={0xca, 0x10, 0xa, "ee33cb39fe3c38db4e6e89910b56ef472db049113adda6580c10aa18c7192dc5dd8ed25caf3c4ea2b7ce79fffffffff2eb20b16454e61344506780aa3cf8677131c18fd221b98a869e17106c1f0163bff381b7b6c5104d52a175ee7aae7b9dd5009bca3e3a77560cb6a1d5104d964430c27afdd1e234652e9b11e9b2f32381666eaef29e62b216df5fbaae47d82a283d62bb23159f8ab1688e8cbf6eecaf9288faf0e07ec9e6fae78471e1798df447756f9689cf20028e3a27e5c9a1ab136c7a644e1912566225"}]}}) [ 855.639070][T10180] cdc_ncm 2-1:1.0: bind() failure [ 855.653334][T10180] cdc_ncm 2-1:1.1: bind() failure [ 855.664938][T10180] usb 2-1: USB disconnect, device number 121 [ 855.737158][ T9921] cdc_ncm 3-1:1.0: bind() failure [ 855.752746][ T4956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.761882][T14691] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.772944][ T9921] cdc_ncm 3-1:1.1: bind() failure [ 855.787286][T14691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.795317][T14691] usb 1-1: Product: syz [ 855.799588][ T4956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.817154][ T49] cdc_ncm 6-1:1.0: bind() failure [ 855.845841][ T9921] usb 3-1: USB disconnect, device number 99 [ 855.851987][ T4956] usb 4-1: Product: syz [ 855.856347][ T4956] usb 4-1: Manufacturer: syz [ 855.867120][ T49] cdc_ncm 6-1:1.1: bind() failure [ 855.875758][T14691] usb 1-1: Manufacturer: syz 12:58:21 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2aec3c54}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x8024) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r2, 0xc, "568bdc59a4264eac9b66f553"}, &(0x7f0000000440)=0x14) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 855.911421][T14691] usb 1-1: SerialNumber: syz [ 855.916571][ T4956] usb 4-1: SerialNumber: syz [ 855.940442][ T49] usb 6-1: USB disconnect, device number 107 12:58:21 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="050f08fd00e9021075053fd6b4c6aac597c186bcd0655f"]}) [ 855.977149][T14691] usb 1-1: can't set config #1, error -71 [ 855.987886][T14691] usb 1-1: USB disconnect, device number 13 12:58:21 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x20000, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000280)=0x1) [ 856.077154][ T4956] cdc_ncm 4-1:1.0: bind() failure [ 856.090387][ T4956] cdc_ncm 4-1:1.1: bind() failure [ 856.102079][ T4956] usb 4-1: USB disconnect, device number 112 [ 856.237120][ T9921] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 856.330107][ T9921] usb 3-1: Using ep0 maxpacket: 32 [ 856.347959][T14691] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 856.377093][T10180] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 856.457144][T14691] usb 1-1: Using ep0 maxpacket: 32 [ 856.467237][T23781] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 856.507138][ T4956] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 856.517138][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 856.527143][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.541287][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.551693][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.567076][T23781] usb 5-1: Using ep0 maxpacket: 32 [ 856.572564][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 856.585082][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 856.595671][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 856.597105][ T2268] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 856.608665][ T4956] usb 4-1: Using ep0 maxpacket: 32 [ 856.677369][T14691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.688954][T23781] usb 5-1: unable to get BOS descriptor set [ 856.694916][T14691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.706415][T14691] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.708617][ T2268] usb 6-1: Using ep0 maxpacket: 32 [ 856.718963][T14691] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 856.731908][T14691] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 856.743112][T14691] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 856.757194][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.767867][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.768216][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.779105][ T9921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.789460][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.805039][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.807518][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 856.807542][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 856.807587][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 856.823176][ T9921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.856533][ T4956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.867525][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.877356][ T4956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.887199][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 856.897192][ T4956] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.907160][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 856.916868][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 856.926579][ T4956] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 856.927117][ T2268] usb 6-1: unable to get BOS descriptor or descriptor too short [ 856.936354][ T9921] usb 3-1: Product: syz [ 856.948235][T14691] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.959113][ T4956] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 856.969318][T14691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.977766][ T9921] usb 3-1: Manufacturer: syz [ 856.982426][ T9921] usb 3-1: SerialNumber: syz [ 856.987659][ T4956] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 856.997846][T14691] usb 1-1: Product: syz [ 857.001997][T14691] usb 1-1: Manufacturer: syz [ 857.006563][T14691] usb 1-1: SerialNumber: syz [ 857.048356][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.057483][ T2268] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.068438][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.076405][T10180] usb 2-1: Product: syz [ 857.081213][ T2268] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.091122][ T2268] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 857.101199][T10180] usb 2-1: Manufacturer: syz [ 857.105801][T10180] usb 2-1: SerialNumber: syz [ 857.110638][ T2268] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 857.121756][ T2268] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 857.139442][T23781] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.143736][ T2268] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 857.151155][T23781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.167403][ T4956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.176849][T23781] usb 5-1: Product: syz [ 857.182048][ T4956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.190737][T23781] usb 5-1: Manufacturer: syz [ 857.195404][T23781] usb 5-1: SerialNumber: syz [ 857.200719][ T4956] usb 4-1: Product: syz [ 857.204878][ T4956] usb 4-1: Manufacturer: syz [ 857.210660][ T4956] usb 4-1: SerialNumber: syz 12:58:23 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) fspick(r0, &(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="050f08b7476b072d"]}) [ 857.287153][ T9921] cdc_ncm 3-1:1.0: bind() failure [ 857.292367][T14691] cdc_ncm 1-1:1.0: bind() failure [ 857.317768][ T9921] cdc_ncm 3-1:1.1: bind() failure [ 857.323237][T14691] cdc_ncm 1-1:1.1: bind() failure 12:58:23 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x8, &(0x7f0000000000)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) [ 857.379324][T14691] usb 1-1: USB disconnect, device number 14 [ 857.386004][ T9921] usb 3-1: USB disconnect, device number 100 [ 857.397518][T10180] cdc_ncm 2-1:1.0: bind() failure [ 857.404822][ T2268] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.467958][T10180] cdc_ncm 2-1:1.1: bind() failure [ 857.476463][ T2268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.487063][T23781] cdc_ncm 5-1:1.0: bind() failure [ 857.497100][ T4956] cdc_ncm 4-1:1.0: bind() failure [ 857.509872][T23781] cdc_ncm 5-1:1.1: bind() failure [ 857.515868][ T4956] cdc_ncm 4-1:1.1: bind() failure [ 857.517562][T10180] usb 2-1: USB disconnect, device number 122 [ 857.537634][T23781] usb 5-1: USB disconnect, device number 15 [ 857.553276][ T2268] usb 6-1: can't set config #1, error -71 [ 857.555120][ T4956] usb 4-1: USB disconnect, device number 113 [ 857.581620][ T2268] usb 6-1: USB disconnect, device number 108 [ 857.927102][T10180] usb 2-1: new high-speed USB device number 123 using dummy_hcd 12:58:23 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x10}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x80, &(0x7f0000000000)={0x5, 0xf, 0x80, 0x1, [@generic={0x7b, 0x10, 0xa, "784920cc5c889b21d7e80022defc6537d17bf640ce44080e06c98998480c680e655efdf833184e3d4acef5ec7a29313d6dddffdaf5ff13111b286a1339a846b4a021c3612afeab44bcc673557c56cfeca53c0078ce5b52608f5078ed1cf4970f2de6649bd2d4461bbb0eede83c0fb50990342f599019c87e"}]}}) [ 857.997072][ T2268] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 858.017021][T14691] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 858.017042][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 858.056981][ T9921] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 858.097282][ T2268] usb 6-1: Using ep0 maxpacket: 32 [ 858.117017][T14691] usb 3-1: Using ep0 maxpacket: 32 [ 858.146998][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 858.168468][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.179388][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.190412][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.200521][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.211035][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 858.237696][ T2268] usb 6-1: unable to get BOS descriptor set [ 858.237819][ T4956] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 858.317837][ T2268] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.319041][T14691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.329043][ T2268] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.340425][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 858.352729][ T2268] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.360716][T14691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.365797][ T2268] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.375608][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.386703][ T2268] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.399609][T14691] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.407247][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.415530][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.425823][ T2268] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 858.437741][T14691] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.445272][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.455856][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.463238][T10180] usb 2-1: Product: syz [ 858.474386][T14691] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.477179][T10180] usb 2-1: Manufacturer: syz [ 858.486479][ T4956] usb 5-1: unable to get BOS descriptor set [ 858.491036][ T4153] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 858.499416][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.504121][T10180] usb 2-1: SerialNumber: syz [ 858.514581][T14691] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 858.532600][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.543127][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 858.577027][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.592512][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.603326][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.616156][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.616950][ T4153] usb 4-1: Using ep0 maxpacket: 32 [ 858.630725][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.640742][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 858.658013][ T2268] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.667416][ T2268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.675514][ T2268] usb 6-1: Product: syz [ 858.680936][ T2268] usb 6-1: Manufacturer: syz [ 858.685690][ T2268] usb 6-1: SerialNumber: syz [ 858.708694][T14691] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.718565][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.728601][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.737042][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.745082][ T9921] usb 1-1: Product: syz [ 858.750041][T14691] usb 3-1: Product: syz [ 858.754240][T14691] usb 3-1: Manufacturer: syz [ 858.771073][ T9921] usb 1-1: Manufacturer: syz 12:58:24 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="79104be43f6333378e5008f8c9cd901f213a0b6326e9470c6712e95e8bc3ba18c2f91a350fe712e91ba609034315a8ccd8a11ea67ae9f61b177663043e5da6cb0a5d007b1cd7282a1527690c512ba754d40f05df68df98c91459ed6a8fac2a2dec579edb339639743187e6ba16266a9a6209322da0a36aaea5ef62965636654e0b01503760751f65bf00f2cd29470ce71938535b5291bef3a44cde728519ac527f1777d6a7f06888b24a4905897b59a7812c3b6082ef273ea8d6811dc3949e50973d0e5a2c1cde35514b9f6a685804a3271813e885c9e8a3ab5c4c8d580b8e55e3d306324266110364cf3b1f0041f7dea9cfa1a0f4b1e7d1f66c3482723e03f5") [ 858.775697][ T9921] usb 1-1: SerialNumber: syz [ 858.786969][T14691] usb 3-1: SerialNumber: syz [ 858.809911][T10180] cdc_ncm 2-1:1.0: bind() failure [ 858.809950][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.827120][T14691] usb 3-1: can't set config #1, error -71 [ 858.834490][T14691] usb 3-1: USB disconnect, device number 101 [ 858.835004][T10180] cdc_ncm 2-1:1.1: bind() failure [ 858.867211][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.875232][ T4956] usb 5-1: Product: syz [ 858.887176][ T4153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.913642][T10180] usb 2-1: USB disconnect, device number 123 [ 858.919325][ T4956] usb 5-1: Manufacturer: syz [ 858.924298][ T4956] usb 5-1: SerialNumber: syz [ 858.931902][ T4153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.994640][ T4153] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.005110][ T2268] cdc_ncm 6-1:1.0: bind() failure [ 859.024335][ T2268] cdc_ncm 6-1:1.1: bind() failure [ 859.057047][ T4153] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.076967][ T9921] cdc_ncm 1-1:1.0: bind() failure [ 859.090374][ T2268] usb 6-1: USB disconnect, device number 109 [ 859.108083][ T9921] cdc_ncm 1-1:1.1: bind() failure 12:58:25 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x90, 0xc2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 859.139984][ T4153] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 859.177638][ T9921] usb 1-1: USB disconnect, device number 15 12:58:25 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, r2, r4, 0xffffffffffffffff, 0x1, 0x5}, 0x0, 0x0, 0x1, 0x3, 0x1000, 0xf44, 0x0, 0xb13c, 0x6, 0x8001, r5, r6}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010400000904000001026099b40d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000230582020000000000090503020000bdf114681668acf0d5274b61094c65331f2aaa571a4cb949ffb62b5981aeb4ff1ae5765e5275109d9616619cb1e2b668274d9a9cdfe40d06acb2dcfe3311"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 859.194229][ T4153] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 859.207608][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 859.216842][ T4956] cdc_ncm 5-1:1.1: bind() failure [ 859.255245][ T4956] usb 5-1: USB disconnect, device number 16 12:58:25 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="279baa5ee1eeb778cfbc28e64dc3423d4caed41a6561f4797de8da1a8d8198ef18587313c8d2797380556ae23328d7ceab3dd75b66394ee536147c4209717124001c20ed56ec4464096bf57b0f834984220d2e64de864311a8bb9e68dfe62e8737b04f71440ca3c608ec470d4fe4c22334bf64bf25dfc3c5652bbeace9b41430966548125f4b2a5e968f94284fb2e56263fb069779c693744a5947b0b5af6198d3bfa4970471fcb13b46c7e6faf2d45cce1ec5efeb3ab0e412b549d628e55beb71a57b0edff8e2ef963262823ca9d64314ce4f8b93d4"]}) [ 859.327758][T14691] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 859.427092][ T4153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 859.436536][ T4153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.439470][T14691] usb 3-1: Using ep0 maxpacket: 32 [ 859.444995][ T4153] usb 4-1: Product: syz [ 859.454324][ T4153] usb 4-1: Manufacturer: syz [ 859.459088][ T4153] usb 4-1: SerialNumber: syz 12:58:25 executing program 5: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x8, 0xe, 0x4, 0x8, 0x40, {r0, r1/1000+10000}, {0x4, 0xc, 0x3, 0x0, 0x0, 0x6a, "a5b42dd6"}, 0x52f0124b, 0x6, @fd, 0xdea, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sliced={0x3, [0x8, 0x0, 0x36b, 0xe000, 0x4ec4, 0x9, 0x1, 0x1f, 0x4, 0x3, 0x8af, 0x0, 0x1, 0x6, 0x9, 0x100, 0x1007, 0x1f5, 0x1, 0x75, 0x6, 0x45, 0x7fff, 0xffe1, 0x7ff, 0x7f, 0x5, 0x3223, 0x9, 0x0, 0x0, 0x2, 0x0, 0x6, 0xc000, 0x8, 0x401, 0x7fff, 0x5, 0x81, 0x4, 0x4, 0xa3c, 0x2, 0x7, 0x2, 0x1, 0x112], 0x8}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x18}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x28, &(0x7f0000000140)={0x5, 0xf, 0x28, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa7, 0xc5, 0x1, 0x1fdf, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x6, 0x2, 0x5, 0x1f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x3, 0x1}]}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r3, &(0x7f0000000640)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba72764f460593d41d43e9f589502652fe815ef1da2c0975e828d69536eb96c2c27f564dcc44d2a18bf98a8698f09764ff95bda5a0520964e8e84670e557cc255a621254e23c5e3afd68721e31a0caa4ac9e40a612dd4bff3553cc00a47f618b8289ce1086193ea338ae5473fc048d1e696a52f65d00d34ed03cfb8125020463ba3054af5f7a2fd4c733242927960b07d0d81f303157417af8907b820d74a1dc84ea78e317584a11da56d5842dec5823a376d939a621adf86c8297db303ab14b7fa0cfa4316987c1ac3303f6acdaa8a946496cb09a6a0785a49f67cfe7725ff477933e4f38d99e6062f1bec6c4e857d64a8ba966cc4c024177bb10e4f5c05db8e7d4cd2437cff4067d9c6f68d8faf4342112a53e640e2c070ed68a364a209139ad", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) [ 859.556916][T10180] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 859.656925][T14691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.677784][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 859.699415][ T4956] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 859.720697][T14691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.737611][ T4153] cdc_ncm 4-1:1.0: bind() failure [ 859.761023][ T4153] cdc_ncm 4-1:1.1: bind() failure [ 859.776916][ T9921] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 859.801663][T14691] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.811588][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 859.816066][ T4153] usb 4-1: USB disconnect, device number 114 [ 859.858397][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.866939][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 859.872742][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.884202][T14691] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.884282][T14691] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 859.898307][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.918071][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.929733][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 859.948856][T14691] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 860.026917][ T9921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 860.034759][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.045776][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.056755][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.067751][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 860.079092][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 860.089512][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 860.116906][T14691] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.126048][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.137072][ T17] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 860.144865][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.147668][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.154686][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.163810][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.173384][T14691] usb 3-1: Product: syz [ 860.183992][T10180] usb 2-1: Product: syz [ 860.184013][T10180] usb 2-1: Manufacturer: syz [ 860.189952][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.193316][T10180] usb 2-1: SerialNumber: syz [ 860.204138][T14691] usb 3-1: Manufacturer: syz [ 860.219852][T14691] usb 3-1: SerialNumber: syz [ 860.224999][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 860.243895][ T17] usb 6-1: Using ep0 maxpacket: 32 [ 860.252766][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 860.268780][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 860.281648][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.292429][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.302830][ T4956] usb 5-1: Product: syz [ 860.308721][ T4956] usb 5-1: Manufacturer: syz [ 860.313313][ T4956] usb 5-1: SerialNumber: syz [ 860.446931][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.456090][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.467057][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.475092][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.489719][T10180] cdc_ncm 2-1:1.0: bind() failure 12:58:26 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @local}, &(0x7f0000000040)=0xc) [ 860.501985][ T9921] usb 1-1: Product: syz [ 860.504562][T10180] cdc_ncm 2-1:1.1: bind() failure [ 860.517141][ T17] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 860.527093][T14691] cdc_ncm 3-1:1.0: bind() failure [ 860.535463][ T9921] usb 1-1: Manufacturer: syz [ 860.545287][T14691] cdc_ncm 3-1:1.1: bind() failure [ 860.558085][ T9921] usb 1-1: SerialNumber: syz [ 860.566674][T10180] usb 2-1: USB disconnect, device number 124 [ 860.574219][ T17] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 860.586889][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 860.591987][ T49] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 860.604105][T14691] usb 3-1: USB disconnect, device number 102 [ 860.614055][ T4956] cdc_ncm 5-1:1.1: bind() failure [ 860.652991][ T4956] usb 5-1: USB disconnect, device number 17 12:58:26 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)={@any, 0x9}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x8, 0x4) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020180032100000028bd7000fddbdf2502001000000004d500000001000000000800120001000100be6b6e000500000006003c00070300000010000000000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000005001a0000000000000000000000000000000000ff02080010000300090070000000616a416d95b36e49a50f46c9ab9100000800120001000000b16b6e00020000000600ff00070100000300000000000000e0000001000000000000000000000000fc02000000000000000000000000000002000b0007000000b106000000000000020013000000000026bd7000023500000100140007000000"], 0x108}}, 0x80) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000380)={0x80, 'syz1\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 860.702069][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 860.796900][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.810147][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.819292][ T17] usb 6-1: Product: syz [ 860.824334][ T17] usb 6-1: Manufacturer: syz [ 860.830810][ T17] usb 6-1: SerialNumber: syz [ 860.861921][ T9921] cdc_ncm 1-1:1.0: bind() failure [ 860.872029][ T9921] cdc_ncm 1-1:1.1: bind() failure [ 860.897969][ T9921] usb 1-1: USB disconnect, device number 16 [ 860.907495][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.922730][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.933086][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.951268][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 860.983650][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 861.002270][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:27 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302000000000054554c3d0000409723af2c278b6732a56089e0bf594cbacdeb3a44910532ce296af546abef8a9fd17390bc4422988082abda1f058a"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 861.166979][ T17] cdc_ncm 6-1:1.0: bind() failure [ 861.176820][T10180] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 861.185015][ T17] cdc_ncm 6-1:1.1: bind() failure [ 861.200340][ T17] usb 6-1: USB disconnect, device number 110 [ 861.207796][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.221090][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.231540][ T49] usb 4-1: Product: syz [ 861.266872][ T49] usb 4-1: can't set config #1, error -71 [ 861.274163][ T49] usb 4-1: USB disconnect, device number 115 [ 861.276797][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 861.316816][ T4153] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 861.396842][ T4956] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 861.416897][ T4153] usb 3-1: Using ep0 maxpacket: 32 [ 861.487430][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 861.516841][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.528376][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.539368][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 861.550077][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 861.560449][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 861.570956][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 861.608204][ T9921] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 861.627639][ T49] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 861.657547][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.669452][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.680834][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 861.686905][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:58:27 executing program 5: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="fa0f08000107100a"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/33) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x80) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1e4) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x100000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) sendto$inet(r1, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) fcntl$setpipe(r1, 0x407, 0x0) [ 861.692265][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 861.701650][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 861.717671][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.729910][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 861.743304][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 861.748488][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 861.763766][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 861.769850][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.785521][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.786200][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 861.793786][T10180] usb 2-1: Product: syz [ 861.812113][T10180] usb 2-1: Manufacturer: syz [ 861.817334][T10180] usb 2-1: SerialNumber: syz [ 861.827372][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 861.856749][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:27 executing program 2: msgsnd(0x0, &(0x7f00000001c0), 0x4000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x30}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x30, 0x7fff, 0x2, 0x200, 0xfffffffffffffffd, 0x9, 0x1000, 0x80000000}, 0x0) [ 861.887597][ T9921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 861.969488][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.981356][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.986773][ T4153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.996637][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.015839][ T4153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.016313][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.032672][ T4153] usb 3-1: Product: syz [ 862.038144][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.044827][ T4153] usb 3-1: Manufacturer: syz [ 862.049233][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.060136][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.073855][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.084846][ T4956] usb 5-1: Product: syz [ 862.086877][ T4153] usb 3-1: can't set config #1, error -71 [ 862.097209][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 862.098985][T18901] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 862.112647][ T4956] usb 5-1: Manufacturer: syz [ 862.115343][T10180] cdc_ncm 2-1:1.0: bind() failure [ 862.125485][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 862.133553][T10180] cdc_ncm 2-1:1.1: bind() failure [ 862.150286][ T4153] usb 3-1: USB disconnect, device number 103 [ 862.159535][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 862.171050][T10180] usb 2-1: USB disconnect, device number 125 [ 862.189294][ T4956] usb 5-1: SerialNumber: syz [ 862.204175][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 862.220927][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 862.232199][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:28 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x1, [{0x9e, &(0x7f0000000000)=@string={0x9e, 0x3, "da79ec3fe64ac460500f3087b235cf4080a619da1106d972ade3514c19482c47935243347572145bebd332fc6a6cbe824d7eecfe075aa62698dc4f2c2990fd0d1d379058eb8c191adb9e233ed3d2bafe875fb034fe4e9900ed84f7ae9f936490d938a3bea9852d68f8b447602f7bb12057c6d649ea60c0a0fc078f10dcdceee22f9cf49d4ec3bbfcaa89286b32a46c473464ac78b38289df8429e3e0"}}]}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) fdatasync(r0) [ 862.306793][ T4956] usb 5-1: can't set config #1, error -71 [ 862.320457][ T4956] usb 5-1: USB disconnect, device number 18 12:58:28 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x1, @addr=0x5}, 0x8, 0x81, 0x6}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 862.409972][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.425891][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.437016][ T49] usb 4-1: Product: syz [ 862.441504][ T49] usb 4-1: Manufacturer: syz [ 862.446264][ T49] usb 4-1: SerialNumber: syz [ 862.452247][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.462869][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.472407][ T9921] usb 1-1: Product: syz [ 862.497816][ T9921] usb 1-1: can't set config #1, error -71 [ 862.504570][ T9921] usb 1-1: USB disconnect, device number 17 12:58:28 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x2fe, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000140)=""/226, &(0x7f0000000000)=0xe2) [ 862.536726][ T4153] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 862.656740][ T4153] usb 3-1: Using ep0 maxpacket: 32 [ 862.676932][T18901] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 862.684617][T18901] usb 6-1: can't read configurations, error -71 [ 862.736764][ T49] cdc_ncm 4-1:1.0: bind() failure [ 862.741997][ T4956] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 862.761913][ T49] cdc_ncm 4-1:1.1: bind() failure [ 862.773203][ T49] usb 4-1: USB disconnect, device number 116 [ 862.836779][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 862.856800][T10180] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 862.866726][ T9921] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 862.906812][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.917983][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.928254][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.938745][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 862.948629][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 862.957574][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.959141][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 862.969950][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 862.974465][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 862.984855][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.001818][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 863.012415][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 863.024689][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 863.034398][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 863.086745][T18901] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 863.147540][ T4153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.156713][ T4153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.164741][ T4153] usb 3-1: Product: syz [ 863.171042][ T4153] usb 3-1: Manufacturer: syz [ 863.175760][ T4153] usb 3-1: SerialNumber: syz [ 863.177462][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.197479][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.207431][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.208391][T18901] usb 6-1: Using ep0 maxpacket: 32 [ 863.218277][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.233994][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.234475][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.246669][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 863.264872][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 863.266696][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 863.275055][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 863.294714][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 863.295763][ T4956] usb 5-1: Product: syz [ 863.311676][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 863.322215][ T4956] usb 5-1: Manufacturer: syz [ 863.329633][ T4956] usb 5-1: SerialNumber: syz [ 863.334643][ T9921] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 863.360040][ T9921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 863.426699][T18901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 863.477058][ T4153] cdc_ncm 3-1:1.0: bind() failure [ 863.495674][ T4153] cdc_ncm 3-1:1.1: bind() failure [ 863.500917][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.514395][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.526660][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.527872][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.552170][ T4153] usb 3-1: USB disconnect, device number 104 [ 863.559472][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.577325][T10180] usb 2-1: Product: syz [ 863.583323][T10180] usb 2-1: Manufacturer: syz [ 863.592280][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 863.596642][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.603724][T10180] usb 2-1: SerialNumber: syz 12:58:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba72764f460593d41d43e9f589502652fe815ef1da2c0975e828d69536eb96c2c27f564dcc44d2a18bf98a8698f09764ff95bda5a0520964e8e84670e557cc255a621254e23c5e3afd68721e31a0caa4ac9e40a612dd4bff3553cc00a47f618b8289ce1086193ea338ae5473fc048d1e696a52f65d00d34ed03cfb8125020463ba3054af5f7a2fd4c733242927960b07d0d81f303157417af8907b820d74a1dc84ea78e317584a11da56d5842dec5823a376d939a621adf86c8297db303ab14b7fa0cfa4316987c1ac3303f6acdaa8a946496cb09a6a0785a49f67cfe7725ff477933e4f38d99e6062f1bec6c4e857d64a8ba966cc4c024177bb10e4f5c05db8e7d4cd2437cff4067d9c6f68d8faf4342112a53e640e2c070ed68a364a209139ad", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000c00)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r6) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r7, 0x0, &(0x7f00000000c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000380)="37ea1bdb1be00078fc1efb394b1132048e465c9859f49376abf0e2802d5c7dd11f74b5dc91a87b08ce3fa07b695409fc77cca906419e8d45a1ac061c199b67a0be4c0a7c09b3097c4e967ba19a5043e85116a537e19e5dce7610a34e2ef4067d1916461f63a8c9edf3e3b74bba69c492bb8de543427c5e411c1fc2cd6fbc9db9a77721ab5895444cb94ad3ccec849a597ec2ec61792310238e41aa69ca5503a8b2d12c9ba13c546410dbd776a9e7c9f48c75f69977dc5898ac6df38cfe52d833dba32453f5ee52b6", 0xc8}, {&(0x7f0000000480)="77bb77ac14264b21b45be37ce7debb25838129b93f146f71ffcca64aa64d1658dc1b8b04f198d2188e900a119c6539f488995bb3fe40aa24d63128441ea71a250c5042ed1919c4a083c81d6de5b58c82e4913676afc08219c3a7193de4584c326cad7b2f581a7f3ce9c013bc374a63a369882cf3e888be263516d201fb95cd9724d7e3587f4a3c6fccf8641e61e4b4f1d2faf702c747ce", 0x97}, {&(0x7f0000000240)="a571dc8335c6c9b097ec35034aa8d2d43b5fad5dcb1ab5864db6100083379e7e51ca32575c4e240d1c040690bbd017fc491192", 0x33}, {&(0x7f0000000540)="35e97daa8da704d7177eb76e63b745f9519ed30f6308685fb25e5008d1175442b6a9726b721de77c3a6e74ddd931756692b8f80327ae224aeae2c960271e0aef141c0cfe24afe1ef528ec221e34e1547eabc929fc04542a331a38081b4f98140f6ff80fe274eb264a0dc9be7b2a58b12e6b9ef2320417ef52c7487e649176ceb0db57740560cf21d83f204665cafdbc902f32ea3f13f28de4d07a00b751f7fbc174da78bd52e00ae9babe3828013e6", 0xaf}, {&(0x7f0000000600)="bd471ea6a755d7a10d8887ab907c42f3c2ac8f6966188aacf9dd1a7fe0ed3ce32cfb900ea467028cc61b1ccd65b6f3262e690ba9b9263a7b50432decfd4783098f492edda98a783c0c976bde5e", 0x4d}, {&(0x7f0000000680)="75bcc2539a38dacb06c56028828e4a852d66fba44d3cb8b6dc85e4735a942745a55129794e87c35a273efcb4ce9ffc206e052700022bbfb6cdb5faf9f343d54f56b1ab9fcfcea38026151971f2d7db99b7667de79c4269769fe6af25f87f113fbf3a529271de456df7e5918fd0f8e9ddc9748a9c444bdb7d3533931f981710399222fec465d2ea1bc73e23d2afe4a784618b66a12da779676eeb4418d45e4b2cac6db760b027aaf45246598c785cd7a2519923a7478f3fa6bc80e7ba086e2a", 0xbf}, {&(0x7f0000000740)="87c8cb7d86ffe62c2fa2d09ccd85e1dcc65309e9e0a81ade93a701c47f7359dbbc1327680f1bcaaa746900d2636f5687838be6a2e74d37878e918f67cfb0fc77d1ed03dfa04b3e072d397682504b18f407ffc266303fe967aa141a54884187f5adca4de56f5e27b9081a3a2344be32da557322215cfebad49bc8ce832649d67e06ab37a1aa1081ff0c56481850f2535c416670e7cbec92b81c062127c05843450e81beb4c020e5029df51e491ee54f2243baf1243c9676c8fde5d287", 0xbc}, {&(0x7f0000000800)="3b9272197fba505a0f6509852bcf083dbad1210f4fb4b37bee5d2ec1c400b483863b479180363b8852395a5fbf1bddcc6db3fa04e1ca2b750640dbcc6e5b58a078e7d60ce86cda8d6e", 0x49}, {&(0x7f0000000880)="ef2819a622fd06bef8f10ee52f449c8ede5144c537e8b8718ddbe50e778d6e7104b8ae174a1be5f17570af263fcaf42517200bfb2bb58439824dcad0b89a7422b7b48df71b1e7842da80aed3c5b3bdb6b87613f8a75e6d184d132a1c03e78b025738b43d180352314f72357943866ed02d4a73273e840e995d9dac42e8c0990f528db592055cb035b0deb6a8ecde6acfb0d8c6af16afdb9e4ab3d2b2f2e19f946baceebe3eea5bbd776a9ca6c976f889458fc337789c9242b57f63d4727dcb85cea70f62703b949ed8368706", 0xcc}, {&(0x7f0000000980)="4d5b7a26bae859a1f0b2d0dbc995604f059d5db81a006dd889faf7d521387731d971ffda181eff25d84a4fc211069611d3b64c24cd2b152c22e865a20e218ebe8add28bb3ca5e663d8a813b84c0902f3803562b3d02bd8165f", 0x59}], 0xa, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r6}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xa0, 0x4010}, 0x20000000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x3, [{0x56, &(0x7f0000000000)=@string={0x56, 0x3, "42a861ab4f7af57418ed6cd8cfc9267e65b79b77d827f1947412a1981e2e508db567ec018de43d9063e858eb657dbcf4d2660fbf4950e1a141892c4ed2da4960c834e48113bb429564c90cc39edf8c46598b0f91"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2009}}, {0xf0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"]}]}) [ 863.620857][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 863.633394][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 863.636741][ T49] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 863.656646][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 863.665266][ T4956] cdc_ncm 5-1:1.1: bind() failure [ 863.680069][ T9921] usb 1-1: Product: syz [ 863.687710][ T9921] usb 1-1: Manufacturer: syz [ 863.692415][ T9921] usb 1-1: SerialNumber: syz [ 863.738857][ T4956] usb 5-1: USB disconnect, device number 19 [ 863.789202][ T49] usb 4-1: Using ep0 maxpacket: 32 12:58:29 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000934cb0102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xe, 0x40, 0xec, 0x20, 0x400, 0x1}]}}) [ 863.827465][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.836529][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.866700][T10180] cdc_ncm 2-1:1.0: bind() failure [ 863.883404][T10180] cdc_ncm 2-1:1.1: bind() failure [ 863.890391][T18901] usb 6-1: Product: syz [ 863.904427][T18901] usb 6-1: Manufacturer: syz [ 863.920970][T10180] usb 2-1: USB disconnect, device number 126 [ 863.930579][T18901] usb 6-1: SerialNumber: syz [ 863.986967][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.026647][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.046634][ T9921] cdc_ncm 1-1:1.0: bind() failure [ 864.050712][ T9921] cdc_ncm 1-1:1.1: bind() failure [ 864.066820][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.087418][ T9921] usb 1-1: USB disconnect, device number 18 [ 864.094123][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 864.108697][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 864.119763][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:30 executing program 3: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fff, 0x7]) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 864.159089][ T4153] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 864.208858][ T49] usb 4-1: string descriptor 0 read error: -71 [ 864.215088][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.236629][T18901] cdc_ncm 6-1:1.0: bind() failure [ 864.246264][T18901] cdc_ncm 6-1:1.1: bind() failure [ 864.251222][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.267566][ T4153] usb 3-1: Using ep0 maxpacket: 32 [ 864.280116][T18901] usb 6-1: USB disconnect, device number 112 [ 864.286754][ T49] usb 4-1: can't set config #1, error -71 [ 864.297735][ T49] usb 4-1: USB disconnect, device number 117 [ 864.331633][T10180] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 864.406613][ T4956] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 864.427856][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 864.497129][ T4956] usb 5-1: Using ep0 maxpacket: 32 12:58:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000054506000105240000000d240f0100000000000000000006241a0000000905861fb52c8236f49a04010000020d00000904010102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2d, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48840}, 0x4000) [ 864.527673][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.546004][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.556689][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.566478][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 864.585513][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 864.598662][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 864.617142][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.636592][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.656588][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.666480][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 864.676676][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.677928][ T49] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 864.691795][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.707323][T10180] usb 2-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 864.736670][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 864.746372][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 864.806616][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 864.806672][ T4153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.821005][ T4153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.829711][ T4153] usb 3-1: Product: ≾篁橚桗婥塗뉝庄鉽ﯲ틃둿떿戦蔯鈰떌럗烣㛗㫾䶒浌꧈㮸与ᗔ⼿㽢䢬홨堔僶篰멎攳ᵡ▐仳ᒅᴫ䨽鑓랶㖧뤉恟躵슆쮮뉼晄㏟蓉⦨ݛ핃ý馀柳ⲟ냹穏ꙇ軆燔棔曍ꕼ蝐驸꒺㵧杧謷㧅甐؇㐮꒿卩⤴⊝牥尣鄚䶈ࢠㇲ읕䉬䬾鴈뵕퇅꣨ﴦ姘滣䠼짯㴥ྀ沜轻孧䐴㬷漧࿺ [ 864.865082][ T4153] usb 3-1: Manufacturer:   [ 864.870136][ T4153] usb 3-1: SerialNumber: syz [ 864.926850][ T9921] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 864.936701][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.938231][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.949499][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.955392][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.967046][T10180] usb 2-1: Product: syz [ 864.971538][ T4956] usb 5-1: Product: syz [ 864.974962][T10180] usb 2-1: Manufacturer: syz [ 864.979252][ T4956] usb 5-1: Manufacturer: syz [ 864.987898][T10180] usb 2-1: SerialNumber: syz [ 864.988877][ T4956] usb 5-1: SerialNumber: syz [ 865.006840][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.021511][ T9921] usb 1-1: Using ep0 maxpacket: 32 [ 865.037891][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.040949][T10180] usb 2-1: selecting invalid altsetting 1 [ 865.050991][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.053365][T18901] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 865.071932][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 865.081874][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 865.092337][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 865.146658][ T4153] cdc_ncm 3-1:1.0: bind() failure [ 865.154531][T18901] usb 6-1: Using ep0 maxpacket: 32 [ 865.163431][ T4153] cdc_ncm 3-1:1.1: bind() failure [ 865.189434][ T4153] usb 3-1: USB disconnect, device number 105 [ 865.226667][ T9921] usb 1-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 865.246695][T10180] cdc_ncm 2-1:1.0: bind() failure [ 865.254987][ T9921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 865.264227][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.277516][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 865.278169][T10180] cdc_ncm 2-1:1.1: skipping garbage [ 865.286130][ T4956] cdc_ncm 5-1:1.1: bind() failure 12:58:31 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @obex={0x5, 0x24, 0x15, 0xffff}, @dmm={0x7, 0x24, 0x14, 0xffff, 0x7}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x6, [{0xaf, &(0x7f0000000000)=@string={0xaf, 0x3, "1230bb80eab9a123f821b92d56eea95cbf3812cd0290101ab95e911ec1e73f8ab8695f6edffb12330be9cc552da591783924a004a4ba2d43800e33748dc3555ded796fe250f839840bb059758a253e82a03c2b5483f1e78ecc969e92fee23e4ede3494b1be5774fd38b99624004e6f3465f021f976426a50a59add1438a947b6bc45477dba3ae87a382d4dab1151d08b0c4603c331ace4c1db2a39b4db415ab7c5e11c15eb65841813ab4389f1"}}, {0x41, &(0x7f00000001c0)=@string={0x41, 0x3, "339cc1bf88c22ffe9253b41cd1bff4b4f074736d3d8fe428e942dda86dcb8fdda48167090d7dab1c36ad2c28ccadc37df6cfb1ea211a27f5b2990e8cbd02ef"}}, {0x31, &(0x7f0000000140)=@string={0x31, 0x3, "9e0fdb8798b29d41b2a274e03a06a827c491c77d1537e333cc488921cfacb826dd99c3dd08b67446d14490abdb7890"}}, {0xf7, &(0x7f0000000280)=@string={0xf7, 0x3, "d6edc192ae2396c67a33c19ce693c2f0e578de248eaa79f2f72bb9d7642e25a55a5c586674d0b8cac7bdd46bcdb603f4e00802d44ef4b9b63463fa64408ab5789d5eae3351f4ce565ecec2cf0aa99fc6eeaf54300a601d2b2ab25b5b2e2ebf87b83aa6dbb3b7c16cdf0f95a03f33d550587ab0db8cc936eaa18ca593acbe3ac76a20ffa0a1abc6f668ce4bbaa604be2c855490cbf12ea2c8184ce5ee061c15733308c6c877bd9326b15be031f08b0dd127f09c83ce05a7df09cd1164172ab43c7522394542a84be6bbc9a16be8a97ad729b0e7a88daa87e7289a17d97878477e464138cbaaab57bb4069815a471c589dc7ff97a4d4"}}, {0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "88a7080c36b87a577930437cceb8170e1cfcc402d13ce789704a72324d7aa71e6e605193f6f13057f2eee284400089d24c085928cd8a5576e901ac8700744ab276758fc6d7bc2137f6ab300e2ccc8337f30a7efae846975e45eebd0a5d2dc53dc9d40315926b1c1b54e6a84385bd30cf6c899fae3cf3fc45fefb39a031304e2f07ce244be32ec5e3"}}, {0x7, &(0x7f0000000440)=@string={0x7, 0x3, "623f247d8c"}}]}) syz_usb_connect$uac1(0x5, 0xea, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x7f, 0x60, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x3}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0xff, "b4"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x3, 0x6, "152d4d61ac48"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x73, "0731f9109a"}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x2, 0x6, [0x2, 0xa, 0x5, 0x6, 0x3, 0x5], 0x16}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x1, "2840c4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x81, 0x9, "2969f62f6957a5ac04"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1f, 0x7, {0x7, 0x25, 0x1, 0x1, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1f, 0x5, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x2, 0x21, "d9", "9fed"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x4, 0x0, "b7"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x28, 0x2, 0x40, 0x2, "ab"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0xff, 0x4, {0x7, 0x25, 0x1, 0x81, 0x6, 0x80}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x80, 0x0, 0x8, 0x2}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x9, 0x65, 0x7, 0xc1}]}, 0x8, [{0x28, &(0x7f0000000240)=@string={0x28, 0x3, "baf230b42c2a8005f671ef11f1083121e0b03ef5761c73fc3ca80411b5d5f1a00a3a1328112d"}}, {0xa8, &(0x7f00000006c0)=@string={0xa8, 0x3, "185c0819b4e8987960b5f1e678b6cf8e1f96b8170c72a4a41495a54209c9f86a7d3ada92f003537ba674e9375155c2e6eb3ba124be16c8e1eff234ebca7892ea5bbe4fb8de3c4f243c652506a7508ecdbf3db69128fb927c5c2ee624e1b1304159bb48746e72359d138b5e4ce2258ce874323fcf9689b271c5b732a4c83e82029a0fa02964bccd1e485ed2f0c5d2a8cd95fddc57585fed5a04687b7978cb4b2af048458d21a0"}}, {0x58, &(0x7f0000000780)=@string={0x58, 0x3, "9f8fa29d86b984b9a87d3e3d57f87af662aab718287d267bbc1422be52e142710aae30674c2355a3a6bf4a75a7bc083b1c822762c29dc0b55e4fbe514285609ff67170ef5f12acc68d5962a5e706ad65ff8be1776d3d"}}, {0xdc, &(0x7f0000000800)=@string={0xdc, 0x3, "fc721cc4655f9e5d5c49100e8c717059959c1e16635103fa0046ac0a53361640e1d2d35bfa6a82aaabe2a38a10d713691529a8bb431f7d1742f92eba62568578d6d7d2e1f874afc96ac832bd9379fb061661162386bc1174e09536979d734344a575141f04ae42a6c2d4513f84926c6cdf67193c02686325d54d9372fe01a986284111b37a21ceb6f4112bcff188bb27de02dbe701abc40ea78be38b7d610f03c1be379dabcc6189712fb27b8a7280e00e4a6abf356f38dd7d192f646619ed895c7544be3b3b2024892e8a8f9f3f055e7407f684a6986a7ca95e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x418}}, {0xbf, &(0x7f0000000940)=@string={0xbf, 0x3, "a3eea5e6b1f790c1aee39e685f7cdbb999c3d8269bc4aad761ea3ec3a115799563106f4ae92682a12cece71c4ef0141ec5ef8af9d73d4e07d16e341b5df5aa765537ddad1a295295bef1087095fffedb0061f39abcd4acbb32b7c4a70aa0c52e3f5c251b54ae03ac0360bf8cffe900c27e93cf6f82253ad64762947f77170709ff73e002002cefafaae6e8e8ba0ab9610e773b10400e2bd17495bfe885db027354be250bc0893597bd1872681833469e449a60a04fcf7b87cfc50a4c1b"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x40e}}]}) [ 865.307922][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 130, changing to 11 [ 865.322229][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.340749][T10180] cdc_ncm 2-1:1.1: bind() failure [ 865.348792][ T4956] usb 5-1: USB disconnect, device number 20 [ 865.369301][ T9921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 1205, setting to 1024 [ 865.369520][T10180] usb 2-1: USB disconnect, device number 127 [ 865.382096][ T49] usb 4-1: Product: syz [ 865.387754][T18901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 865.393469][ T49] usb 4-1: Manufacturer: syz [ 865.422035][ T49] usb 4-1: SerialNumber: syz [ 865.488237][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.509696][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.523909][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 865.540532][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 865.552144][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 865.576616][ T9921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.589195][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.604313][ T9921] usb 1-1: Product: syz [ 865.610798][ T9921] usb 1-1: Manufacturer: syz [ 865.615404][ T9921] usb 1-1: SerialNumber: syz 12:58:31 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendto$unix(r0, &(0x7f0000000000)="d4dedd5d99afeaf54b7c5cd2af3ffdf928f915650eefd81da8423019c126b731b7b280d2d7a1ca9057183174964af1eb877fbf0ff73b96ed3833ce8e616e283bc52a423885c1c0592ddb3a7570a069561b5547c49776b1a27bd1af5feae74822bddecb74ed991e6226f93f191d8e87170d7d13dfd52344d17fb139e63307b5fbe88e05d42b7729d5a6fe344e41973d1e5ab879b090d2d2c8a587d3ce7c2cb7885d2b322c7f1dc543cdd2619e7590e955a73aab14cfb6", 0xb6, 0x40, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) [ 865.638095][ T3194] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 865.657767][ T9921] cdc_ncm 1-1:1.0: skipping garbage [ 865.663019][ T9921] cdc_ncm 1-1:1.0: bind() failure [ 865.716604][ T49] cdc_ncm 4-1:1.0: bind() failure [ 865.736732][ T49] cdc_ncm 4-1:1.1: bind() failure 12:58:31 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x200c0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000003c0)={0x0, 0x0, 0x102, 0x4, {0xffffffff, 0x3b, 0xf9, 0x9d}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x3, [{0x61, &(0x7f0000000280)=@string={0x61, 0x3, "a009246b1663facb4af46cba171194c3ff95b03ab298793122d6db301124901ade3504ccc73dc09d0bec306ea7fb9db4a5c118da6abb6d2f330add384dde540dac9f5109a5b098433a4d84b30ae0ef502988a9530165c3d8159bd71354081c"}}, {0x79, &(0x7f0000000300)=@string={0x79, 0x3, "e135884f707e886a76a312cda8501240cfb83595848cfb0704740befbea0262d6c8eb2884d9b0d51fc0a1610d6d5ceca498f9ac546d35f22a4a0a9a92d3138f50d25a163181206fd748721d15aac6e5a3c617347f43ad6c7eac83744ca26bd58e8a6c64b193e1b30a6419873bec92fbbf2bbc40d9094eb"}}, {0x1e, &(0x7f0000000200)=@string={0x1e, 0x3, "f54b6897d1a2e3904420fcd65e929cd8f728117dd59846ad19711b1d"}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) getpeername$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @null, @netrom, @netrom, @remote, @netrom, @remote, @default]}, &(0x7f0000000080)=0x48) [ 865.787431][ T49] usb 4-1: USB disconnect, device number 118 [ 865.796533][ T4956] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 865.796565][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.827512][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.856522][T18901] usb 6-1: can't set config #1, error -71 [ 865.874182][ T9884] usb 1-1: USB disconnect, device number 19 [ 865.878146][T18901] usb 6-1: USB disconnect, device number 113 [ 865.890454][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 866.086590][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.097575][ T9921] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 866.108623][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.118643][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 866.126491][T10180] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 866.130949][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 866.145733][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:32 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0xf, &(0x7f0000000000)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x9, 0x9}]}}) [ 866.196560][ T9921] usb 2-1: Using ep0 maxpacket: 32 [ 866.246588][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 866.286533][T18901] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 866.316585][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.325772][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.334805][ T4956] usb 5-1: Product: ྞ蟛늘䆝ꊲغ➨釄緇㜕㏣䣌↉곏⚸駝똈䙴䓑ꮐ磛 [ 866.345603][ T4956] usb 5-1: Manufacturer: 鰳뿁슈︯厒Ჴ뿑듴瓰浳輽⣤䋩꣝쭭膤१納Ძ괶⠬귌緃쿶ᨡ馲谎ʽ [ 866.359022][ T4956] usb 5-1: SerialNumber: 鋁⎮욖㍺鳁鏦磥ⓞꪎ⯷ힹ⹤ꔥ屚晘클쪸뷇比뛍࣠퐂뚹挴擺詀碵庝㎮囎칞쿂ꤊ욟꿮ご怊⬝눪孛⸮螿㪸랳況࿟ꂕ㌿僕穘즌財鎥뺬윺ꃿꮡ침멋ҦⲾ咅쮐⻱좢䰘ᰆ猕࠳죆뵷⚓宱㇠诰턍莜׎촉搑⨗㲴≵䔹ꡂ즻殡ꧨ흺뀩꣧ꪍ騨硸繇䅆쬸ꮪ뭗楀媁᱇鵘ￇ꒗ [ 866.408243][ T9921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.412196][T18901] usb 6-1: Using ep0 maxpacket: 32 [ 866.430837][ T9921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.446054][ T9921] usb 2-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 866.496588][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.508161][ T5] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 866.515892][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.527698][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.537959][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 866.549525][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 866.560082][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 866.606709][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 866.617225][ T9921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.626368][ T9921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.637343][ T9921] usb 2-1: Product: syz [ 866.641542][ T9921] usb 2-1: Manufacturer: syz [ 866.650983][ T3234] udc-core: couldn't find an available UDC or it's busy [ 866.658020][ T9921] usb 2-1: SerialNumber: syz [ 866.663715][ T3234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 866.686616][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.699810][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 866.704802][T18901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.716654][ T4153] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 866.717432][ T9921] usb 2-1: selecting invalid altsetting 1 [ 866.733792][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.735170][ T4956] cdc_ncm 5-1:1.1: bind() failure [ 866.744419][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 866.760688][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.770291][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.780309][ T4956] usb 5-1: USB disconnect, device number 21 [ 866.780869][T18901] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 866.797947][T10180] usb 3-1: Product: 䯵靨ꋑ郣⁄훼鉞⣷紑飕굆焙ᴛ [ 866.807591][T10180] usb 3-1: Manufacturer: 㗡侈繰檈ꍶ촒储䀒룏锵貄߻琄ꂾ⴦蹬袲魍儍ૼဖ헖쫎轉얚퍆≟ꂤꦩㄭ┍採መﴆ蝴턡걚婮愼䝳㫴쟖죪䐷⛊墽ꛨ䯆㸙〛䆦玘즾묯믲හ钐 [ 866.843151][T18901] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 866.853409][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.864392][ T4153] usb 1-1: Using ep0 maxpacket: 32 [ 866.869640][T10180] usb 3-1: SerialNumber: syz [ 866.874588][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.890683][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 12:58:32 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0xfffffffffffffe35}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1000}, {0x6, 0x24, 0x1a, 0x0, 0x31}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x0, [{0x0, &(0x7f0000000280)=@string={0x0, 0x3, "fd956a1a0ce5f0c3e2ae1ff16a5d67f2b9bbe6a4ccd7f2b7d520438d2dac7268017e88336b774fb657f3e3fd2ad18b2dcd0f0b78b2ff75363d206fc009a8064ab72c2e0a77c1e07552ef86c79cd88074f136cca1c221c1bb3ecd198ce69e4ddf353c5c68eeae985f94dc0946d52b4a9ca78131cea9af2d8d52023f2aaea21ed8eb9c48db48746cfad4894e51f17add6876dda0f0032d0dd16a014ab1880789b25917c93b62588aef98feb02120d0908826a89cfae4956662ae932522aced762f175358f5823ab97262b3b00c0cb208fcb6340334ccd4c0a1"}}, {0x0, &(0x7f0000000380)=@string={0x0, 0x3, "fc47d766c9ff0f7e246da857375d19b55f530df51f02c2f6582a19cb9a0131c24741a0b0cae6e307d91615acae0a3aedfb7312db429dd2bd8969b1afe8f9df424b138be01495f6aeed9ff3b0994c5f9861b121d41224aaa451016189ab61bdb3d11c858da86266a81bd328c295105b51d0d8e92449598e8363d6ff739df71cf95bd74b886ec53a699d6d62eefb82282080b7939cc18102e9efb39835cf47c06d4bdd6168bf05b0f036f2c7f2ce98b8e8be4328bec4e141b1055c0d103da6d29a1edd7f673f10c65f61e40c544694d13ff88d1b76759fbf030c8d6b8d5f86fa420a6e3500c2ea4a596c2bd8f068aea5c7"}}]}) [ 866.900969][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 866.915644][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 866.925921][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 866.943998][ T9921] cdc_ncm 2-1:1.0: bind() failure [ 866.978640][ T9921] cdc_ncm 2-1:1.1: skipping garbage [ 866.983888][ T9921] cdc_ncm 2-1:1.1: bind() failure [ 867.017369][ T9921] usb 2-1: USB disconnect, device number 2 [ 867.052747][T18901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.062383][T18901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.081198][T18901] usb 6-1: Product: syz [ 867.089757][ T4153] usb 1-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 867.101116][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.113245][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.121631][T18901] usb 6-1: Manufacturer: syz [ 867.130246][ T4153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 867.141890][T18901] usb 6-1: SerialNumber: syz [ 867.149653][ T5] usb 4-1: Product: syz [ 867.154540][ T4153] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 130, changing to 11 [ 867.167454][ T5] usb 4-1: Manufacturer: syz [ 867.172423][ T5] usb 4-1: SerialNumber: syz [ 867.177886][T10180] cdc_ncm 3-1:1.0: bind() failure [ 867.191467][ T4153] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 1205, setting to 1024 [ 867.220516][T10180] cdc_ncm 3-1:1.1: bind() failure [ 867.230746][T10180] usb 3-1: USB disconnect, device number 106 [ 867.376533][ T4153] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.385700][ T4153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.386431][ T9921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 867.395061][ T4153] usb 1-1: Product: syz [ 867.405409][ T4153] usb 1-1: Manufacturer: syz [ 867.410027][ T4153] usb 1-1: SerialNumber: syz [ 867.438996][ T3194] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 867.456491][T18901] cdc_ncm 6-1:1.0: bind() failure [ 867.462702][ T4153] cdc_ncm 1-1:1.0: skipping garbage [ 867.467122][ T4956] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 867.471287][ T4153] cdc_ncm 1-1:1.0: bind() failure [ 867.490588][T18901] cdc_ncm 6-1:1.1: bind() failure [ 867.496417][ T5] cdc_ncm 4-1:1.0: bind() failure [ 867.496468][ T9921] usb 2-1: Using ep0 maxpacket: 32 [ 867.508575][ T5] cdc_ncm 4-1:1.1: bind() failure [ 867.544988][T18901] usb 6-1: USB disconnect, device number 114 [ 867.552450][ T5] usb 4-1: USB disconnect, device number 119 [ 867.567070][ T4956] usb 5-1: Using ep0 maxpacket: 32 12:58:33 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000c1ffffff000102560000000000000005240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000bc2a5551fd7e8c37599657a599f51ea5dcfed57a50c656d0bc71947b2a45193fc954"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 867.671693][ T49] usb 1-1: USB disconnect, device number 20 [ 867.707848][ T9921] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 867.727462][ T9921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 867.747163][ T9921] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 867.766434][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.786421][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.796167][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 867.827246][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 867.840051][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 867.926418][ T4153] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 867.946422][ T9921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.957556][ T9921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.965647][ T9921] usb 2-1: Product: syz [ 867.971215][ T9921] usb 2-1: Manufacturer: syz [ 867.975959][ T9921] usb 2-1: SerialNumber: syz [ 868.016989][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.026095][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.035449][ T9921] cdc_ncm 2-1:1.0: bind() failure [ 868.041001][ T4153] usb 3-1: Using ep0 maxpacket: 32 [ 868.043836][ T4956] usb 5-1: Product: ྞ蟛늘䆝ꊲغ➨釄緇㜕㏣䣌↉곏⚸駝똈䙴䓑ꮐ磛 [ 868.056103][ T4956] usb 5-1: Manufacturer: 鰳뿁슈︯厒Ჴ뿑듴瓰浳輽⣤䋩꣝쭭膤१納Ძ괶⠬귌緃쿶ᨡ馲谎ʽ [ 868.068298][ T4956] usb 5-1: SerialNumber: 鋁⎮욖㍺鳁鏦磥ⓞꪎ⯷ힹ⹤ꔥ屚晘클쪸뷇比뛍࣠퐂뚹挴擺詀碵庝㎮囎칞쿂ꤊ욟꿮ご怊⬝눪孛⸮螿㪸랳況࿟ꂕ㌿僕穘즌財鎥뺬윺ꃿꮡ침멋ҦⲾ咅쮐⻱좢䰘ᰆ猕࠳죆뵷⚓宱㇠诰턍莜׎촉搑⨗㲴≵䔹ꡂ즻殡ꧨ흺뀩꣧ꪍ騨硸繇䅆쬸ꮪ뭗楀媁᱇鵘ￇ꒗ [ 868.116399][ T49] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 868.207077][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 868.220758][ T2268] usb 2-1: USB disconnect, device number 3 [ 868.226663][ T5] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 868.256367][T18901] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 868.286407][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.298316][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.308538][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.319306][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 868.324443][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 868.334967][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 868.345361][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:34 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="058f08000103100a"]}) [ 868.355304][T18901] usb 4-1: Using ep0 maxpacket: 32 [ 868.396458][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 868.416409][ T49] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 868.439964][ T4956] cdc_ncm 5-1:1.1: bind() failure [ 868.451822][ T49] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 868.496640][ T4956] usb 5-1: USB disconnect, device number 22 [ 868.537369][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.557181][ T4153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.576548][ T4153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.584590][ T4153] usb 3-1: Product: 䯵靨ꋑ郣⁄훼鉞⣷紑飕굆焙ᴛ [ 868.592219][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.602327][T18901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.623354][T18901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.646389][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.669417][ T4153] usb 3-1: Manufacturer: 㗡侈繰檈ꍶ촒储䀒룏锵貄߻琄ꂾ⴦蹬袲魍儍ૼဖ헖쫎轉얚퍆≟ꂤꦩㄭ┍採መﴆ蝴턡걚婮愼䝳㫴쟖죪䐷⛊墽ꛨ䯆㸙〛䆦玘즾묯믲හ钐 [ 868.669842][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.690021][T18901] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.716324][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 868.730082][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.736329][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 868.755400][T18901] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 868.765938][ T4153] usb 3-1: SerialNumber: syz [ 868.766221][ T49] usb 1-1: Product: syz [ 868.772206][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 868.787469][T18901] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 868.798770][ T49] usb 1-1: Manufacturer: syz [ 868.802073][T18901] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 868.809965][ T49] usb 1-1: SerialNumber: syz [ 868.896366][ T4956] usb 5-1: new high-speed USB device number 23 using dummy_hcd 12:58:34 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000003d80)=ANY=[@ANYBLOB="050fba00c6e894c92385ff19cc22a5888dd3f0183be6f20a"]}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, &(0x7f0000000340)=""/100, 0x64}, 0x400}, {{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/210, 0xd2}, {&(0x7f0000002840)=""/141, 0x8d}], 0x8, &(0x7f0000002980)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003980)=""/210, 0xd2}, {&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000003a80)=""/231, 0xe7}], 0x3, &(0x7f0000003bc0)=""/86, 0x56}, 0x8001}], 0x3, 0x40000000, &(0x7f0000003d00)={0x77359400}) bind$l2tp6(r1, &(0x7f0000003d40)={0xa, 0x0, 0x7fff, @local, 0x88}, 0x20) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x561, 0x48000) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) 12:58:34 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="050f08000303100a"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xffffffffffffffda, 0x7, {{0x6, 0x100000001, 0x0, r2}}}, 0x28) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r3, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000cab000)=0x3b) setfsuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r6) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x8000, &(0x7f0000000280)={[{@mode={'mode'}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x6}}], [{@fowner_gt={'fowner>', r4}}, {@pcr={'pcr', 0x3d, 0x15}}, {@obj_role={'obj_role', 0x3d, 'cgroup.subtree_control\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}]}) [ 868.967209][ T5] usb 6-1: string descriptor 0 read error: -71 [ 868.976307][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.986391][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 868.995844][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.006663][ T4153] cdc_ncm 3-1:1.0: bind() failure [ 869.016465][T18901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.037849][T18901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.049123][ T4153] cdc_ncm 3-1:1.1: bind() failure [ 869.084871][ T4153] usb 3-1: USB disconnect, device number 107 [ 869.091770][ T5] usb 6-1: can't set config #1, error -71 [ 869.096311][ T9921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 869.100113][T18901] usb 4-1: Product: syz [ 869.112563][ T5] usb 6-1: USB disconnect, device number 115 [ 869.128645][T18901] usb 4-1: Manufacturer: syz [ 869.134782][T18901] usb 4-1: SerialNumber: syz [ 869.147231][ T2268] usb 1-1: USB disconnect, device number 21 [ 869.156373][ T4956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 869.200179][ T9921] usb 2-1: Using ep0 maxpacket: 32 [ 869.239671][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:58:35 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x100000000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfffd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x1}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x1}]}}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r5) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x80, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@cachetag={'cachetag', 0x3d, '#*'}}, {@timeout={'timeout', 0x3d, 0x322}}], [{@uid_gt={'uid>', r3}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@appraise_type='appraise_type=imasig'}, {@hash='hash'}, {@audit='audit'}, {@dont_measure='dont_measure'}, {@obj_role={'obj_role'}}, {@fowner_lt={'fowner<', r5}}]}}) syslog(0x4, &(0x7f0000000380)=""/133, 0x85) [ 869.300433][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.316351][T18901] cdc_ncm 4-1:1.0: bind() failure [ 869.332309][T18901] cdc_ncm 4-1:1.1: bind() failure [ 869.336316][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.366954][T18901] usb 4-1: USB disconnect, device number 120 [ 869.376655][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 869.407025][ T9921] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 869.426303][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 869.446938][ T9921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 869.455822][ T9921] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.498907][ T4153] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 869.548540][ T5] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 869.596299][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.605369][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.608652][ T4153] usb 3-1: Using ep0 maxpacket: 32 [ 869.656305][ T4956] usb 5-1: Product: syz [ 869.660518][ T4956] usb 5-1: Manufacturer: syz [ 869.665153][ T4956] usb 5-1: SerialNumber: syz [ 869.669255][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 869.670771][ T9921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.723988][ T9921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.747508][ T9921] usb 2-1: Product: syz [ 869.751704][ T9921] usb 2-1: Manufacturer: syz [ 869.761355][ T9921] usb 2-1: SerialNumber: syz [ 869.769777][ T4153] usb 3-1: unable to get BOS descriptor set [ 869.790054][T18901] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 869.810350][ T9921] cdc_ncm 2-1:1.0: bind() failure [ 869.846369][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.861199][ T4153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.872285][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.884381][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 869.894826][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.907123][ T4153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 869.916263][ T9884] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 869.917965][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.934515][ T4153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 869.944799][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.955079][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 869.965980][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 869.976140][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:35 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x12) [ 870.016382][ T9884] usb 1-1: Using ep0 maxpacket: 32 [ 870.028394][ T2268] usb 2-1: USB disconnect, device number 4 [ 870.038143][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 870.059212][ T4956] cdc_ncm 5-1:1.1: bind() failure [ 870.106333][ T4956] usb 5-1: USB disconnect, device number 23 [ 870.146290][T18901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.158066][ T4153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.176243][ T4153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.184246][ T4153] usb 3-1: Product: syz [ 870.190644][T18901] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.207249][T18901] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 870.218364][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.227561][ T4153] usb 3-1: Manufacturer: syz [ 870.232280][ T4153] usb 3-1: SerialNumber: syz [ 870.237851][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.245933][ T5] usb 6-1: Product: syz [ 870.253651][T18901] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 870.259407][ T9884] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 870.276757][ T5] usb 6-1: Manufacturer: syz [ 870.281371][ T5] usb 6-1: SerialNumber: syz [ 870.284480][ T9884] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 870.291206][T18901] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 870.456281][ T9884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.465478][ T9884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.473977][ T9884] usb 1-1: Product: syz [ 870.478285][ T9884] usb 1-1: Manufacturer: syz [ 870.483198][ T9884] usb 1-1: SerialNumber: syz [ 870.486458][T18901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.497052][ T2268] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 870.504856][T18901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.513437][T18901] usb 4-1: Product: syz [ 870.518053][T18901] usb 4-1: Manufacturer: syz [ 870.522805][T18901] usb 4-1: SerialNumber: syz [ 870.576263][ T4153] cdc_ncm 3-1:1.0: bind() failure [ 870.584782][ T4153] cdc_ncm 3-1:1.1: bind() failure [ 870.596271][ T2268] usb 2-1: Using ep0 maxpacket: 32 [ 870.616266][ T5] cdc_ncm 6-1:1.0: bind() failure [ 870.625169][ T5] cdc_ncm 6-1:1.1: bind() failure [ 870.642068][ T4153] usb 3-1: USB disconnect, device number 108 [ 870.653287][ T5] usb 6-1: USB disconnect, device number 116 12:58:36 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x6, [{0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="ddc19ddbe1e677a96592da89ec9cf6550da90c5a82c2f4a4aec17fa0a4250a95913fba45de03787812bc48efdb4ce7f4a7306dd59d2f08afce787e0f1be0ef861429afc584f04e105409c9c19d0fda302172fb8ee882f58abf54bbfe0d959b1ef91abead03e9bc2bb33ea64359f5010087f4e401dc5ee60f59d5e36edaee804792d545ae69832c776a13eaf8cc6050095fc1830ece81ce59022d7422a6c776ac6a"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x200a}}, {0x92, &(0x7f0000000280)=@string={0x92, 0x3, "dc455bf3696748c10cc6f3f2ea1a129c8a91ee64168180c1e6af1b377c48c3c495dc3e393fd5b614784f8985d9ed515ff2574ba96d9b9f5f0d702884a70497f7286e2ac2b5107609a0dc1ea6e2e6150589d2a5f5a6f4f86a37918f406d95782aeec4d971f7567479edd2ec5d6059cb612afa0b347111d29807f5700c47ee0556052fc83d12d0c886b27300547d4933f6"}}, {0xa8, &(0x7f0000000340)=@string={0xa8, 0x3, "481f8c29fe6f4a91b775009b55a5c5494926f453f57cda389508ca21632266ed721f30a79d366a611fe3e77fbd0400000000000000ad7455ab29257b65d1db0260fa4eba83a389dfee06263ccb928b1581f55773c9f1aee842e60680e0039437172486465a66a07b02f7b1a3a4ab5c19e4d069bb41d58db5a2fbeb084e2f40c09c6374f7092e8d07b7cf6c5fe02a2b06b232429c23b123f739bee868e586457ae903270c5036"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44d}}, {0xf1, &(0x7f0000000440)=@string={0xf1, 0x3, "5ee171540f0ae5af49bb571858e21943a29f54a0324178e78aaea6c66f1a6537d86fb32511d8992c709538a9590768a0fd8e4fc27325fdf6c5ab9b2e223e016a089dcaf6f7f15a8660fd9faa8704f4bfff5338d898fd5fe986be97b14beebd25c047874f88b2702135e8dd8df96100ae5b3474ece20858316b36a2d82533595a9953799409777c9e90c51ba35a20aef77ce5239ea2f7f10e4477b58c43e96259288e053db1fbefbe606c6d2d7a8fa3ef3fd239b6acecaf49a17147369c7b72f7c87d1f31017daf1234fb8212a87299406c184c8b3bab8faeb7a41d2093ccd922c10df08ee0d5aa3b9ff5504aeb8bf5"}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0xbd80, &(0x7f0000000040)=0x4) [ 870.737004][ T2268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.753004][ T2268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.776270][ T4956] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 870.850192][ T2268] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.861991][ T2268] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 870.874687][ T2268] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 870.885816][T10180] usb 1-1: USB disconnect, device number 22 [ 870.926189][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 870.996280][T18901] cdc_ncm 4-1:1.0: bind() failure [ 871.010508][T18901] cdc_ncm 4-1:1.1: bind() failure [ 871.021882][T18901] usb 4-1: USB disconnect, device number 121 [ 871.058794][ T2268] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.069957][ T2268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.087042][ T4956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 871.087087][ T2268] usb 2-1: Product: syz [ 871.126396][ T2268] usb 2-1: Manufacturer: syz [ 871.131045][ T2268] usb 2-1: SerialNumber: syz [ 871.167051][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.178288][ T4956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.188429][ T4956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 871.198387][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 871.208639][ T4956] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 871.266250][T10180] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 871.316189][ T5] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 871.356684][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 871.376948][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.386006][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.394114][ T4956] usb 5-1: Product: syz [ 871.398610][ T4956] usb 5-1: Manufacturer: syz [ 871.403373][ T4956] usb 5-1: SerialNumber: syz [ 871.406839][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 871.413374][ T4153] usb 6-1: new high-speed USB device number 117 using dummy_hcd 12:58:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000100)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41f}}]}) [ 871.426955][ T2268] cdc_ncm 2-1:1.0: bind() failure [ 871.435582][ T2268] cdc_ncm 2-1:1.1: bind() failure [ 871.471678][ T2268] usb 2-1: USB disconnect, device number 5 12:58:37 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0x1}, {0x6}, [@mdlm={0x0, 0x24, 0x12, 0x6}, @mbim_extended={0x0, 0x24, 0x1c, 0x1f, 0x8, 0x8}]}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0xfffffffffffffc32, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) [ 871.537018][ T4153] usb 6-1: Using ep0 maxpacket: 32 [ 871.547482][ T5] usb 3-1: unable to get BOS descriptor set [ 871.567432][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.586251][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 871.587276][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.610663][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 871.614814][ T4956] cdc_ncm 5-1:1.1: bind() failure [ 871.627830][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 871.638264][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 871.650141][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.661226][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 871.666503][ T4956] usb 5-1: USB disconnect, device number 24 [ 871.694285][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.705577][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 871.718131][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 871.728701][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 871.756218][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.767265][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 871.777822][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.832854][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 871.853057][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 871.877362][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 871.887715][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 871.936990][T10180] usb 1-1: language id specifier not provided by device, defaulting to English [ 871.956230][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.965458][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.974182][ T5] usb 3-1: Product: syz [ 871.980279][ T5] usb 3-1: Manufacturer: syz [ 871.984974][ T5] usb 3-1: SerialNumber: syz 12:58:37 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba72764f460593d41d43e9f589502652fe815ef1da2c0975e828d69536eb96c2c27f564dcc44d2a18bf98a8698f09764ff95bda5a0520964e8e84670e557cc255a621254e23c5e3afd68721e31a0caa4ac9e40a612dd4bff3553cc00a47f618b8289ce1086193ea338ae5473fc048d1e696a52f65d00d34ed03cfb8125020463ba3054af5f7a2fd4c733242927960b07d0d81f303157417af8907b820d74a1dc84ea78e317584a11da56d5842dec5823a376d939a621adf86c8297db303ab14b7fa0cfa4316987c1ac3303f6acdaa8a946496cb09a6a0785a49f67cfe7725ff477933e4f38d99e6062f1bec6c4e857d64a8ba966cc4c024177bb10e4f5c05db8e7d4cd2437cff4067d9c6f68d8faf4342112a53e640e2c070ed68a364a209139ad", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000000080)=0xe8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 872.008950][ T9884] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 872.027594][ T5] usb 3-1: can't set config #1, error -71 [ 872.048980][ T5] usb 3-1: USB disconnect, device number 109 [ 872.056255][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.065380][ T4153] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.087363][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.104794][ T4153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.116185][ T4956] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 872.130466][T10180] usb 1-1: Product: 䗜杩셈옌᫪鰒醊擮脖솀꿦㜛䡼쓃㤾픿ᒶ佸薉彑埲ꥋ魭徟瀍萨ҧ渨숪Ⴕॶꘞԕ튉櫸鄷䂏镭⩸쓮燙囷祴틭巬奠懋飯㐋ᅱ飒౰嘅⼅㷈퀒蛈玲吀䥽 [ 872.153605][ T4153] usb 6-1: Product: syz 12:58:38 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x1, 0x69}, 0x1, 0x3, 0x8, {0x20, 0x6}, 0x2, 0x4}) [ 872.166257][ T4153] usb 6-1: Manufacturer: syz [ 872.185643][ T4153] usb 6-1: SerialNumber: syz [ 872.198223][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 872.202357][T10180] usb 1-1: Manufacturer:   [ 872.217546][T10180] usb 1-1: SerialNumber: Ὀ⦌濾酊疷鬀ꕕ䧅♉叴糵㣚࢕⇊≣ὲꜰ㚝慪翧ҽ [ 872.219437][ T9884] usb 4-1: device descriptor read/8, error -61 [ 872.229193][ T4153] usb 6-1: can't set config #1, error -71 [ 872.241587][ T4153] usb 6-1: USB disconnect, device number 117 [ 872.246966][ T4956] usb 5-1: Using ep0 maxpacket: 32 [ 872.296242][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 872.436477][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.447843][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.458291][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 872.468369][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 872.478762][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 872.488849][ T4956] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 872.499459][ T9884] usb 4-1: device descriptor read/8, error -61 [ 872.507676][ T4956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 872.529387][ T4956] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.538664][T10180] cdc_ncm 1-1:1.0: bind() failure [ 872.555713][T10180] cdc_ncm 1-1:1.1: bind() failure [ 872.567669][ T5] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 872.588394][T10180] usb 1-1: USB disconnect, device number 23 [ 872.616167][ T4153] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 872.656432][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 872.686149][ T49] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.695361][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.704260][ T4956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.706893][ T4153] usb 6-1: Using ep0 maxpacket: 32 [ 872.713696][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.726587][ T49] usb 2-1: Product: syz [ 872.730737][ T49] usb 2-1: Manufacturer: syz [ 872.735308][ T49] usb 2-1: SerialNumber: syz [ 872.739931][ T4956] usb 5-1: Product: syz [ 872.744122][ T4956] usb 5-1: Manufacturer: syz [ 872.749878][ T4956] usb 5-1: SerialNumber: syz [ 872.778406][ T9884] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 872.787687][ T4956] cdc_ncm 5-1:1.0: bind() failure [ 872.856945][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.867993][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.879723][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 872.890346][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 872.901338][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 872.912042][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 872.923002][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.933967][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.944547][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 872.954977][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 872.965143][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 872.975389][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 872.976259][ T9884] usb 4-1: device descriptor read/8, error -61 12:58:38 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000000)) [ 873.006891][ T49] cdc_ncm 2-1:1.0: bind() failure [ 873.019635][ T49] cdc_ncm 2-1:1.1: bind() failure [ 873.072792][ T49] usb 2-1: USB disconnect, device number 6 [ 873.086831][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.095950][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.102879][ T4956] usb 5-1: USB disconnect, device number 25 [ 873.112702][ T5] usb 3-1: Product: syz [ 873.133302][ T5] usb 3-1: Manufacturer: syz [ 873.138650][ T4153] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.158070][ T4153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.169926][ T5] usb 3-1: SerialNumber: syz [ 873.186082][ T4153] usb 6-1: Product: syz [ 873.190267][ T4153] usb 6-1: Manufacturer: syz [ 873.194837][ T4153] usb 6-1: SerialNumber: syz [ 873.306289][ T9884] usb 4-1: device descriptor read/8, error -61 [ 873.356101][T10180] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 873.437093][ T9884] usb usb4-port1: attempt power cycle [ 873.448028][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 873.486068][ T4153] cdc_ncm 6-1:1.0: bind() failure [ 873.494740][ T4153] cdc_ncm 6-1:1.1: bind() failure [ 873.504763][ T5] cdc_ncm 3-1:1.0: bind() failure [ 873.526960][ T5] cdc_ncm 3-1:1.1: bind() failure [ 873.536182][ T49] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 873.540084][ T4153] usb 6-1: USB disconnect, device number 118 [ 873.561957][ T5] usb 3-1: USB disconnect, device number 110 [ 873.648045][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.659066][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.666761][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 873.670977][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 873.683820][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 873.696343][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 873.706108][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 873.766181][T14691] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 873.878257][T14691] usb 5-1: Using ep0 maxpacket: 32 [ 873.886043][T10180] usb 1-1: string descriptor 0 read error: -71 [ 873.893474][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.906056][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.919759][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.930918][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.956725][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 873.958620][T10180] usb 1-1: can't set config #1, error -71 12:58:39 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x5}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11c00002}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6bf8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="26050f97cf6cb0fbe6"]}) [ 873.986081][T10180] usb 1-1: USB disconnect, device number 24 [ 873.996735][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.016113][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 874.025802][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 874.026177][ T3619] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 874.158600][T14691] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 874.168824][ T9884] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 874.176622][T14691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 874.185481][T14691] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.226869][ T49] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.236135][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.244172][ T49] usb 2-1: Product: syz [ 874.249698][ T49] usb 2-1: Manufacturer: syz [ 874.254291][ T49] usb 2-1: SerialNumber: syz [ 874.346019][ T17] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 874.353750][ T4956] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 874.376065][T14691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.385430][T14691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.393769][T14691] usb 5-1: Product: syz [ 874.398150][T14691] usb 5-1: Manufacturer: syz [ 874.402749][T14691] usb 5-1: SerialNumber: syz [ 874.406036][T10180] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 874.456050][ T4956] usb 6-1: Using ep0 maxpacket: 32 [ 874.456086][ T17] usb 3-1: Using ep0 maxpacket: 32 [ 874.458688][T14691] cdc_ncm 5-1:1.0: bind() failure [ 874.471493][ T9884] usb 4-1: device descriptor read/64, error 18 [ 874.496013][T10180] usb 1-1: Using ep0 maxpacket: 32 12:58:40 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000180)={'bond_slave_0\x00', {0x2, 0x4e23, @loopback}}) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000040)=0x6, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0xc030, 0x0, 0x6, 0x0, 0x7ffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x40}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="fcecbb59bf9067f23bd71b1ea945a1a089d8bba6b7fc1c51ea01114c6e447212697c6591c85dc52e4edbed4573229494e5bb535633a5db8035e9358b119c5a975cfed34dacaa19238c5913c0405bff9483048f077a614823013c59d5e602073b0cc28e64fbbc15acaebae9640e52e637605adb7e6dcfbcb652f34ccb52184dd857d2862e37ecfb0778bb8de26802e959264e0adb33a01351aca92f1256fd2510872c879f95fee2c06d31e5f118ce4dff1f3151ca9d41f9588b7c0a1e532aea7132185a90", 0xc4}, {&(0x7f0000000340)="ec21bd3be709876b34a971b83a8e6df4cb7abe165b9c9400c0cd4120024addf64bb5df92e85c5d056741ae4b777b420aa9d7f35939730a0f97914c02d17458458de1b491bd674a3d7b14071f55b6af86c6c2d25120e4eebf7b998a8419331d980c3997ed232bca256ad33d44ec29b3974a5c48014e9bd2222b5468c8b849a67b3a5809b0105c3507750adeb4fd739b29b8da5cc0195ceea15001d5bc9bbee94f4edd9ec587c989b812c3cf4bf12b1bf65b91b2b5dce81128bc9e90a086da7cd5c501cc26198663", 0xc7}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000084000000060000003f000000000000001800000000000000840000000000000002000300090001f820000000000000008400000008000000fe8800000000000000000000000001011800000000000000840000000700000000000000000000003aad1a0107544454"], 0x68, 0x4}, 0x4004081) fcntl$setstatus(r2, 0x4, 0x42800) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{0x5, 0x0, 0x10001, 0x2, 'syz0\x00', 0x8}, 0x4, 0x3, 0x4, r4, 0x3, 0x8, 'syz1\x00', &(0x7f0000000540)=['cgroup.subtree_control\x00', '{\x00', 'mime_typeppp1vmnet1cpuset-\x00'], 0x34, [], [0x8, 0x0, 0x4, 0xa8]}) r5 = dup2(r2, 0xffffffffffffffff) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) [ 874.547000][ T49] cdc_ncm 2-1:1.0: bind() failure [ 874.555774][ T49] cdc_ncm 2-1:1.1: bind() failure 12:58:40 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x200) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair(0x4, 0x3, 0x8, &(0x7f0000000040)) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1d, r1, 0x3, {0x0, 0x0, 0x3}, 0x1}, 0x18, &(0x7f0000000200)={&(0x7f0000000280)="81d29316459685c83c28b04174e19734a415e60f3aceddeca1892c4479a7664e9b074a2f976b7aa4e9fc2d4d6e82bc5556abf9ed8b65f9cf00d2b2e8c89b6cfe220e5ec279624065b7584b8d6e4b52fbd007e250e7455b6feb29ad66960b86fc1f72bd68a63cb20cd71d1022479a19e30023897eea72f42b8349372052d30eed3176e0a4dee32beb62274d4a2e863a03742498a2cf1e093e80259ba3c753eed42c616db2cf7f71fc44f04dc7ee74e42e6f3caeaccca0ed057659e5db605bd1a1084042e5bc6e9e189d070caade20caa7c12147c02485de7d2a74c5a5c2aed63038f165c35b14b55c712cac471bf0cfb3", 0xf0}, 0x1, 0x0, 0x0, 0xc000}, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f08030103100a33fab1cc1d28ef3a435f63e75a5b6991b320a8db1d1c0e9bd0d63665f6700a89afff565d828917e88ddb84f7ba74fd51828189904b28a0443909b8559a938d7e56591c6098939c1425ab1d7d7311fde1bca13fe582f28fb4ad7d1ab1387339c926c48b390e5909419fe54022f8615282b029ac395460524a7f6529b2dd1704e9f596a36449598de264315ffebaad9ea61251e7cf3613a7ff1da59327a38e80e195c0a3a9be96c7278b193c506ea4dd12b7eea97dabeebe78575dbac7d06d24b268d28f2001d59b860e3d7335ad84a77dfc5b18fbb15f4b8cf44953dacb4d30eb25847d17f8a7462c8f053fab055d08588a7a"]}) [ 874.588925][ T49] usb 2-1: USB disconnect, device number 7 [ 874.666626][T10180] usb 1-1: unable to get BOS descriptor or descriptor too short [ 874.694572][T14691] usb 5-1: USB disconnect, device number 26 [ 874.702226][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:58:40 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x10, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba72764f460593d41d43e9f589502652fe815ef1da2c0975e828d69536eb96c2c27f564dcc44d2a18bf98a8698f09764ff95bda5a0520964e8e84670e557cc255a621254e23c5e3afd68721e31a0caa4ac9e40a612dd4bff3553cc00a47f618b8289ce1086193ea338ae5473fc048d1e696a52f65d00d34ed03cfb8125020463ba3054af5f7a2fd4c733242927960b07d0d81f303157417af8907b820d74a1dc84ea78e317584a11da56d5842dec5823a376d939a621adf86c8297db303ab14b7fa0cfa4316987c1ac3303f6acdaa8a946496cb09a6a0785a49f67cfe7725ff477933e4f38d99e6062f1bec6c4e857d64a8ba966cc4c024177bb10e4f5c05db8e7d4cd2437cff4067d9c6f68d8faf4342112a53e640e2c070ed68a364a209139ad", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 874.716785][ T4956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.742355][ T4956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.757820][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.758230][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.773483][ T4956] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.792415][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.808221][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.809651][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.818905][ T4956] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.838779][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 874.849885][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 874.852985][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.860564][ T4956] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 874.880034][ T4956] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 874.896000][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.936008][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 874.948835][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 875.048482][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.058767][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.067713][ T4956] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.077114][ T17] usb 3-1: Product: syz [ 875.081367][ T17] usb 3-1: Manufacturer: syz [ 875.086075][ T4956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.094065][ T4956] usb 6-1: Product: syz [ 875.098275][ T17] usb 3-1: SerialNumber: syz [ 875.103235][ T4956] usb 6-1: Manufacturer: syz [ 875.108464][ T4956] usb 6-1: SerialNumber: syz [ 875.116679][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.136880][ T9884] usb 4-1: device descriptor read/64, error -71 12:58:41 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="050f08000103100e"]}) prctl$PR_SET_FPEMU(0xa, 0x2) [ 875.141591][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.163595][T10180] usb 1-1: Product: syz [ 875.176008][ T17] usb 3-1: can't set config #1, error -71 [ 875.182844][T10180] usb 1-1: Manufacturer: syz [ 875.192630][T10180] usb 1-1: SerialNumber: syz [ 875.201476][ T17] usb 3-1: USB disconnect, device number 111 [ 875.207673][T14691] usb 5-1: new high-speed USB device number 27 using dummy_hcd 12:58:41 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x204001, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) [ 875.306028][ T4956] cdc_ncm 6-1:1.0: bind() failure [ 875.314083][ T4956] cdc_ncm 6-1:1.1: bind() failure [ 875.326765][T14691] usb 5-1: Using ep0 maxpacket: 8 [ 875.356699][ T4956] usb 6-1: USB disconnect, device number 119 [ 875.366197][ T4153] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 875.416650][ T9884] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 875.466792][ T4153] usb 2-1: Using ep0 maxpacket: 32 [ 875.495935][T10180] cdc_ncm 1-1:1.0: bind() failure [ 875.522105][T10180] cdc_ncm 1-1:1.1: bind() failure [ 875.539193][T14691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.567527][T14691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.577123][T10180] usb 1-1: USB disconnect, device number 25 [ 875.600716][T14691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 875.634434][T14691] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 875.644429][ T17] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 875.654785][T14691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 875.666047][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.683078][T14691] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 875.693755][ T9884] usb 4-1: Using ep0 maxpacket: 32 [ 875.697860][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.708775][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 875.718567][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 875.728752][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 875.738537][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 875.755968][ T17] usb 3-1: Using ep0 maxpacket: 32 [ 875.765954][ T4956] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 875.826699][ T9884] usb 4-1: unable to get BOS descriptor set [ 875.867082][T14691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.876268][ T4956] usb 6-1: Using ep0 maxpacket: 32 [ 875.881543][T14691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.891469][T14691] usb 5-1: Product: syz [ 875.895655][T14691] usb 5-1: Manufacturer: syz [ 875.901303][T14691] usb 5-1: SerialNumber: syz [ 875.907069][ T4153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.920514][ T4153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.926147][ T9884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.932046][ T4153] usb 2-1: Product: syz [ 875.949002][ T9884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.951306][ T4153] usb 2-1: Manufacturer: syz [ 875.959838][ T9884] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 875.964557][ T4153] usb 2-1: SerialNumber: syz [ 875.975814][ T3710] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 875.989154][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.000100][ T9884] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 876.016128][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.028450][ T9884] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.038946][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 876.049394][ T9884] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 876.060149][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 12:58:41 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905820200000000000905030200000000006f852b18483f7e0529b6c4720884797ff176bbbdc3935b25236ddc015e7fd31ae870c6eec3061ed4926d9373e66b30783710f093f1287528315e9b53c06d372fd0bef0864ecd29d412a452a7d52cc8784df7eaa3826c59c2015d6e41070187c5d5cacefd2f04de010d68c5048f4b3d"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="5404254f9cfd879d33417467ec0d3764797df268185d5ea5e87f22bcfdce18b1f6c3b6cd117da78eddf37c41bf9ed69b4840409f32fc80692db6e3e088df59c34aea6235f834fee0b8f787ad82a1f0ff1baa763934f100b3936fb1eb7722fec045e7a6"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x1, 0x4) [ 876.070562][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.081717][ T17] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 876.126250][ T4956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.137544][ T4956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.145964][ T4153] cdc_ncm 2-1:1.0: bind() failure [ 876.154304][ T4956] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 876.165649][ T4956] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 876.181831][ T4956] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.184522][ T4153] cdc_ncm 2-1:1.1: bind() failure [ 876.198873][ T4956] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 876.237701][ T9884] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.239971][ T4153] usb 2-1: USB disconnect, device number 8 [ 876.251215][ T9884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.275944][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.285164][ T9884] usb 4-1: Product: syz [ 876.290830][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.299322][ T9884] usb 4-1: Manufacturer: syz [ 876.304026][ T9884] usb 4-1: SerialNumber: syz [ 876.308966][T14691] cdc_ncm 5-1:1.0: bind() failure [ 876.317298][ T17] usb 3-1: Product: syz [ 876.323640][T14691] cdc_ncm 5-1:1.1: bind() failure [ 876.330454][ T17] usb 3-1: Manufacturer: syz [ 876.338452][ T17] usb 3-1: SerialNumber: syz [ 876.352147][T14691] usb 5-1: USB disconnect, device number 27 [ 876.359556][T23781] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 876.416892][ T4956] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.437775][ T4956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.466806][ T4956] usb 6-1: Product: syz [ 876.478726][ T4956] usb 6-1: Manufacturer: syz [ 876.487147][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 876.492795][ T4956] usb 6-1: SerialNumber: syz [ 876.615906][ T4153] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 876.636679][ T9884] cdc_ncm 4-1:1.0: bind() failure [ 876.646971][ T9884] cdc_ncm 4-1:1.1: bind() failure [ 876.655817][ T9884] usb 4-1: USB disconnect, device number 125 [ 876.665965][ T17] cdc_ncm 3-1:1.0: bind() failure [ 876.675678][ T17] cdc_ncm 3-1:1.1: bind() failure [ 876.694358][T23781] usb 1-1: unable to get BOS descriptor or descriptor too short [ 876.705908][ T4153] usb 2-1: Using ep0 maxpacket: 32 [ 876.705979][ T17] usb 3-1: USB disconnect, device number 112 [ 876.788285][ T4956] cdc_ncm 6-1:1.0: bind() failure [ 876.802132][ T4956] cdc_ncm 6-1:1.1: bind() failure [ 876.811781][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.825344][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.841856][ T4956] usb 6-1: USB disconnect, device number 120 [ 876.849229][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 876.864791][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 876.866525][ T4153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 876.876590][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.895717][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:42 executing program 0: syz_usb_connect$cdc_ncm(0x5, 0xe1, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "7d97d57c6178"}, {0x5}, {0xd}, {0x6}, [@acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x0, 0x7e, 0x40}, @mdlm_detail={0x4a, 0x24, 0x13, 0x81, "d578b5a5ef479a0700ee5dea9e2b078ffeaf9afb739b3b4fa024af47a3657e619c5fe133ee1ab4f435b8ae1ccdc4be8dec849ad1a2bdde479bf0d58805d02ab519f22d56717c"}, @mbim={0xc, 0x24, 0x1b, 0xddac, 0x1000, 0x0, 0x8, 0x4, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) [ 876.985865][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.997679][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.024993][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.047739][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 877.058875][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 877.065836][ T9884] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 877.069799][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 877.095874][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 877.112824][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.135810][T23781] usb 1-1: Product: syz [ 877.155848][T23781] usb 1-1: can't set config #1, error -71 [ 877.162728][T23781] usb 1-1: USB disconnect, device number 26 [ 877.195865][ T9884] usb 5-1: Using ep0 maxpacket: 8 [ 877.248257][ T4153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 877.268045][ T4153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.278942][ T4153] usb 2-1: Product: syz [ 877.288283][ T4153] usb 2-1: Manufacturer: syz [ 877.293120][ T4153] usb 2-1: SerialNumber: syz [ 877.375889][ T2268] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 877.415872][ T9884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.426888][ T4956] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 877.434719][ T9884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.444856][ T9884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.454830][ T9884] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 877.464970][ T9884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 877.466114][ T2268] usb 4-1: Using ep0 maxpacket: 32 [ 877.475007][ T9884] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 877.525870][ T4956] usb 3-1: Using ep0 maxpacket: 32 [ 877.535848][T23781] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 877.565849][T10180] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 877.576166][ T4153] cdc_ncm 2-1:1.0: bind() failure [ 877.586103][ T4153] cdc_ncm 2-1:1.1: bind() failure [ 877.601337][ T2268] usb 4-1: unable to get BOS descriptor set [ 877.608710][ T4153] usb 2-1: USB disconnect, device number 9 [ 877.636534][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 877.658019][ T9884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 877.658641][T10180] usb 6-1: Using ep0 maxpacket: 32 [ 877.667348][ T9884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.683112][ T9884] usb 5-1: Product: syz [ 877.686904][ T2268] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.688042][ T9884] usb 5-1: Manufacturer: syz [ 877.703497][ T9884] usb 5-1: SerialNumber: syz [ 877.707362][ T2268] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.720796][ T2268] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.731510][ T2268] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 877.743502][ T2268] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 877.754431][ T2268] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 877.755908][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.793519][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 12:58:43 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="210f08230103fd29aa85b949200ba1b766902cf436b6080a089ffad79734cc901f440550f0191cf3a2"]}) [ 877.804586][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.814860][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 877.827214][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 877.837423][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 877.865785][ T9884] cdc_ncm 5-1:1.0: bind() failure [ 877.866504][T10180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.874481][ T9884] cdc_ncm 5-1:1.1: bind() failure [ 877.896566][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.909352][T10180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.912659][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.948896][ T9884] usb 5-1: USB disconnect, device number 28 [ 877.949959][T10180] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 12:58:43 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002180000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 877.954998][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 877.999872][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.009814][T10180] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 878.013373][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 878.033310][T10180] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.043421][ T2268] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 878.064690][ T2268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.096591][ T4956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 878.101516][T10180] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 878.105660][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.105679][ T4956] usb 3-1: Product: syz [ 878.123019][ T2268] usb 4-1: Product: syz [ 878.167629][ T4956] usb 3-1: Manufacturer: syz [ 878.168607][ T2268] usb 4-1: can't set config #1, error -71 [ 878.172302][ T4956] usb 3-1: SerialNumber: syz [ 878.180643][ T2268] usb 4-1: USB disconnect, device number 126 12:58:44 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 878.256744][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 878.265985][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.273991][T23781] usb 1-1: Product: syz [ 878.278918][ T4956] usb 3-1: can't set config #1, error -71 [ 878.295189][ T4956] usb 3-1: USB disconnect, device number 113 12:58:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 878.318655][T23781] usb 1-1: Manufacturer: syz [ 878.323310][T23781] usb 1-1: SerialNumber: syz [ 878.375787][T10180] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 878.385633][T10180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.388125][ T9884] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 878.419262][T10180] usb 6-1: Product: syz [ 878.426363][T10180] usb 6-1: Manufacturer: syz [ 878.455755][ T4153] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 878.466230][T10180] usb 6-1: can't set config #1, error -71 [ 878.481106][T10180] usb 6-1: USB disconnect, device number 121 [ 878.495796][ T9884] usb 5-1: Using ep0 maxpacket: 32 [ 878.555746][ T4153] usb 2-1: Using ep0 maxpacket: 32 [ 878.561054][ T2268] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 878.645960][T23781] cdc_ncm 1-1:1.0: bind() failure [ 878.654520][ T9884] usb 5-1: unable to get BOS descriptor set [ 878.663812][T23781] cdc_ncm 1-1:1.1: bind() failure [ 878.685756][ T2268] usb 4-1: Using ep0 maxpacket: 32 [ 878.689696][T23781] usb 1-1: USB disconnect, device number 27 [ 878.724674][ T4153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 878.758285][ T9884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.769345][ T4956] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 878.777138][ T9884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.787603][ T9884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 878.797848][ T9884] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 878.808090][ T9884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.808392][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.818132][ T9884] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 878.835580][ T4153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.848595][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 878.859372][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 878.869627][ T4153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.879844][ T4153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 878.885754][ T4956] usb 3-1: Using ep0 maxpacket: 32 [ 878.890518][ T2268] usb 4-1: config 24 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.905918][T10180] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 878.913608][ T2268] usb 4-1: config 24 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.924350][ T2268] usb 4-1: config 24 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 878.936481][ T2268] usb 4-1: config 24 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 878.947473][ T2268] usb 4-1: config 24 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.957873][ T2268] usb 4-1: config 24 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 879.005759][T10180] usb 6-1: Using ep0 maxpacket: 32 [ 879.027376][ T9884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.036443][ T9884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.044424][ T9884] usb 5-1: Product: syz [ 879.051702][ T9884] usb 5-1: Manufacturer: syz [ 879.056708][ T9884] usb 5-1: SerialNumber: syz [ 879.065948][ T4153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.075019][ T4153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.096098][ T4153] usb 2-1: Product: syz [ 879.100289][ T4153] usb 2-1: Manufacturer: syz [ 879.104859][ T4153] usb 2-1: SerialNumber: syz [ 879.116490][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.126306][ T2268] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.137625][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.140308][ T2268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.158789][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.163991][ T2268] usb 4-1: Product: syz [ 879.174791][ T2268] usb 4-1: Manufacturer: syz [ 879.177761][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 879.182549][ T2268] usb 4-1: SerialNumber: syz [ 879.201135][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.206447][T10180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:58:45 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 879.212432][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 879.239669][T10180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.249733][T10180] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.262377][T10180] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 879.292739][T10180] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.305357][ T4153] cdc_ncm 2-1:1.0: bind() failure [ 879.311569][T10180] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 879.336176][ T4153] cdc_ncm 2-1:1.1: bind() failure [ 879.345817][ T9884] cdc_ncm 5-1:1.0: bind() failure [ 879.354671][ T9884] cdc_ncm 5-1:1.1: bind() failure [ 879.369952][ T4153] usb 2-1: USB disconnect, device number 10 [ 879.393001][ T9884] usb 5-1: USB disconnect, device number 29 [ 879.449348][ T4956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.460767][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.475745][ T2268] cdc_ncm 4-1:24.0: bind() failure [ 879.476234][ T4956] usb 3-1: Product: syz [ 879.483973][ T2268] cdc_ncm 4-1:24.1: bind() failure [ 879.485588][ T4956] usb 3-1: Manufacturer: syz [ 879.516007][ T4956] usb 3-1: SerialNumber: syz [ 879.525711][T10180] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.545741][T10180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.553757][T10180] usb 6-1: Product: syz [ 879.585697][T23781] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 879.607262][ T2268] usb 4-1: USB disconnect, device number 127 [ 879.628028][T10180] usb 6-1: Manufacturer: syz [ 879.632642][T10180] usb 6-1: SerialNumber: syz [ 879.695695][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 879.745705][ T4153] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 879.835683][ T4153] usb 2-1: Using ep0 maxpacket: 32 [ 879.835702][ T4956] cdc_ncm 3-1:1.0: bind() failure [ 879.855209][ T4956] cdc_ncm 3-1:1.1: bind() failure [ 879.873488][ T4956] usb 3-1: USB disconnect, device number 114 [ 879.936495][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.947821][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.955709][T10180] cdc_ncm 6-1:1.0: bind() failure [ 879.964431][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 879.979140][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.981953][T10180] cdc_ncm 6-1:1.1: bind() failure [ 879.994911][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 880.008038][T10180] usb 6-1: USB disconnect, device number 122 [ 880.046045][ T4153] usb 2-1: config 1 has an invalid descriptor of length 39, skipping remainder of the config [ 880.057058][ T4153] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 12:58:46 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "bbff1585ea1a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x6, 0x4}, [@acm={0x4, 0x24, 0x2, 0xa}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7f, 0x3, 0xb0, 0x1000, 0x1}, @obex={0x5, 0x24, 0x15, 0xa6f}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x8, 0x7, 0xfd}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x3e, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x4}]}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={r2, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x4}, &(0x7f0000000180)=0x90) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000280)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000640)={0x6e, [0x5, 0x401, 0x7fff], [{0xc5, 0x1d, 0x1, 0x1}, {0x2, 0x9}, {0x9, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x6, 0xffffff81, 0x1, 0x0, 0x1, 0x1}, {0x629, 0x1, 0x0, 0x0, 0x1}, {0xf477, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x9, 0xffff795e, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x0, 0x1}, {0x4c2bcd5c, 0x80000001}, {0x3f, 0xff, 0x0, 0x1, 0x0, 0x1}, {0xfffffff9, 0x7, 0x0, 0x1, 0x1}], 0x7}) [ 880.165670][ T2268] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 880.225695][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.228451][ T4153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.234758][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.256368][ T2268] usb 5-1: Using ep0 maxpacket: 32 [ 880.265706][ T4153] usb 2-1: New USB device strings: Mfr=1, Product=36, SerialNumber=3 [ 880.284099][ T4153] usb 2-1: Product: syz [ 880.294147][ T4153] usb 2-1: Manufacturer: syz [ 880.304688][ T4153] usb 2-1: SerialNumber: syz [ 880.305613][T23781] usb 1-1: can't set config #1, error -71 [ 880.315688][T14691] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 880.330767][T23781] usb 1-1: USB disconnect, device number 28 12:58:46 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0xf5, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x2, 0x1, 0x0, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0xfbff, 0x7f, 0xea, 0x4, 0x3}, @mdlm_detail={0x7b, 0x24, 0x13, 0x8a, "9cb9b3bee0d472c1e91a688ee7cf7a01a1c038f6f2211fc0a35d6c1bc53b7391604d1592839113c61cc3a047ae0864a18712a434499acd24a41ef7e2d1a82984ef0eb10c1161b617212bcdc003b2929c1ac77cf02326953aa5932c4b452099a35594610b996399dd089785373cc094eb8f92365b749932"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x40, &(0x7f00000000c0)={0x5, 0xf, 0x40, 0x3, [@generic={0x1d, 0x10, 0x40a0e447e8f7545, "613d63a601ad2123c7dfc786220743649894196ae316ead5afae"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x2, 0xf000, 0x8, [0xc0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x40, 0xe9e}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200)) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc, 0x100000001, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x440, 0x0) [ 880.357417][ T4153] cdc_ncm 2-1:1.0: skipping garbage [ 880.367993][ T4153] cdc_ncm 2-1:1.0: skipping garbage [ 880.385608][ T2268] usb 5-1: unable to get BOS descriptor set 12:58:46 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 880.406412][ T4153] cdc_ncm 2-1:1.0: bind() failure [ 880.408862][T14691] usb 4-1: Using ep0 maxpacket: 32 [ 880.466292][ T2268] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.488141][ T2268] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.515650][ T2268] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 880.525541][ T2268] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 880.545384][ T2268] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 880.563244][ T2268] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 880.586198][ T4153] cdc_ncm 2-1:1.1: bind() failure [ 880.616347][ T4153] usb 2-1: USB disconnect, device number 11 [ 880.635888][T14691] usb 4-1: config 24 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.657576][T14691] usb 4-1: config 24 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.667598][ T4956] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 880.675913][T14691] usb 4-1: config 24 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 880.688967][T14691] usb 4-1: config 24 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 880.699571][T14691] usb 4-1: config 24 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 880.718551][T23781] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 880.745031][T14691] usb 4-1: config 24 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 880.757532][ T4956] usb 3-1: Using ep0 maxpacket: 32 [ 880.762910][ T17] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 880.766619][ T2268] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.792883][ T2268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.811482][ T2268] usb 5-1: Product: syz [ 880.829488][ T2268] usb 5-1: Manufacturer: syz [ 880.837001][ T2268] usb 5-1: SerialNumber: syz 12:58:46 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000000000000a440000102030109025c000201dd000009040000019c0d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000914010050e100020d00000104010102020d000009058202000000000009050302000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) nanosleep(&(0x7f0000000040), 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) [ 880.965613][ T2268] cdc_ncm 5-1:1.0: bind() failure [ 880.971174][T14691] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.980775][T14691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.982159][ T2268] cdc_ncm 5-1:1.1: bind() failure [ 880.991604][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.010083][T14691] usb 4-1: Product: syz [ 881.014486][T14691] usb 4-1: Manufacturer: syz [ 881.019507][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.033720][T14691] usb 4-1: SerialNumber: syz [ 881.039223][ T2268] usb 5-1: USB disconnect, device number 30 [ 881.039419][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 12:58:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ptrace$setregset(0x4205, r0, 0x4, 0x0) readv(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000900)) sched_setscheduler(r0, 0x5, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1}}], 0x4000000000001ea, 0x0) [ 881.060798][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 881.071326][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 881.082921][T14691] usb 4-1: can't set config #24, error -71 [ 881.101896][T14691] usb 4-1: USB disconnect, device number 2 [ 881.108770][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.120761][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.140804][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.154298][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.165451][ T17] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 881.180371][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 881.199089][ T17] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 881.209717][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 881.235715][ T17] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 881.251576][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 12:58:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ptrace$setregset(0x4205, r0, 0x4, 0x0) readv(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000900)) sched_setscheduler(r0, 0x5, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1}}], 0x4000000000001ea, 0x0) [ 881.297441][ T17] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 881.298492][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 881.335655][ T4956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 881.357359][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.368173][ T4956] usb 3-1: Product: syz [ 881.373024][ T4956] usb 3-1: Manufacturer: syz [ 881.380814][ T4956] usb 3-1: SerialNumber: syz 12:58:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c18f000000000000000020", @ANYRES32=0x0, @ANYBLOB="381554ccf6829ad4154b993a37f235a7d38372b7018e261547b1fdc4c3ec0bb638448294214becd6c1037d166f06aed32c32e2a87bca57156ffd2cc957985225be3e1b8284fef515d6f1218fb052551167705c207ae7fbeb9bf41faa95bd2d14630b06a1045ad223afd37fa1caf0c4a330b1e60add2ce5fd7608fc4ede35e79c95aafa6e67", @ANYBLOB, @ANYRES32=0x0], 0x60}}, 0x0) [ 881.415637][ T2268] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 881.487559][ T3990] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 881.500078][ T3990] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 881.508690][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 881.510353][ T2268] usb 5-1: Invalid ep0 maxpacket: 0 [ 881.518590][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:58:47 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x400151042, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46200) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x8, &(0x7f00000004c0)=0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x1) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) ftruncate(r5, 0x8008200) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) [ 881.537254][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.545392][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.565609][ T17] usb 6-1: Product: syz [ 881.569832][ T17] usb 6-1: Manufacturer: syz [ 881.574425][ T17] usb 6-1: SerialNumber: syz [ 881.579067][T23781] usb 1-1: Product: syz [ 881.583229][T23781] usb 1-1: Manufacturer: syz [ 881.588789][T23781] usb 1-1: SerialNumber: syz [ 881.626732][ T9921] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 881.665678][ T2268] usb 5-1: new high-speed USB device number 32 using dummy_hcd 12:58:47 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2, 0x6031, 0xffffffffffffffff, 0x0) [ 881.677893][ T4956] cdc_ncm 3-1:1.0: bind() failure [ 881.687807][ T4956] cdc_ncm 3-1:1.1: bind() failure [ 881.707134][ T4956] usb 3-1: USB disconnect, device number 115 [ 881.726427][ T9921] usb 2-1: Using ep0 maxpacket: 32 [ 881.765603][ T2268] usb 5-1: Invalid ep0 maxpacket: 0 [ 881.770943][ T2268] usb usb5-port1: attempt power cycle [ 881.856384][ T17] cdc_ncm 6-1:1.0: bind() failure [ 881.867534][ T17] cdc_ncm 6-1:1.1: bind() failure [ 881.878220][ T17] usb 6-1: USB disconnect, device number 123 [ 881.897874][T23781] cdc_ncm 1-1:1.0: bind() failure [ 881.907984][T23781] cdc_ncm 1-1:1.1: bind() failure [ 881.940032][T23781] usb 1-1: USB disconnect, device number 29 [ 881.946203][ T9921] usb 2-1: config 1 has an invalid descriptor of length 39, skipping remainder of the config [ 881.969650][ T9921] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 12:58:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) time(0x0) perf_event_open$cgroup(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000100), &(0x7f0000000180), 0x8) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 882.120951][ T28] audit: type=1804 audit(1589633927.978:14): pid=4029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209899176/syzkaller.wHmSXn/496/bus" dev="sda1" ino=15981 res=1 [ 882.195562][ T9921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.205187][ T9921] usb 2-1: New USB device strings: Mfr=1, Product=36, SerialNumber=3 [ 882.213753][ T9921] usb 2-1: Product: syz [ 882.218713][ T9921] usb 2-1: Manufacturer: syz [ 882.223799][ T9921] usb 2-1: SerialNumber: syz [ 882.232255][ T28] audit: type=1800 audit(1589633928.088:15): pid=4029 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15981 res=0 [ 882.263739][ T28] audit: type=1804 audit(1589633928.118:16): pid=4029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209899176/syzkaller.wHmSXn/496/bus" dev="sda1" ino=15981 res=1 [ 882.287455][ T9921] cdc_ncm 2-1:1.0: skipping garbage 12:58:48 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x7]}, &(0x7f0000000040), 0x8) [ 882.305584][ T9921] cdc_ncm 2-1:1.0: skipping garbage [ 882.311176][ T9921] cdc_ncm 2-1:1.0: bind() failure 12:58:48 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) [ 882.366278][ T9921] cdc_ncm 2-1:1.1: bind() failure [ 882.376264][ T9921] usb 2-1: USB disconnect, device number 12 [ 882.405587][T10180] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 882.506321][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 882.511548][ T2268] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 882.625578][ T4153] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 882.645586][T23781] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 882.705514][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.717354][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.727619][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 882.738332][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 882.748250][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 882.796272][ T2268] usb 5-1: device descriptor read/64, error 18 [ 882.816341][ T9921] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 882.915531][ T4153] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.917006][ T9921] usb 2-1: Using ep0 maxpacket: 32 [ 882.926730][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.940891][ T4153] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.951129][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.960131][ T4153] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 882.966236][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.970868][T10180] usb 3-1: Product: syz [ 882.984898][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.986423][ T4153] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 882.995533][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 883.006704][T10180] usb 3-1: Manufacturer: syz [ 883.018434][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 883.020083][T10180] usb 3-1: SerialNumber: syz [ 883.032709][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 883.035865][ T4153] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 883.044083][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 883.056318][ T4153] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 883.155534][ T9921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.166501][ T9921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.178115][ T9921] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 883.188527][ T9921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 883.199470][ T9921] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 883.209778][ T9921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 883.215537][ T2268] usb 5-1: device descriptor read/64, error 18 [ 883.221039][T23781] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.234688][T23781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.243605][T23781] usb 6-1: Product: syz [ 883.246153][ T4153] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.249133][T23781] usb 6-1: Manufacturer: syz [ 883.259758][ T4153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.262207][T23781] usb 6-1: SerialNumber: syz [ 883.270342][ T4153] usb 1-1: Product: syz [ 883.281240][ T4153] usb 1-1: Manufacturer: syz [ 883.286205][ T4153] usb 1-1: SerialNumber: syz 12:58:49 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$setlease(r0, 0x400, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a460000102030109021c0002010d0000060000000000000000052406000105240000000d240f0100000023000000000006241a0000300905810300000000000904010000020d00000919010102020d0000090582020000000000090503024000030000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 883.338070][T10180] cdc_ncm 3-1:1.0: bind() failure [ 883.345701][ T4153] usb 1-1: can't set config #1, error -71 12:58:49 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80100, 0x192) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) [ 883.385577][ T4153] usb 1-1: USB disconnect, device number 30 [ 883.393143][T10180] cdc_ncm 3-1:1.1: bind() failure [ 883.406355][ T9921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.425417][T10180] usb 3-1: USB disconnect, device number 116 [ 883.444085][ T9921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:58:49 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) [ 883.495425][ T9921] usb 2-1: Product: syz [ 883.499638][ T9921] usb 2-1: Manufacturer: syz [ 883.504288][ T9921] usb 2-1: SerialNumber: syz [ 883.505455][ T2268] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 883.548380][T23781] cdc_ncm 6-1:1.0: bind() failure [ 883.575867][T23781] cdc_ncm 6-1:1.1: bind() failure [ 883.616096][T23781] usb 6-1: USB disconnect, device number 124 [ 883.795435][ T9921] cdc_ncm 2-1:1.0: bind() failure [ 883.804153][ T9921] cdc_ncm 2-1:1.1: bind() failure [ 883.805429][ T2268] usb 5-1: device descriptor read/64, error 18 [ 883.846049][T10180] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 883.853844][ T4153] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 883.881225][ T9921] usb 2-1: USB disconnect, device number 13 12:58:49 executing program 3: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000000c0)=0x80, 0x4) 12:58:49 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 883.955552][ T4153] usb 1-1: Using ep0 maxpacket: 32 [ 883.960872][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 883.987011][T23781] usb 6-1: new high-speed USB device number 125 using dummy_hcd 12:58:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8100fffe07"], 0xd) recvmmsg(r0, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) [ 884.106497][T23781] usb 6-1: Using ep0 maxpacket: 8 12:58:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fstatfs(0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0xaaaaaaaaaaaaab2, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xffffffffffffffff}], 0x80040, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 884.167894][ T4153] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.178918][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.189956][ T4153] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 884.200643][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.211281][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.222881][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 884.234284][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 884.244713][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 884.336285][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.361786][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.394462][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.427000][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 884.427022][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 884.427046][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 884.606963][T23781] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.606983][T23781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.606998][T23781] usb 6-1: Product: syz [ 884.607018][T23781] usb 6-1: Manufacturer: syz [ 884.607033][T23781] usb 6-1: SerialNumber: syz [ 884.987226][T23781] cdc_ncm 6-1:1.0: bind() failure [ 884.993509][T23781] cdc_ncm 6-1:1.1: bind() failure [ 885.031969][T23781] usb 6-1: USB disconnect, device number 125 [ 885.036946][ T4153] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 885.083373][ T2268] usb 5-1: device descriptor read/64, error -71 [ 885.089680][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:58:50 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 885.098876][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.108667][T10180] usb 3-1: Product: syz [ 885.112939][T10180] usb 3-1: Manufacturer: syz [ 885.117605][T10180] usb 3-1: SerialNumber: syz [ 885.122648][ T4153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.131227][ T4153] usb 1-1: Product: syz [ 885.140071][ T4153] usb 1-1: Manufacturer: syz [ 885.144728][ T4153] usb 1-1: SerialNumber: syz [ 885.215431][ T2268] usb usb5-port1: unable to enumerate USB device [ 885.305385][ T5] usb 2-1: new high-speed USB device number 14 using dummy_hcd 12:58:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f0000000340)) [ 885.398405][ T5] usb 2-1: Using ep0 maxpacket: 32 12:58:51 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x301000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 885.436368][ T4153] usb 1-1: USB disconnect, device number 31 12:58:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) time(0x0) r2 = perf_event_open$cgroup(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{r2}, 0x200008000, 0x7, 0x9}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x2, &(0x7f0000000100), &(0x7f0000000180), 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 885.518293][ T5] usb 2-1: device descriptor read/all, error -71 [ 885.545350][T10180] cdc_ncm 3-1:1.0: bind() failure [ 885.565056][T10180] cdc_ncm 3-1:1.1: bind() failure [ 885.591030][T10180] usb 3-1: USB disconnect, device number 117 [ 885.701917][ T28] audit: type=1804 audit(1589633931.559:17): pid=4175 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209899176/syzkaller.wHmSXn/503/bus" dev="sda1" ino=15986 res=1 [ 885.728197][T23781] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 885.825352][T23781] usb 6-1: Using ep0 maxpacket: 8 12:58:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) time(0x0) r2 = perf_event_open$cgroup(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{r2}, 0x200008000, 0x7, 0x9}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x2, &(0x7f0000000100), &(0x7f0000000180), 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 885.895305][ T5] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 885.960367][ T28] audit: type=1804 audit(1589633931.819:18): pid=4181 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209899176/syzkaller.wHmSXn/504/bus" dev="sda1" ino=15986 res=1 [ 886.006020][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 886.035913][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.055336][T23781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.067321][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 886.077329][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 886.087756][T23781] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 886.097655][T23781] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 886.196340][T10180] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 886.246156][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.257225][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.267340][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 886.276021][T23781] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.278379][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 886.290066][T23781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.296683][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 886.304766][ T9921] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 886.309302][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 886.320288][T23781] usb 6-1: Product: syz [ 886.327752][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 886.333204][T23781] usb 6-1: Manufacturer: syz [ 886.348500][T23781] usb 6-1: SerialNumber: syz [ 886.415383][ T9921] usb 3-1: Using ep0 maxpacket: 32 [ 886.495299][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.504507][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.513573][T10180] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.523935][ T5] usb 2-1: Product: syz [ 886.528311][ T5] usb 2-1: Manufacturer: syz [ 886.532914][ T5] usb 2-1: SerialNumber: syz [ 886.545277][T10180] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 886.615271][T23781] cdc_ncm 6-1:1.0: bind() failure [ 886.623041][T23781] cdc_ncm 6-1:1.1: bind() failure [ 886.636172][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.655616][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.666361][T23781] usb 6-1: USB disconnect, device number 126 [ 886.674766][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 886.685876][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 886.696251][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 886.706937][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d763034fd620"}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="052000000003100a"]}) 12:58:52 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x80001) setgroups(0x439f, &(0x7f0000000040)=[0x0, 0x0, 0x0]) 12:58:52 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0xac}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty}}, {0x4, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000014) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x40, 0x81}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="05ef07000101100a"]}) ioctl$RTC_UIE_ON(r0, 0x7003) [ 886.815304][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 886.824504][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.855244][ T5] cdc_ncm 2-1:1.0: bind() failure 12:58:52 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a42f000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="050f080001662bad7eaea6c64042170c898c03100a29e4a98833f54090a453f73876e533edf49ca3853c"]}) io_setup(0xffffffe0, &(0x7f0000000040)=0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x0, &(0x7f00000000c0)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x2, r2}]) [ 886.882446][T10180] usb 1-1: Product: syz [ 886.894726][ T5] cdc_ncm 2-1:1.1: bind() failure [ 886.902046][T10180] usb 1-1: Manufacturer: syz [ 886.924607][ T4214] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 886.934507][ T5] usb 2-1: USB disconnect, device number 15 [ 886.942404][T10180] usb 1-1: can't set config #1, error -71 [ 886.945249][ T9921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.954790][T10180] usb 1-1: USB disconnect, device number 32 [ 886.981009][ T4214] tipc: Enabling of bearer rejected, failed to enable media [ 886.981260][ T9921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.016221][ T9921] usb 3-1: Product: syz 12:58:52 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8a, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1a}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x85, 0x7742, 0x87, 0x81, 0x9, 0x8}, @acm={0x4, 0x24, 0x2, 0x3}, @obex={0x5, 0x24, 0x15, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x80}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x0, 0xd, 0x200}]}}) [ 887.065248][ T9921] usb 3-1: can't set config #1, error -71 [ 887.073417][ T9921] usb 3-1: USB disconnect, device number 118 12:58:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'user:', 0x20, 0x3c}, 0x32, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 887.259701][ T4241] encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 887.265224][ T4153] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 887.318083][ T4243] encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 887.355227][T10180] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 887.405886][ T4153] usb 6-1: Using ep0 maxpacket: 32 12:58:53 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000280)={0x20000000, 0x795c586e, 0x28}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3b59794c70eb9a0}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100026bd7000fedbdf2506000000080005001a0800000800060008000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x24000000) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42800) readv(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/55, 0x37}], 0x3) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c000201e400000904000001020d0000053406000105240000000d240f0100000000000004000004241a00003109058103000000fc000904010000020d00000904010102020d0000090582020000000000090503020000000000"], &(0x7f0000000580)={0x0, 0x0, 0xfb, &(0x7f0000000440)={0x5, 0xf, 0xfb, 0x1, [@generic={0xf6, 0x10, 0xa, "e9f7323a258d58c8119459520802e911f5fe9b3f6c7b567f46f2b451d97698fd96b3bd7f8d52524427b353a25c8c327d76db02dd33d2d18f88552742c1e4ac46dd486a61625665ead20abe1473a5292f1b7b620166f856e17255eadc47280a8227f17c807fc94599014ea2cd525e7f9a366eb354c23a84e998681b5aeeb8120ce412369252c9f8d2d4c90d17a28fab3926cec4abdd05a289a0149fb109f19a729d4ee6600d79e245904a9264de4e23d1edbc7e5b562ffaa47ba0f7b392371a02bb325cde62ff8999c973f86ce54a84b4477965ce37bed23012bc2cb219bb696570c99557b7dfdf61efdeb0cc017470d02c4734"}]}, 0x0, [{0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x180a}}, {0x0, &(0x7f0000000540)=@lang_id={0x0, 0x3, 0x447}}]}) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000200)) prctl$PR_SET_DUMPABLE(0x4, 0x2) 12:58:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8100fffe07"], 0xd) recvmmsg(r0, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffd49, 0x0}}], 0x400000000000251, 0x22, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 887.465835][T10180] usb 1-1: Using ep0 maxpacket: 32 [ 887.467398][ T9921] usb 3-1: new high-speed USB device number 119 using dummy_hcd 12:58:53 executing program 3: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="dd214f74646f1d5da40e52", 0xb}, {&(0x7f00000000c0)="7fd320615d22a1fc9ba9589850406b946f23af9f043b68a46ccfed1bf3d166c912b76e7827df151521", 0x29}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x138}}], 0x2, 0x0) [ 887.566675][ T4153] usb 6-1: unable to get BOS descriptor or descriptor too short [ 887.568314][ T9921] usb 3-1: Using ep0 maxpacket: 32 [ 887.597774][T23781] usb 5-1: new high-speed USB device number 35 using dummy_hcd 12:58:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) r3 = dup2(r1, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(r0, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 887.626350][T10180] usb 1-1: unable to get BOS descriptor or descriptor too short [ 887.655979][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.697397][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.708121][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.708859][T23781] usb 5-1: Using ep0 maxpacket: 16 [ 887.752307][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.762776][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 887.773267][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 887.783616][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 887.794042][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 887.804409][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 887.815540][T10180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 887.818496][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.825888][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 887.846240][T10180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 887.853317][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.865906][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 887.877732][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 887.888275][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 887.900324][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 887.965237][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.982105][T23781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.993027][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 888.005187][ T5] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 888.008450][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 888.015374][T10180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 888.025791][T23781] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 888.031749][ T4153] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 888.044907][T23781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 888.050641][T10180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.068334][ T4153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.077054][ T4153] usb 6-1: Product: syz [ 888.081928][ T4153] usb 6-1: Manufacturer: syz [ 888.087719][T10180] usb 1-1: Product: syz [ 888.106500][ T4153] usb 6-1: SerialNumber: syz [ 888.118856][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 888.125230][ T9921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.2f [ 888.140147][ T9921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.148801][T10180] usb 1-1: Manufacturer: syz [ 888.150241][ T9921] usb 3-1: Product: syz [ 888.153401][T10180] usb 1-1: SerialNumber: syz [ 888.168622][ T9921] usb 3-1: Manufacturer: syz [ 888.174431][ T9921] usb 3-1: SerialNumber: syz [ 888.268457][T23781] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 888.282319][T23781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.302822][T23781] usb 5-1: Product: syz [ 888.314776][T23781] usb 5-1: Manufacturer: syz [ 888.325467][T23781] usb 5-1: SerialNumber: syz [ 888.415207][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.455011][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 888.465311][ T9921] cdc_ncm 3-1:1.0: bind() failure [ 888.466576][ T4153] cdc_ncm 6-1:1.0: bind() failure [ 888.474241][ T9921] cdc_ncm 3-1:1.1: bind() failure [ 888.475854][T10180] cdc_ncm 1-1:1.0: bind() failure [ 888.503134][ T4153] cdc_ncm 6-1:1.1: bind() failure [ 888.512603][T10180] cdc_ncm 1-1:1.1: bind() failure [ 888.515933][ T9921] usb 3-1: USB disconnect, device number 119 [ 888.518527][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.548654][ T4153] usb 6-1: USB disconnect, device number 127 [ 888.565898][T10180] usb 1-1: USB disconnect, device number 33 [ 888.625153][T23781] cdc_ncm 5-1:1.0: bind() failure [ 888.648118][T23781] cdc_ncm 5-1:1.1: bind() failure [ 888.724303][T23781] usb 5-1: USB disconnect, device number 35 [ 888.855141][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 888.882633][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.898996][ T5] usb 2-1: Product: syz [ 888.903465][ T5] usb 2-1: Manufacturer: syz [ 888.908525][ T5] usb 2-1: SerialNumber: syz [ 888.945687][ T4222] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 888.981728][ T4222] tipc: Enabling of bearer rejected, failed to enable media 12:58:54 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) recvfrom$llc(r0, &(0x7f0000000280)=""/250, 0xfa, 0x22, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9, 0x43, 0x7f, @dev={[], 0x33}}, 0x10) [ 889.215107][ T9921] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 889.256393][ T5] cdc_ncm 2-1:1.0: skipping garbage [ 889.261707][ T5] cdc_ncm 2-1:1.0: bind() failure [ 889.285408][T23781] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 889.305220][ T4153] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 889.315381][ T5] usb 2-1: USB disconnect, device number 16 [ 889.325966][ T9921] usb 3-1: Using ep0 maxpacket: 32 [ 889.386731][T23781] usb 1-1: Using ep0 maxpacket: 32 [ 889.398319][ T4153] usb 6-1: Using ep0 maxpacket: 32 [ 889.485831][T10180] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 889.537437][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.555110][T23781] usb 1-1: unable to get BOS descriptor or descriptor too short [ 889.562811][ T9921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.575887][ T4153] usb 6-1: unable to get BOS descriptor or descriptor too short [ 889.585052][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.594798][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 889.606811][T10180] usb 5-1: Using ep0 maxpacket: 32 [ 889.625120][ T9921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 889.638056][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.649068][ T9921] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 889.659839][T23781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.670538][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.681034][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 889.687856][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.693187][T23781] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 889.712829][T23781] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 889.717948][ T4153] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.755914][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.774281][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 889.784958][ T4153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 889.798538][ T4153] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 889.825867][ T9921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.2f [ 889.835245][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.845111][ T9921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.850391][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.864460][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.865189][ T9921] usb 3-1: Product: syz [ 889.878073][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 889.891145][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 12:58:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) time(0x0) r2 = perf_event_open$cgroup(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{r2}, 0x0, 0x7, 0x9}) open(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x2, &(0x7f0000000100), &(0x7f0000000180), 0x8) io_submit(0x0, 0x0, 0x0) [ 889.901990][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 889.913090][ T9921] usb 3-1: Manufacturer: syz [ 889.935074][T23781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.944146][T23781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:58:55 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 889.965123][ T9921] usb 3-1: SerialNumber: syz [ 889.983582][T23781] usb 1-1: Product: syz [ 889.987847][ C1] raw-gadget gadget: ignoring, device is not running [ 889.995612][ T9921] usb 3-1: can't set config #1, error -32 12:58:55 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000080)="7d849ad959542a56b3538844d9cdf75b7c89bc525e393bfe3aed469a78923938658e2dda61f3c0263a44c79660782b8fe1eab72482bd6c482e902dee075d02450b45", 0x42}, {&(0x7f0000000100)="1794c4c9bab9cf54ded7701075b982531541aee2756b1ad1c0228d1237f64646dcac0cba915303433845e9d7114bc111b820c7b6de3ad5470c38eb8c74a135157aeb4295fb0953ccbc24927558b897664a8e29", 0x53}, {&(0x7f0000000180)="bcc7be4dc6cacc1e87eb6de31b7678f385e636f4cc3b58d26a9dac4488282f6db058a05a5bb991ac10b6bc900565fa371955582eb2d3ff5403aede14335274d1d0df754e45ae66d86e92fd0d0edb6cc2b4273a974da4dea19c609b8fdc057fbf1c62e7d60b5598989e6094712a503cbcf36c48f905f92ba626ed60cc08c3d5f383ada76736c1ee7ce3f3e3a9db502140c41a5918a24db1c62c077d8be4720a0792250d2e96b9c23464514508f7bff9bedde7153981ba685b2cdb48e9eba08b8e22be9770bfc759667e1d21c60641a18e5a8fc215c3c02458a6d2999749605f1d301512dc26b3199932eca1", 0xeb}, {&(0x7f0000000280)="03bfbb798230e9834af00d3dfacb885afb14a90c52af99c5c956a371d37566f641427fb592d48a709e54d3cdf3a944407adaad4014e53ed3b2d4da6636bc8afbe58a7fec66bbfb40fa21f523491d9795e97ef146204e02b61d12ee3ecf80c47f12c68df36caeb3bbe9a97bbdf2d7966d3020ab4063b6a35a249f415830a4247b63fa009ad18cb29d4524427095bf7e8d749676d362ecc2fc7e5f7787a206efa8ecb2e6d791", 0xa5}, {&(0x7f0000000340)="72c35a3419a0a980bc16b8782a8737fcb3e5c1cd8a701b928c4b364d52f10f7965b9cf1035db1c7c53d913636457b7055542b481069f9c3e29cf67f0b6f3ec4883abc4b7592001f4873b07ecc8fa7b51edffba9a93c0d18e27f57da940a2bd116a3d1bf059e92dfcd2f2c7187cc73c2e623c4325d2bf944313cb6887e4c3bf0e7f4ba9b9b28258dc625c1340d81fe7c267e49baf790064d6947e1de586fdbc4f1e73e69286fd736936bad28b2551486fe130366f0f8cb2939e3c4aae6bb3c45a6fb47939cdf8d8d66bcf8e4c40327980da7094e8a00e4d0f61b606e13430f2fb2d8e3dee9db9cc53e81452a1f52c46434955dafe009b2579c58deccf0214c0c150810d559bd559647abc925b26d73d85ede1565841277b1642713ef30f772c169e4f465d5d66759b51a9ad1e235e46a711031a6481602c593947455c5d6950e2ac7b2f154d0e637131ad7d0e57ecb5dbc5679fa761347123354c5660056a472c181a0638267732dc95ba1a8bd7d75c7f45cf8f60f951a926bbb0d9dc52fd82a5898f178c0ebe6020d1358900f8a38a1875fd69cb80b9c3f96bbcebd6569bdf0c1b0eb63447c361c3f4c49430c1adb1d6e951608891f3a27728f23454bc0ed5925fef6e313a97e7aea747499d5d04788db013254dae34ee1918eb842021cba317d4ae3d8892e54fc8e90ff71bc67203a4d007f573aa28b5b2de6800b85cf06c41653f79241b98300ef7b7d40c1d04cbddd43fc0dcd65f556b2b07affe0ada93262f689e492fd895ac36eeb1a2aab3d150b5e0a7760181e2d99552447eaad6fc8ccb5374b02400eda0f0af1ba8481f65ce422403d21b3db7502418840f9d7701279f209bb9480bb42d3aeec480e83c67fa11dae891a9420abf27cc076d7de650c13915dfc53c15cdfd00ce143d340903d8e73e101e2cabfd89f0392540f4e5ec0ec439b5c2ec82ae4a3572a9b4d1d1eccd0bd5a84af4185188b9726dd5d27ebf1c130441b972bff07569ef0ab01cf83d37cfa31440f0cfdafa7910cf2d611d13f7d95acdd8cf061050762c2b5d40088d0afc6f5eb789f6bce44606f47d1983c22118b79a7c711e91ec6cb1f3260aa55f4e719bae88b0ce2bcf4b42653fbfe25f3b914e788dd5ae36c03ab954f030845a6e96c3513f577de7f7623dcfe5d29dafffdff2ce4430ced5cbede8f339abf11945e2a551744b497ab32edc7e1ebc09e1b6504f799ea874a2310db673abe6dbfdef09f578dde0c322f79e78e2d3f71552054a583745f81fdd5c68d5ea2bccc48e61c4537a6125696f0745452b71a784ecb05317535e2c901d2e366d487d2da9c0b17664e117f75da5e3978cd2ae1f18fd04e8120ecfc127f5e743d4fe45ac2efe04eba3653a0b1ce6ab2543cc5dae9e9dc6c7e73023fe50efac300311c7d1ec3588f543254d9192007b0d610381f82014a918b3a4a57beabab0a8da37b62bca59ab7279402c6f1495badea005b035df37bf3ddfcde920987cd21694e0c2443870104eb79b26c1c4c84facbfda76bcd39b2f1cd44ce425a745d00659589657d5417f06d566796ce580b433eea1502a17327e855cca6d0d7c57716b02e99c2388e6b6f5102c50fefee0ce39bdb57e857a012c57a83ea8b5766f58e54f1a8c87c96607e5f1cf39c7daf873aeac549501c8505ab539049e61130a5fb661ed74910d532fd456ea6f9ce3e14246bb7de5f42ed160d2111d2922ab8adfd25b0cbbea86130fded0a3b711cce61cb34b417b2cfcf0371aca68a250d91ae67a3a810067b2768504d8055dcffcdadfe5554305acbdfbfac2aa0611cf3fdd36edb615d453e5ed1f7ec1fd98becc73732216b00a35eae66db0b433b3ec5f89ffaae95121a8721707635220beb9fb92f5e3e5c141e0572f496a1c8f6a2dd2143e7bd71c1a7e49de989f7a8cd5dae28b8cd7fad7711a1af75a37a151d797fed1ed652715abf58965a41a33e57b3b384ba2b4d042a97e83c378046d9d01ff34be1b878eade602e0e898f0a9e896259c6dd296b535ed2936c846fab336ff089da6e65ba2e5ff861b0e330006ad4fe8dcc6383b357faa7d73c3a37f4ef592e33f15eef9ba6763c1f21ddb564aeefeec45a22958b42f04d03c8b5e6716169bd6ef284ef19e760e3fbb5eb58b952b8e0bbfe05f2ca5ab28855462ca9d573731eded2a114d2dd370af6d6f715ea3c2fd6e752374c2c06434ed50ead6318d90bfbfb3b4b647215c5c3933efd21116ef3ecfd20aaf42764600bf4638deee93761f0fa9a7c2f8f4ad922d16e0248d8f6921fd2e4d22a07e59143a93f2f74b431f07bf959234660eb1033c74c66ad378cdc0ec2cb8b08e6bd74a8b2d49a383e71d0513b70b6137949386e1ee93122f9f945fc5c8836ada610469ba9e0f046d3c8d0e3e6a6c742cef4c8dc26bb6cf1b602da3e58951d9d5fdf20f17b99a938fca74bbcc3f4e323b25d1a3326329b9b4ab9ef390c40d4eabae39ecddc21e758394f2a3745c9d88797341b6ce3644704f3650dd76ce62d7fa463477d6901513ee90338da1151e97c019193d35d983362187c6d315cf2f71cdca13c89f80ce41827ccce5a9f955f6d0ce7b4ebb0160c9a6d544a28ba5cf6801899c8858296b0a9c79b94017eab984e9c477adb236cc3db7f3f1451be9898c183cfa5a502810a2cf93a13960da643ad8b653acfa28b371b849dcddd43209b54b1618e6ed23e2771e062bb920752c6299df8c7fbca234acf6a4a5d600a5adee47f8d573de1138fd2ebe0ac231da06ff42f67b83b39837af7ef91168f0caf6446f036166a7b9c6ed706c38c4a1b776b700eaa9e8997c5db4c77445aff317e202027dce5026f6db2e2752ad9e274fdf95dd59953cccc65b0e1f6c2b1740e22e343dae606bec977c3f248536587b1db5be7ae045ba93e4c415199cdf1c6a684e5acc40c496b0f97d0284161aaa132abd282c342ed4babd5b248c707ab92a4c23aeaaffd34b8b465fc8e0bd711b91b4f4c1067797dc43b6def79fc808c5fff749e52a95edfd0114006995ee24de3246fbd6b9ecaca9c8bf9a6f45919110af844f26fa3ceb40fde4fee5fe49089b9088e850d6a7735119ddf5f38e0e45fb8c2b256ed9e0e04cc6f58122406cc3b47fa868a6e3f58b0389be35c68d98df07f07ffca77e9c0bb616a68f83f29e00d0fe82fe5d5220079ddb6e239a663e2d24f15a670422d8343415e220e19ce47a5867ff7919969604af3eb9090acebbb17366abbab9f7e1c34fdbdccac84bad7a6982ad565a238a3b22d7a36698a051291be1ccf78abb6df05c742d7853e08e57ab5cb89a89809ee4f7fadab231ae230aaa6f207969d766200c97d932dfb97e14ee15c7d49c21ecb6a182d0b7aefe309ae8eaf48cee073aef6e6d59c9cc87d356a9da1e8f0aff43d223d6854b21f15cc23aae61b8c8a1cdb44b2a96011ceb12763a0a047a1ff5768ba6415dada5bb43ec944160f1e9da732fcb7a85e7926d474e5ce545b00f33518e92839232381631b1de9e083481e2dd4fdc2c9a60055a2fd240e255bad55dd14906deca1848cccf7cd402073849746b06f4c0bde542a191f74d9a1dbd00e4af57f0d74a8f168542ba7bfe15eec1126c0ae2c177b738c9d87ee34e6daafdb0736477e7138c49c15c166a3379f1c55e84f1e3dc9e91d704d816cad35884f77464558ad9d1e13fc8253e4ac33eba9d074eee0aeed608da845cc131fa4eb657c26ca3edd2f2e7524be49655d143fb124b8158a338fe10dc34358915059fb207cf4df58253316fe36967efc01229795b4bc3da821c5487cf380b07d5656b8ae4fcd0a16f0886bb8d8d66cba0862db2251fc9c117eca0258d622c5e7d493522f76172507382597c865b750c4e532f2bdaa4204e90a684fcc8273b10e42499dfee6d8e87189bc60aa697eb3f81c5327cb511481146eaddaf1791d56a0d5deb570ff0e7bc20d2b6b07350e68c8379c08c96e1c4fc1ee6586dcf8348f73a2366bbd1b69e6f93a0f63d45d1a8e06f624b142999bc297b1d77967ee8c22d14ed32d643e56521cc510038f71532fd07253a5da6cfa8996b6dfab27e23437ea54a3c5850330bfe2dc4f7e1d69636cf28ddb408ad3885bb7eca9dba32ffc54e1902279e1f9c87a42f469f96b02e5d516be2fc296e74c0a969afcb854f72c0134b78adb2f9fa2fbad45dcf8536f342b576f6dfd4624b1ddd38483b65740ca254e0685bcad412d56b43e8a44f24befd154872d624293250e0bdcc4c260459b21fe76de23a2a1d76432515f1a5ed24e975be45dc6181bb22dab1ae9ce2f5b80d2649853f51722b9dee52a498826a5a7d6aab6e4ed5328320b337a6b9481ebb9f4271c929cfbfe76f567fb1199183003427954358e79eaf067a9b2e01fc9774a3e9c2c41c2072fae2c2074536bf634e6497301b267c4bafec5ae28a3643da880c809725e23b4156279970b5fc1137c0debe7cbb38fd6abd3dedbfa57b30aaaf14191e9588b1b9209dfca39156e67c8f16308292f3ecfca38e6a81cdd7769b88442824c367f49dd3c94a833b910a4e75b00bd68a334bba48e93aa9aa65a90992b574b0c5ac3697cfee0baf2a2f8eb159a3f72524646d16556a79a442f880835a47131ae725ddf37728d333ef3c308f6b48723210e63e85eef8f960799dc1def92bbfda29d0c15e515c91e2376a2a705b84aeac773865713becb4dbf3ca26e497b9fbb4e1904636a4d3943591233fa493c8ed96a0f40373e036fffd03aee1b9be10184c2f2246552d361e166238a89383b325aef441d132ba0c29ade4f44d5139b872f41b73356c326b0d2c993baa93c01590f958b1791c0652467fc922cb9480b818e1e3770ab4082dd18eb6e2c002538f837c69aab14a7549181a1a28d5ce3ebc2a1db46936d262c55abc8106cf8bcd864b4e5f200ec4466c34b77dee102d91f3565512e2847fc54616fea08b3c403f62dd5164cd5a6e1c8a6cd64de5628e77a7bcf94dc2830a9dfa9abf43d9a8aee1abb3f517119351b4219283fe758ba2507f94ebdfc3e039b5a9cd5630ffd3b421afa2b5b9fe330c7c2f95d91e9cde3612b0641707410c7747a6309c8042efe4e1ac016e8b05ba798784916082b7279956b3af5a79da1f21ea245c14efa99c06a233ce5e2891a3027707e8cdb3442e61a1a9fdaaed46b3fccfa95ece45675fa8cfa364e043f0a5b88de6a3b3e6e2596633038659222771618b5dd2f7985ba5ccc8a74e5c39ca15b9ba83c8ff8fb27a35a53c514898891cab2d37515d50d98b2333d6ec454330b4e6bfbca7e5f3c4e057984e1d70309b6264ece0ddeab48e26d10c4f70118e104c41bcb206bb7ad136eb54598072da16867a0c192efe2c3362f1a4a72a4fec3abf2698087c6897ba7431f30ad0765d0caf671bffa4ce1509c300525b551e1f2a7d2822ef5277bcda09666a955f6762ef9502fb87dec008ac4e37d909d6897b755862e1c04b729500c64a2cf5c7e99368f931a25bb8809cb24793e2c9e5c041b8600e1ae485d5b1b0889532610df82feaeff55f08ea1f37ddb58ae54f5674e353b8efe9848452996c4cf761cb5845708a27498b211c35d62586ed2e209a274e269b51978b5bd5a57a1463dce1f37d7e802042f0d8992b383846fee8cbea46896abbd6b757e436529e2bc4dca5cb07b8799de751cce941209d58a16d28477522a9b769b6325fa70c8023a6892531538898c4556e8e41bc9e3bd3897bd8d5ea1c8b61fcc4243448260202a1aecec5deb9230c21ecf3c4fd6e674542b73e582f976bd1f5d450b722bc253655", 0x1000}, {&(0x7f0000001340)="6800a3a9426f39eef303f91a49c847e7c335bc5eb28d685d2ca56b3ac5df9603244bff7ff55c7c808e4b3dafa8f6dfebdffb27baad5234deb6f52854971276b5c58321f215b7e73bb5d58565a944d417c7f762f76c24f4e109bc1613c73a4a665eb6efcaff961920049489512da36339e34b2a03aece1c829eecfebfdca1dd7b13026e488675f39f4a7f4180b697ab3f1c0f2282974ad8a64d706699e7a7e576d88d3d678b8016262a9db246fa6840850e", 0xb1}, {&(0x7f0000001400)="2bcef580cf2379038ca4f3826a9d930a43c7882af802b14ceb4ed7816b1d9d527ed9378ed16f197079c5cd216e7439378e", 0x31}, {&(0x7f0000001440)="8422b12536779a13090f6d09cbde93d8b7c24fbfdd90d5af89cafacfbdd5b23a6bb1e2f643a564b93f794de466f575f568c53ae46fa349bac1dabc376accbb668a5f085dde6c09e5ef5e0a2618fed8e41848bf6ea2b3c65648ecaa8ed6acf702f4bfb929a6f36894d4f0004a14050a5ff88fdeebcf3ea33b7ab78d64f2f403b4eab5", 0x82}, {&(0x7f0000001500)="d111d3e2d30e51acc0e18cb5055bd37d226b4dcc4c445ca609869d1f513492a1a5879dbccc637c626afac951fb07d7b218a5a36f07ff18e19f34f8de2a25f07f36fe5a592b452c510f0569bf96e9a9a7c5c086f6981fa7bd4cea2a57f5a96732ac3e1bd09138e4a2cf225ed072161528cd425500eb3de042577362c609b5175944af13aad92f10efe6184cd5224d7602db42a2cc82ad555b98c7d5f8551bf02c06d84bd133826386f0355946ebd4898068d6b742d83da353f5363294a499c360487833d74d3bb8fb8f00048d8c62a90bac31e89e136b2c120bc2d6527f8e0225e10cf6eeb3bda06326631abf", 0xec}, {&(0x7f0000001600)="1d4fa5d094779a43b94ef3fe62f1", 0xe}], 0xa, &(0x7f0000001700)=[{0x68, 0x105, 0x480, "f0cf2d82d5351fe15304ae28416fd7f3b503c95d0d4a48f307f2aedae83d9347a5cca4175b4c21debe78344aa6b09ed761b01b87306c9ad1ff6b3dd6803db5f43ded2bc99d5c1049f645c26a3009fd49e7174d0bfe"}], 0x68}, 0x4) [ 890.018061][T23781] usb 1-1: Manufacturer: syz [ 890.033856][ T4956] usb 3-1: USB disconnect, device number 120 [ 890.045983][T23781] usb 1-1: can't set config #1, error -71 [ 890.069303][T23781] usb 1-1: USB disconnect, device number 34 [ 890.105352][ T4153] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.121680][ T4153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:58:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x80, 0xc0c0c0c0}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/189, 0xbd}], 0x1) r5 = dup3(r2, r1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) [ 890.165158][T10180] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.175281][ T4153] usb 6-1: can't set config #1, error -71 [ 890.184802][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.185058][ T9921] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 890.196472][ T4153] usb 6-1: USB disconnect, device number 2 [ 890.226731][ T28] audit: type=1800 audit(1589633936.089:19): pid=4350 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15937 res=0 [ 890.230738][T10180] usb 5-1: Product: syz [ 890.286173][T10180] usb 5-1: Manufacturer: syz [ 890.297747][T10180] usb 5-1: SerialNumber: syz [ 890.335801][ T9921] usb 2-1: Using ep0 maxpacket: 32 12:58:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) time(0x0) r2 = perf_event_open$cgroup(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{r2}, 0x0, 0x7, 0x9}) open(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x2, &(0x7f0000000100), &(0x7f0000000180), 0x8) io_submit(0x0, 0x0, 0x0) 12:58:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) r3 = dup2(r1, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(r0, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 890.507242][ T4956] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 890.535834][ T9921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.575162][T10180] cdc_ncm 5-1:1.0: bind() failure [ 890.582767][ T9921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 890.596070][ T4956] usb 3-1: Using ep0 maxpacket: 32 [ 890.605031][T10180] cdc_ncm 5-1:1.1: bind() failure [ 890.613026][ T9921] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 12:58:56 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x10}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) [ 890.659977][T10180] usb 5-1: USB disconnect, device number 36 [ 890.714999][ T9921] usb 2-1: string descriptor 0 read error: -71 [ 890.721232][ T9921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.735005][ T9921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.755090][ T9921] usb 2-1: can't set config #1, error -71 [ 890.775042][ T9921] usb 2-1: USB disconnect, device number 17 [ 890.805713][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:58:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) dup2(r2, r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r3 = dup2(r0, r0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) preadv(r3, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) [ 890.821152][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.844997][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 890.862677][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 890.885501][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 890.917259][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:58:56 executing program 0: r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000001200)='keyring\x00', &(0x7f0000001140)={'syz', 0x2}, 0x0) keyctl$setperm(0x5, r0, 0x80001) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x439f, &(0x7f0000000040)=[0x0, 0x0, 0x0]) [ 891.105849][ T4956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.132879][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:58:57 executing program 5: syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 891.164978][ T9921] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 891.179714][ T4956] usb 3-1: Product: syz [ 891.205996][ T4956] usb 3-1: Manufacturer: syz [ 891.225064][ T4956] usb 3-1: SerialNumber: syz 12:58:57 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004680)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000480)=""/177, 0xb1}, 0x3f}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/225, 0xe1}], 0x2, &(0x7f00000009c0)=""/179, 0xb3}, 0xc40}], 0x2, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x3f}, 0x0, 0x0, 0x401, 0x9, 0x1, 0x8, 0x3, 0x2, 0xf453, 0x19f5, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 891.384989][ T49] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 891.417186][ T9921] usb 2-1: Invalid ep0 maxpacket: 16 [ 891.478411][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 891.515086][ T4956] cdc_ncm 3-1:1.0: bind() failure [ 891.546015][ T4956] cdc_ncm 3-1:1.1: bind() failure [ 891.565311][ T9921] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 891.598716][ T4956] usb 3-1: USB disconnect, device number 121 [ 891.677864][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.706550][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.730942][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 891.757044][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 891.782361][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 891.807101][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 891.819538][ T9921] usb 2-1: Invalid ep0 maxpacket: 16 [ 891.825926][ T9921] usb usb2-port1: attempt power cycle [ 892.005705][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 892.014763][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.099202][ T49] usb 5-1: Product: syz [ 892.124471][ T49] usb 5-1: Manufacturer: syz [ 892.154070][ T49] usb 5-1: SerialNumber: syz 12:58:58 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0xffffffffffffffa9, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) 12:58:58 executing program 5: socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 892.224929][ T49] usb 5-1: can't set config #1, error -71 [ 892.245979][ T49] usb 5-1: USB disconnect, device number 37 [ 892.337568][ T4956] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 892.445755][ T4956] usb 3-1: Using ep0 maxpacket: 32 [ 892.544940][ T9921] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 892.647293][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.658611][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.672442][ T9921] usb 2-1: Invalid ep0 maxpacket: 16 [ 892.677895][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 892.691148][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 892.701456][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 892.713998][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 892.727772][ T49] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 892.826001][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 892.831208][ T9921] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 892.875908][ T4956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 892.890428][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.899780][ T4956] usb 3-1: Product: syz [ 892.904125][ T4956] usb 3-1: Manufacturer: syz [ 892.914954][ T4956] usb 3-1: SerialNumber: syz [ 892.925897][ T9921] usb 2-1: Invalid ep0 maxpacket: 16 [ 892.931364][ T9921] usb usb2-port1: unable to enumerate USB device [ 893.065890][ T49] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 893.073846][ T49] usb 5-1: can't read configurations, error -22 12:58:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x2, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) 12:58:59 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0x2) readv(0xffffffffffffffff, 0x0, 0x0) [ 893.154930][ T4956] cdc_ncm 3-1:1.0: bind() failure [ 893.180459][ T4956] cdc_ncm 3-1:1.1: bind() failure [ 893.189771][ T4509] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 893.227742][ T4956] usb 3-1: USB disconnect, device number 122 [ 893.244866][ T49] usb 5-1: new high-speed USB device number 39 using dummy_hcd 12:58:59 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) 12:58:59 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) getpeername$packet(r0, &(0x7f0000004440)={0x11, 0x0, 0x0}, &(0x7f0000004480)=0x14) sendto$packet(r0, &(0x7f0000000200)="b14d78e9", 0x4, 0x0, &(0x7f00000044c0)={0x11, 0x16, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 893.346278][ T49] usb 5-1: Using ep0 maxpacket: 32 12:58:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = epoll_create(0x7fffffff) epoll_pwait(r1, &(0x7f0000000bc0)=[{}], 0x1, 0x90000200, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1) tkill(r0, 0x12) [ 893.595176][ T49] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 893.612019][ T49] usb 5-1: can't read configurations, error -22 [ 893.629196][ T49] usb usb5-port1: attempt power cycle [ 893.645202][ T4534] ptrace attach of "/root/syz-executor.3"[4533] was attempted by "/root/syz-executor.3"[4534] 12:58:59 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) socket$nl_route(0x10, 0x3, 0x0) 12:58:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x2, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) 12:58:59 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) [ 893.734826][ T4956] usb 3-1: new high-speed USB device number 123 using dummy_hcd 12:58:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) 12:58:59 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="328ca428a42a476d5556436a219024843f86b41acdd72794cc089c6bec08b4f9d0daef8c06aecec78fdb829cfc91cc338f72effabc6a071d891ae583b3be63987e1bf1708a99fdf12229dbbc35a7f34f8807aede7e1b8c", 0x57, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x800, @mcast1, 0x1}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local, 0x7d, r2}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x4800) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x6, @random="f89aadcfaa49"}, 0x10) sendfile(r0, r1, 0x0, 0x320f) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)}], 0x1) [ 893.875570][ T4956] usb 3-1: Using ep0 maxpacket: 32 [ 894.075661][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.089432][ T4956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.100693][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 894.111385][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 894.122841][ T4956] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 894.133613][ T4956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 894.148062][ T9921] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 894.255659][ T9921] usb 2-1: Using ep0 maxpacket: 32 [ 894.334818][ T4956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.344992][ T49] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 894.355113][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.363289][ T4956] usb 3-1: Product: syz [ 894.368914][ T4956] usb 3-1: Manufacturer: syz [ 894.373834][ T4956] usb 3-1: SerialNumber: syz [ 894.464835][ T9921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.477880][ T9921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.488849][ T9921] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 894.500744][ T9921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 894.510829][ T9921] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 894.522960][ T9921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 894.594814][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 894.654801][ T4956] cdc_ncm 3-1:1.0: bind() failure [ 894.662863][ T4956] cdc_ncm 3-1:1.1: bind() failure [ 894.684781][ T9921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.693869][ T9921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.716227][ T4956] usb 3-1: USB disconnect, device number 123 [ 894.733807][ T9921] usb 2-1: Product: syz [ 894.739399][ T9921] usb 2-1: Manufacturer: syz [ 894.744117][ T9921] usb 2-1: SerialNumber: syz [ 894.834827][ T49] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 894.842986][ T49] usb 5-1: can't read configurations, error -22 [ 894.994753][ T49] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 895.024788][ T9921] cdc_ncm 2-1:1.0: bind() failure [ 895.033869][ T9921] cdc_ncm 2-1:1.1: bind() failure [ 895.065540][ T9921] usb 2-1: USB disconnect, device number 22 [ 895.244740][ T49] usb 5-1: Using ep0 maxpacket: 32 12:59:01 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x88, r1, 0x700, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3c7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe0e1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe9}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3f, 0xff}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x4c, &(0x7f0000000000)={0x5, 0xf, 0x4c, 0x1, [@generic={0x47, 0x10, 0xa, "dd34864bf905cf046ec004c50df30f6b2ee4608789b234b1b4cbd0a4c1eb8da528842cf5ef7b18f92f348021701d2334e85cec46bb742312470000b8fd338f9c94e7aa77"}]}}) 12:59:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000a900081044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000000000e6ff0001013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000004ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r4, @ANYBLOB="0000000bf1fffffffffffff00800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001bc0)={'batadv0\x00', r4}) 12:59:01 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) clone(0x81608700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) execve(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) 12:59:01 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="328ca428a42a476d5556436a219024843f86b41acdd72794cc089c6bec08b4f9d0daef8c06aecec78fdb829cfc91cc338f72effabc6a071d891ae583b3be63987e1bf1708a99fdf12229dbbc35a7f34f8807aede7e1b8c", 0x57, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x800, @mcast1, 0x1}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local, 0x7d, r2}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x4800) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x6, @random="f89aadcfaa49"}, 0x10) sendfile(r0, r1, 0x0, 0x320f) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)}], 0x1) [ 895.347319][ T49] usb 5-1: device descriptor read/all, error -71 [ 895.356581][ T49] usb usb5-port1: unable to enumerate USB device [ 895.395072][T10180] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 895.422766][ T4596] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.3'. 12:59:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000a900081044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000000000e6ff0001013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000004ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r4, @ANYBLOB="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"], 0x8d0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001bc0)={'batadv0\x00', r4}) [ 895.515492][T10180] usb 3-1: Using ep0 maxpacket: 32 [ 895.628422][ T4620] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.755574][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.772492][T10180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.784701][ T49] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 895.789439][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 895.802214][ T5] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 895.821262][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 895.831558][T10180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 895.843678][T10180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 895.874738][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 895.914766][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 896.024756][T10180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.034164][T10180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.042631][T10180] usb 3-1: Product: syz [ 896.047111][T10180] usb 3-1: Manufacturer: syz [ 896.051807][T10180] usb 3-1: SerialNumber: syz [ 896.084751][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.096527][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.106699][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.116562][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.124729][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.126383][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 896.142062][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.147085][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 896.166762][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.177045][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.187389][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 896.197512][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:59:02 executing program 2: open(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 12:59:02 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) clone(0x81608700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) execve(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) [ 896.314712][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.323787][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.344570][T10180] cdc_ncm 3-1:1.0: bind() failure [ 896.363387][T10180] cdc_ncm 3-1:1.1: bind() failure [ 896.370316][ T49] usb 5-1: Product: syz [ 896.374541][ T49] usb 5-1: Manufacturer: syz [ 896.385514][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.404743][ T49] usb 5-1: SerialNumber: syz [ 896.408905][T10180] usb 3-1: USB disconnect, device number 124 [ 896.418389][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.448103][ T5] usb 2-1: Product: syz [ 896.459503][ T5] usb 2-1: Manufacturer: syz [ 896.466987][ T5] usb 2-1: SerialNumber: syz [ 896.694675][ T49] cdc_ncm 5-1:1.0: bind() failure [ 896.704158][ T49] cdc_ncm 5-1:1.1: bind() failure [ 896.713869][ T49] usb 5-1: USB disconnect, device number 42 12:59:02 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000040)='-nodevsecurity\x00', 0xf, 0x3) 12:59:02 executing program 3: sigaltstack(&(0x7f000013f000/0x1000)=nil, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/158, 0x9e}], 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x4000, 0x4000}) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSBRK(r6, 0x5427) 12:59:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x228, 0x17c, 0x17c, 0x140, 0x5, 0x228, 0x260, 0x260, 0x228, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x108, 0x140, 0x52020000, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}, {0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 12:59:02 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) setuid(0x0) mount$9p_xen(&(0x7f0000000000)='syz\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x1) 12:59:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x3}]}}, &(0x7f0000000300)=""/250, 0x26, 0xfa, 0x8}, 0x20) [ 896.790723][ T5] cdc_ncm 2-1:1.0: bind() failure [ 896.811233][ T5] cdc_ncm 2-1:1.1: bind() failure [ 896.837985][ T4674] BPF:[1] ENUM (anon) [ 896.845679][ T5] usb 2-1: USB disconnect, device number 23 [ 896.851697][ T4674] BPF:size=3 vlen=0 [ 896.859493][ T4676] BPF:[1] ENUM (anon) [ 896.864541][ T4674] BPF: [ 896.868122][ T4676] BPF:size=3 vlen=0 [ 896.878702][ T4674] BPF:Unexpected size [ 896.884475][ T4674] BPF: [ 896.884475][ T4674] [ 896.893358][ T4676] BPF: [ 896.911188][ T4676] BPF:Unexpected size [ 896.917003][ T4676] BPF: [ 896.917003][ T4676] [ 897.284663][ T5] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 897.374738][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 897.444620][ T49] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 897.536044][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 897.574659][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.585897][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.596897][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.607186][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 897.617562][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 897.627750][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 897.734631][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.747875][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.758165][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.769193][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 897.778969][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 897.789372][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 897.804687][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.813787][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.821877][ T5] usb 2-1: Product: syz [ 897.826479][ T5] usb 2-1: Manufacturer: syz [ 897.831134][ T5] usb 2-1: SerialNumber: syz [ 897.954702][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.963874][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.972751][ T49] usb 5-1: Product: syz [ 897.977326][ T49] usb 5-1: Manufacturer: syz [ 897.981925][ T49] usb 5-1: SerialNumber: syz [ 898.104599][ T5] cdc_ncm 2-1:1.0: bind() failure [ 898.112861][ T5] cdc_ncm 2-1:1.1: bind() failure [ 898.121790][ T5] usb 2-1: USB disconnect, device number 24 12:59:04 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002e0, 0xe, 0x80000, &(0x7f0000000280)="b95b03b700030005439e40f088a8", 0x0, 0x1a4, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 12:59:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400130f00004007a2a3000500000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffffff000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb, 0x1, 0x0, 0x0, {{0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x50}}, 0x0) 12:59:04 executing program 3: sigaltstack(&(0x7f000013f000/0x1000)=nil, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/158, 0x9e}], 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x4000, 0x4000}) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSBRK(r6, 0x5427) 12:59:04 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) setuid(0x0) mount$9p_xen(&(0x7f0000000000)='syz\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x1) 12:59:04 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000000)={0x3, 0x1fffffefe, 0xc2}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x90, 0x5, "b46bf4b763387d13d8818aa256eac7045c8eb2c4672b9602ca9e83dd30c715b8daf1ed17dc3b11309db81dd730926d0731e8b3e4d4184f67310371cd63cfa7d806ee40cc66d9973ab50e8debe205ff266987a99c427d8f26631dcb0e0994f29484b07adef23e97c7d68cd128de00dfd7cd4782c333219788981b92ec7dfccaa0eff4d82bdfc5cebe"}, &(0x7f0000000080), 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, r5, 0x1c, 0x1, @in={0x2, 0x4e22, @multicast1}}}, 0xa0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r5}}, 0xc) [ 898.274556][ T49] cdc_ncm 5-1:1.0: bind() failure [ 898.291120][ T49] cdc_ncm 5-1:1.1: bind() failure [ 898.351186][ T49] usb 5-1: USB disconnect, device number 43 [ 898.364345][ T4742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:59:04 executing program 5: sigaltstack(&(0x7f000013f000/0x1000)=nil, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/158, 0x9e}], 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x4000, 0x4000}) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSBRK(r6, 0x5427) [ 898.434921][ T4756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:59:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400130f00004007a2a3000500000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffffff000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb, 0x1, 0x0, 0x0, {{0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x50}}, 0x0) [ 898.545001][ T4768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 898.764521][ T49] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 898.848684][ T4956] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 898.894592][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 898.954558][ T4956] usb 2-1: Using ep0 maxpacket: 32 [ 899.104574][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.115769][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.127740][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.146384][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.175311][ T4956] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.194482][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 899.204182][ T49] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 899.213871][ T4956] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.234487][ T4956] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.244238][ T4956] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.254102][ T4956] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 899.264122][ T4956] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 899.404561][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.413788][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.422208][ T49] usb 5-1: Product: syz [ 899.426548][ T4956] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.435817][ T49] usb 5-1: Manufacturer: syz [ 899.440393][ T49] usb 5-1: SerialNumber: syz [ 899.445222][ T4956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.453213][ T4956] usb 2-1: Product: syz [ 899.458001][ T4956] usb 2-1: Manufacturer: syz [ 899.463402][ T4956] usb 2-1: SerialNumber: syz 12:59:05 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x81, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0x8, 0x24, 0x7, 0xdd, 0x5, [0x5]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x4f, &(0x7f0000000000)={0x5, 0xf, 0x4f, 0x1, [@generic={0x4a, 0x10, 0xa, "bac7e9932dc1587e2bd1648d767b607f1c09f451f42176aec6970c808b55b71547c81965ade9078372aa7a3b8044beb183effec62249b5415a8cbb31064b96fdcd06c0e46f74a8"}]}, 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40d}}, {0xdb, &(0x7f0000000140)=@string={0xdb, 0x3, "83b0c80cbef9fdb681d7152e85ff7111a9ea0f7de842f2ea1e02ec2b7aabf340f52f2f1ffe191e05a97e7099bd252cbc8e78b118455dc50dd0f46e95209afeb7c0dcd11d96be558e535582be66604515a8752e94cbadba99f00d3e6518d4c60a33656154117fd96f7694d5ed844e09196b18dcb80d5fae81417e1ae8eb7dce7514b55bba28561f3f372e85a36c40b675cf61a2e88330454d0eb4d355a903578e0b70f85aa20f65f3fbb8351509d0edbff4586a59fe6144344ac8eb9eb5aa666de499a2b17050fbf385ed092f053065f14300cc2a908c3efc2e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x4) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) 12:59:05 executing program 0: shmat(0x0, &(0x7f000053f000/0x4000)=nil, 0x6000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 12:59:05 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000a900081044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000000000e6ff0001013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000004ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r3, @ANYBLOB="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"], 0x8d0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'batadv0\x00', r3}) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 12:59:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400130f00004007a2a3000500000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffffff000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x60}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x5c}}, 0x0) 12:59:05 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) [ 899.735714][ T4956] cdc_ncm 2-1:1.0: bind() failure [ 899.754476][ T49] cdc_ncm 5-1:1.0: bind() failure [ 899.760925][ T4956] cdc_ncm 2-1:1.1: bind() failure [ 899.780558][ T49] cdc_ncm 5-1:1.1: bind() failure [ 899.831723][ T4806] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 899.838419][ T4956] usb 2-1: USB disconnect, device number 25 [ 899.852108][ T49] usb 5-1: USB disconnect, device number 44 [ 899.894001][ T4807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:59:05 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000a900081044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000000000e6ff0001013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000004ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r3, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 899.942387][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:59:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400130f00004007a2a3000500000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffffff000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x60}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x5c}}, 0x0) 12:59:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETFILTEREBPF(r0, 0x400454f7, &(0x7f0000000040)) close(r0) [ 900.043968][ T4834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 900.087415][ T4835] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000a900081044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000000000e6ff0001013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000004ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r3, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:59:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0) 12:59:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETFILTEREBPF(r0, 0x801454fe, 0x0) close(r0) 12:59:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r5, 0x0, &(0x7f00000000c0)) sendmmsg$sock(r5, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="5e7abf52401d59a45d3355dbe53962c2f8083a649dd53eb28d6caa9bb30dec216c503d1cd8040f8266331ae69a26beec57aa5e84c91dcf1a98e6ab6209224ddc429cea28df6c08d2ea6e1aef2cd1cf63db741eeb8fa1a00e748d7cd0099ee4b08685b8c970a2d15d00b64243a1ff91898df2515252352d417c30fe9582a95e22e89e1f90eb4d55c470feda12d6cf06858a1b320cb13ad676096a1a1adc7cc868744ed01d57082d27b9a1ae0d61b6b42c14650a7c4a5d065cf27ffcc7920763f55cfead6d1ba066892be7449520190040e3c33fb10694e45366d80a1ff8062d1a013b9f68403557aa50b6ef", 0xeb}, {&(0x7f0000000280)="5e348613e4ac1ffcb77e84f258e10d5d856d319fd64d44d342", 0x19}], 0x2, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @mark={{0x14, 0x1, 0x24, 0xf71}}], 0x60}}], 0x1, 0x2204c870) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00d6a3b3d753f2000000000000000600000008000100753332000c0002000800"], 0x38}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x3}]}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r8) ioprio_get$uid(0x3, r8) [ 900.284713][ T4956] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 900.384440][ T4956] usb 2-1: Using ep0 maxpacket: 32 [ 900.438055][ T4875] __nla_validate_parse: 2 callbacks suppressed [ 900.438062][ T4875] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 900.584433][ T4956] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.604397][ T4956] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.624407][ T4956] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.634272][ T4956] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 900.645685][ T4956] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 900.815105][ T4956] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 900.824166][ T4956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.872198][ T4956] usb 2-1: Product: ࠉ [ 900.884400][T10180] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 900.897484][ T4956] usb 2-1: Manufacturer: 낃ೈ料뛽힁⸕ﾅᅱ紏䋨Ȟ⯬ꭺ䃳⿵Ἧ᧾Ԟ纩饰▽밬碎ᢱ嵅ළ镮騠럾᷑뺖蹕啓뺂恦ᕅ疨鐮귋馺෰放퐘૆攳呡缑濙鑶亄ᤉᡫ룜弍膮繁緫痎디멛嘨㼟⸷ꎅ䁬疶懏ゃ䵅됎嗓Ω蹗瀋嫸ྡྷ룻ᔵ퀉뿭壴奪懾㑄졊黫ꪵ浦駤놢偰⼉々C⫌貐ﰾ [ 901.026625][ T4956] usb 2-1: SerialNumber: syz [ 901.234438][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.244412][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 901.255420][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 901.265875][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 901.276104][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 901.324402][ T4956] cdc_ncm 2-1:1.0: bind() failure [ 901.332831][ T4956] cdc_ncm 2-1:1.1: bind() failure [ 901.344181][ T4956] usb 2-1: USB disconnect, device number 26 [ 901.464394][T10180] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.474147][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.482922][T10180] usb 5-1: Product: syz [ 901.487432][T10180] usb 5-1: Manufacturer: syz [ 901.492175][T10180] usb 5-1: SerialNumber: syz [ 901.764386][T10180] cdc_ncm 5-1:1.0: bind() failure [ 901.772482][T10180] cdc_ncm 5-1:1.1: bind() failure [ 901.795097][T10180] usb 5-1: USB disconnect, device number 45 [ 902.085177][ T49] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 902.175095][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 902.240957][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 902.247422][ T4922] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 902.375279][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.394646][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.417680][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 902.439828][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 902.457425][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 902.635393][ T49] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 902.651035][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.667936][ T49] usb 2-1: Product: ࠉ [ 902.676873][ T49] usb 2-1: Manufacturer: 낃ೈ料뛽힁⸕ﾅᅱ紏䋨Ȟ⯬ꭺ䃳⿵Ἧ᧾Ԟ纩饰▽밬碎ᢱ嵅ළ镮騠럾᷑뺖蹕啓뺂恦ᕅ疨鐮귋馺෰放퐘૆攳呡缑濙鑶亄ᤉᡫ룜弍膮繁緫痎디멛嘨㼟⸷ꎅ䁬疶懏ゃ䵅됎嗓Ω蹗瀋嫸ྡྷ룻ᔵ퀉뿭壴奪懾㑄졊黫ꪵ浦駤놢偰⼉々C⫌貐ﰾ [ 902.744119][ T49] usb 2-1: SerialNumber: syz 12:59:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x21, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) [ 902.914288][ T49] cdc_ncm 2-1:1.0: bind() failure [ 902.931306][ T49] cdc_ncm 2-1:1.1: bind() failure 12:59:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400130f00004007a2a3000500000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffffff000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x50}}, 0x0) [ 902.962183][ T49] usb 2-1: USB disconnect, device number 27 12:59:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0) 12:59:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 903.003712][ T4940] BPF:[1] ENUM (anon) [ 903.014040][ T4940] BPF: [ 903.020256][ T4945] BPF:[1] ENUM (anon) [ 903.044704][ T4945] BPF: [ 903.047557][ T4940] BPF:meta_left:8 meta_needed:264 [ 903.059095][ T4945] BPF:meta_left:8 meta_needed:264 [ 903.069178][ T4950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 903.081043][ T4940] BPF: [ 903.081043][ T4940] 12:59:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) [ 903.097810][ T4945] BPF: [ 903.097810][ T4945] 12:59:09 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x78) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x81, 0x21814849}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe80, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f086dd1fffffe100008700632177fbac141412e0000001c699da153f08a0e6e000000108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3}}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="050732be010a"]}) [ 903.125310][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 903.169143][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.203795][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.242834][ T4965] BPF:[1] ENUM (anon) [ 903.258650][ T4966] BPF:[1] ENUM (anon) [ 903.260996][ T4965] BPF:size=4 vlen=1 [ 903.273407][ T4966] BPF:size=4 vlen=1 [ 903.280213][ T4965] BPF: 12:59:09 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) [ 903.290628][ T4966] BPF: [ 903.294928][ T4965] BPF:Invalid name [ 903.303802][ T4966] BPF:Invalid name [ 903.308041][ T4965] BPF: [ 903.308041][ T4965] [ 903.318339][ T4966] BPF: [ 903.318339][ T4966] [ 903.323607][ T4960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0) 12:59:09 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) [ 903.391375][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 903.440390][ T4970] BPF:[1] ENUM (anon) [ 903.448831][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.463905][ T4970] BPF:size=4 vlen=1 [ 903.478888][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.480135][ T4970] BPF: [ 903.500098][ T4970] BPF:Invalid name [ 903.511712][ T4970] BPF: [ 903.511712][ T4970] 12:59:09 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) [ 903.544308][ T49] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 903.642944][ T4981] BPF:[1] ENUM (anon) [ 903.645457][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 903.647411][ T4981] BPF:size=4 vlen=1 [ 903.665157][ T4981] BPF: [ 903.681536][ T4981] BPF:Invalid name [ 903.698861][ T4981] BPF: [ 903.698861][ T4981] 12:59:09 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) 12:59:09 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x228, 0x28020000, 0x0, 0x0, 0x200, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) 12:59:09 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) [ 903.805606][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 903.887521][ T4992] BPF:[1] ENUM (anon) [ 903.896798][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.917101][ T4988] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 903.927205][ T4992] BPF:size=4 vlen=1 [ 903.931011][ T4992] BPF: [ 903.933826][ T4992] BPF:Invalid name 12:59:09 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) [ 903.959550][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.991625][ T4988] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (1000000) [ 904.010453][ T4992] BPF: [ 904.010453][ T4992] 12:59:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) [ 904.031106][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 904.088530][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 904.137131][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 904.141422][ T5004] BPF:[1] ENUM (anon) [ 904.163366][ T5004] BPF:size=4 vlen=1 [ 904.176476][ T5004] BPF: [ 904.183871][ T5004] BPF:Invalid name 12:59:10 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) [ 904.188701][ T49] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 904.194520][ T5004] BPF: [ 904.194520][ T5004] 12:59:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) [ 904.364548][ T5012] BPF:[1] ENUM (anon) [ 904.378982][ T5012] BPF:size=4 vlen=1 [ 904.385668][ T49] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 904.397549][ T5012] BPF: [ 904.406823][ T5012] BPF:Invalid name [ 904.409004][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.413862][ T5012] BPF: [ 904.413862][ T5012] [ 904.451097][ T49] usb 2-1: Product: syz [ 904.466928][ T49] usb 2-1: Manufacturer: syz [ 904.484738][ T49] usb 2-1: SerialNumber: syz [ 904.784179][ T49] cdc_ncm 2-1:1.0: bind() failure [ 904.792230][ T49] cdc_ncm 2-1:1.1: bind() failure [ 904.820504][ T49] usb 2-1: USB disconnect, device number 28 [ 905.524223][T10180] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 905.624816][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 905.785002][T10180] usb 2-1: unable to get BOS descriptor or descriptor too short [ 905.865120][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.876398][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.886990][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 905.897625][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 905.907821][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 905.917993][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 906.086237][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 906.095416][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.103379][T10180] usb 2-1: Product: syz [ 906.107893][T10180] usb 2-1: Manufacturer: syz [ 906.112500][T10180] usb 2-1: SerialNumber: syz 12:59:12 executing program 2: 12:59:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002e0, 0xe, 0x80000, &(0x7f0000000280)="b95b03b700030005439e40f088a8", 0x0, 0x1a4, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10001) sendmsg$OSF_MSG_REMOVE(r1, 0x0, 0x40000) 12:59:12 executing program 3: 12:59:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) 12:59:12 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = accept$alg(r0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000200)={r2, 0x1}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x21, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x800, [0x4, 0xb8, 0x3, 0x6]}, @dmm={0x7, 0x24, 0x14, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x21}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0x40, 0x9, 0x40, 0x70}]}}) 12:59:12 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0xcf, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000400)={0x0, @bt={0x6, 0xffffd4e9, 0x0, 0x3, 0x7ff, 0x3, 0xe7f9, 0xfffffffc, 0x7fffffff, 0x7fff, 0x0, 0x8, 0x6, 0x80, 0xc, 0x29, {0x7, 0x5}, 0x7, 0x1}}) keyctl$clear(0x7, r1) [ 906.187079][T10180] usb 2-1: can't set config #1, error -71 [ 906.225581][T10180] usb 2-1: USB disconnect, device number 29 12:59:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f0000000140), 0xa) getpeername$inet(r1, 0x0, 0x0) [ 906.282655][ T5043] BPF:[1] ENUM (anon) 12:59:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) [ 906.306316][ T5043] BPF:size=4 vlen=1 [ 906.325001][ T5043] BPF: [ 906.331289][ T5043] BPF:Invalid name [ 906.351069][ T5043] BPF: [ 906.351069][ T5043] 12:59:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETFILTEREBPF(r0, 0x400454dc, &(0x7f0000000040)) close(r0) 12:59:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) 12:59:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b", 0x21}], 0x1) 12:59:12 executing program 3: [ 906.576404][ T5] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 906.591812][ T5061] BPF:[1] ENUM (anon) [ 906.605170][ T5061] BPF:size=4 vlen=1 [ 906.612365][ T5061] BPF: [ 906.621263][ T5061] BPF:Invalid name 12:59:12 executing program 2: [ 906.630021][ T5061] BPF: [ 906.630021][ T5061] 12:59:12 executing program 3: [ 906.677366][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 906.694959][T10180] usb 2-1: new high-speed USB device number 30 using dummy_hcd 12:59:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) 12:59:12 executing program 0: [ 906.796534][T10180] usb 2-1: Using ep0 maxpacket: 32 [ 906.832510][ T5082] BPF:[1] ENUM (anon) [ 906.840055][ T5082] BPF:size=4 vlen=1 [ 906.857937][ T5082] BPF: [ 906.860731][ T5082] BPF:Invalid name [ 906.865012][ T5082] BPF: [ 906.865012][ T5082] [ 906.874810][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.904849][ T5] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 906.930939][ T5] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 906.952805][ T5] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 906.963280][ T5] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 907.014828][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.026792][T10180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.037658][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 907.049153][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 907.059603][T10180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 907.070956][T10180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 907.147317][ T5] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.157280][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.165510][ T5] usb 5-1: Product: syz [ 907.169843][ T5] usb 5-1: Manufacturer: syz [ 907.175754][ T5] usb 5-1: SerialNumber: syz [ 907.234143][T10180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.243280][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.252216][T10180] usb 2-1: Product: syz [ 907.256780][T10180] usb 2-1: Manufacturer: syz [ 907.261356][T10180] usb 2-1: SerialNumber: syz [ 907.454061][ T5] cdc_ncm 5-1:1.0: bind() failure [ 907.462364][ T5] cdc_ncm 5-1:1.1: bind() failure [ 907.477941][ T5] usb 5-1: USB disconnect, device number 46 [ 907.544117][T10180] cdc_ncm 2-1:1.0: bind() failure [ 907.552129][T10180] cdc_ncm 2-1:1.1: bind() failure [ 907.574627][T10180] usb 2-1: USB disconnect, device number 30 12:59:13 executing program 3: 12:59:13 executing program 0: 12:59:13 executing program 2: 12:59:13 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) 12:59:13 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140e, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x90814}, 0x20000044) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) 12:59:13 executing program 3: 12:59:14 executing program 2: 12:59:14 executing program 3: 12:59:14 executing program 0: [ 908.161344][ T5126] BPF:[1] ENUM (anon) [ 908.180086][ T5126] BPF:size=4 vlen=1 [ 908.195323][ T5126] BPF: 12:59:14 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6000, 0x100, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r4) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r7) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) statx(r8, &(0x7f0000000340)='./file0\x00', 0x4000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r11) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r13) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x1}, [{0x2, 0x2}, {0x2, 0x6}], {}, [{0x8, 0x6, r2}, {0x8, 0x3, r4}, {0x8, 0x4, r5}, {0x8, 0x3, 0xee01}, {0x8, 0x6, r7}, {0x8, 0x5, r9}, {0x8, 0x0, r11}, {0x8, 0x0, r13}], {0x10, 0x4}, {0x20, 0x4}}, 0x74, 0x2) nanosleep(&(0x7f0000000040)={r0, r1+10000000}, &(0x7f0000000080)) [ 908.214312][ T5126] BPF:Invalid name [ 908.229335][ T5126] BPF: [ 908.229335][ T5126] 12:59:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 12:59:14 executing program 0: 12:59:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x300) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x2}) syz_open_dev$loop(0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) 12:59:14 executing program 3: 12:59:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 908.404028][T10180] usb 5-1: new high-speed USB device number 47 using dummy_hcd 12:59:14 executing program 0: [ 908.517591][T10180] usb 5-1: Using ep0 maxpacket: 32 [ 908.753999][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.773916][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.783868][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 908.797720][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 908.810668][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 908.825049][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 909.014055][T10180] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.023133][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.031894][T10180] usb 5-1: Product: syz [ 909.036361][T10180] usb 5-1: Manufacturer: syz [ 909.040942][T10180] usb 5-1: SerialNumber: syz [ 909.323967][T10180] cdc_ncm 5-1:1.0: bind() failure [ 909.331979][T10180] cdc_ncm 5-1:1.1: bind() failure [ 909.340612][T10180] usb 5-1: USB disconnect, device number 47 12:59:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x282040, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) 12:59:15 executing program 3: 12:59:15 executing program 2: 12:59:15 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 12:59:15 executing program 0: 12:59:15 executing program 1: 12:59:15 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=""/250, 0x0, 0xfa, 0x8}, 0x20) 12:59:15 executing program 1: 12:59:15 executing program 0: 12:59:15 executing program 2: 12:59:15 executing program 3: 12:59:15 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=""/250, 0x0, 0xfa, 0x8}, 0x20) [ 909.981569][ T5189] BPF:hdr_len not found [ 910.064597][ T5196] BPF:hdr_len not found [ 910.196339][T10180] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 910.306607][T10180] usb 5-1: Using ep0 maxpacket: 32 [ 910.553857][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.564908][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.575975][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 910.586434][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 910.596680][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 910.606677][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 910.773880][T10180] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 910.782960][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.791132][T10180] usb 5-1: Product: syz [ 910.795452][T10180] usb 5-1: Manufacturer: syz [ 910.800104][T10180] usb 5-1: SerialNumber: syz [ 911.083840][T10180] cdc_ncm 5-1:1.0: bind() failure [ 911.091948][T10180] cdc_ncm 5-1:1.1: bind() failure [ 911.101038][T10180] usb 5-1: USB disconnect, device number 48 [ 911.813769][T10180] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 911.903782][T10180] usb 5-1: Using ep0 maxpacket: 32 [ 912.123793][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.134809][T10180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.144728][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.154700][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.164558][T10180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 912.174340][T10180] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 912.343752][T10180] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.352951][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.362085][T10180] usb 5-1: Product: syz [ 912.366672][T10180] usb 5-1: Manufacturer: syz [ 912.371290][T10180] usb 5-1: SerialNumber: syz 12:59:18 executing program 4: 12:59:18 executing program 0: 12:59:18 executing program 3: 12:59:18 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=""/250, 0x0, 0xfa, 0x8}, 0x20) 12:59:18 executing program 1: 12:59:18 executing program 2: [ 912.653760][T10180] cdc_ncm 5-1:1.0: bind() failure [ 912.688213][T10180] cdc_ncm 5-1:1.1: bind() failure 12:59:18 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/250, 0x1a, 0xfa, 0x8}, 0x20) 12:59:18 executing program 2: [ 912.735938][ T5239] BPF:hdr_len not found [ 912.745911][T10180] usb 5-1: USB disconnect, device number 49 12:59:18 executing program 3: 12:59:18 executing program 0: 12:59:18 executing program 1: 12:59:18 executing program 4: [ 912.890424][ T5252] BPF:No type found 12:59:18 executing program 2: 12:59:18 executing program 0: 12:59:18 executing program 3: 12:59:18 executing program 1: 12:59:18 executing program 4: 12:59:18 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/250, 0x1a, 0xfa, 0x8}, 0x20) 12:59:18 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/250, 0x1a, 0xfa, 0x8}, 0x20) 12:59:18 executing program 3: 12:59:18 executing program 0: [ 913.095413][ T5262] BPF:No type found 12:59:19 executing program 4: 12:59:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000300)=""/250, 0x26, 0xfa, 0x8}, 0x20) 12:59:19 executing program 1: 12:59:19 executing program 2: [ 913.189041][ T5267] BPF:No type found 12:59:19 executing program 0: 12:59:19 executing program 3: 12:59:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000300)=""/250, 0x26, 0xfa, 0x8}, 0x20) 12:59:19 executing program 4: 12:59:19 executing program 1: 12:59:19 executing program 2: 12:59:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000300)=""/250, 0x26, 0xfa, 0x8}, 0x20) 12:59:19 executing program 0: 12:59:19 executing program 3: 12:59:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) 12:59:19 executing program 1: 12:59:19 executing program 4: 12:59:19 executing program 2: 12:59:19 executing program 3: 12:59:19 executing program 0: [ 913.603452][ T5292] BPF:[1] ENUM (anon) [ 913.623106][ T5292] BPF:size=4 vlen=1 [ 913.643634][ T5292] BPF: [ 913.646426][ T5292] BPF:Invalid name [ 913.650214][ T5292] BPF: [ 913.650214][ T5292] 12:59:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) 12:59:19 executing program 1: 12:59:19 executing program 4: 12:59:19 executing program 2: 12:59:19 executing program 3: 12:59:19 executing program 0: 12:59:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa, 0x8}, 0x20) 12:59:19 executing program 2: [ 913.832377][ T5305] BPF:[1] ENUM (anon) [ 913.840064][ T5305] BPF:size=4 vlen=1 [ 913.848951][ T5305] BPF: [ 913.856366][ T5305] BPF:Invalid name [ 913.863943][ T5305] BPF: [ 913.863943][ T5305] 12:59:19 executing program 4: 12:59:19 executing program 1: 12:59:19 executing program 0: 12:59:19 executing program 3: 12:59:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, 0x0, 0x2e, 0x0, 0x8}, 0x20) [ 913.979162][ T5311] BPF:[1] ENUM (anon) [ 913.983267][ T5311] BPF:size=4 vlen=1 [ 913.997535][ T5311] BPF: [ 914.008561][ T5311] BPF:Invalid name [ 914.024477][ T5311] BPF: [ 914.024477][ T5311] 12:59:19 executing program 2: 12:59:19 executing program 1: 12:59:19 executing program 0: 12:59:20 executing program 4: 12:59:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, 0x0, 0x2e, 0x0, 0x8}, 0x20) 12:59:20 executing program 3: 12:59:20 executing program 1: 12:59:20 executing program 2: 12:59:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, 0x0, 0x2e, 0x0, 0x8}, 0x20) 12:59:20 executing program 0: 12:59:20 executing program 4: 12:59:20 executing program 3: 12:59:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa}, 0x20) 12:59:20 executing program 1: 12:59:20 executing program 4: 12:59:20 executing program 2: 12:59:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) r2 = dup(0xffffffffffffffff) connect$bt_rfcomm(r2, 0x0, 0x0) getpeername$inet(r2, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setgid(r4) 12:59:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa}, 0x20) 12:59:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3, &(0x7f00000005c0)=[{0x0, 0x0, 0x435}, {0x0, 0x0, 0x9ba7}, {0x0}], 0x14020, &(0x7f0000000640)='selinux\x00') 12:59:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000300)=""/250, 0x2e, 0xfa}, 0x20) 12:59:20 executing program 1: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='vfat\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0xffffffab, 0x0, 0x0, 0x0) 12:59:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x8) sendfile(r0, r1, &(0x7f00000001c0), 0xffff) fcntl$addseals(r1, 0x409, 0x8) 12:59:20 executing program 5: 12:59:20 executing program 4: [ 914.804342][ T3442] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 914.832278][ T5360] FAT-fs (loop3): unable to read boot sector 12:59:20 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="628db0a36a"], 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 12:59:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "b04a83706694a7d154c629f75b71a95a8f3b289266c607adb22d0000000000000d7beebc689ab001521f48dc57042f1b38e9e8af694c0d4300", "d66ee438c05a45ff21b55bbd900300000000000000a482ebf7a08c305bee6fd6"}) [ 914.869761][ T3441] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 914.883380][ T5360] FAT-fs (loop3): unable to read boot sector 12:59:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@dmode={'dmode'}}]}) 12:59:20 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) [ 915.138618][ T5383] ISOFS: Unable to identify CD-ROM format. [ 915.233680][ T28] audit: type=1800 audit(1589633961.100:20): pid=5391 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 [ 915.276521][ T5383] ISOFS: Unable to identify CD-ROM format. 12:59:22 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xac8}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x4}, {&(0x7f0000000400)=""/120, 0x1aa}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0xc1}], 0x5, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 12:59:22 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f0000002280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x60000004}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) connect$bt_rfcomm(r2, &(0x7f0000000140), 0xa) getpeername$inet(r2, 0x0, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0}, 0x10) 12:59:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) 12:59:22 executing program 5: 12:59:22 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 12:59:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, 0x0) [ 916.621600][ T5414] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 916.670126][ T5414] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 12:59:22 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimes(&(0x7f0000000800)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000300)={0x78, 0x0, 0x2}, 0x78) stat(&(0x7f0000000280)='./file0\x00', 0x0) stat(0x0, 0x0) 12:59:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xb8, 0x0, 0x0, 0x1, [@generic="d22483b065a8c1a549bc3676679926f416e754e8d510aaeb1f71f51efd5a3fc61640b9a8eb31c5a5aafa844487c09e2eab58d53463a3aeaa0fd695c9d1d932cec6d69fad46779d4cf99db3274d7ad00e45a2ac28d7fdba902803ad1b26225bbace339f292b79dc9566769fb65aafbef8a7b6d71ffba9565fea6b0bcf26d7e8667897d4683b520619dbeeee13730bc17b93faeb44b7588c6b588b99e172537c4d9f1d0cda6e66cab9", @generic="ae109884f16c863c540688d2"]}]}, 0xcc}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0xffffffffffffff84}, {0x0, 0xfffffce3}, {&(0x7f0000000300)="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", 0x11e}], 0x100000000000015b, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 916.724630][ T5414] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 916.738138][ T5414] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 916.764550][ T5414] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:59:22 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1107019, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x22000a0, &(0x7f0000000140)={[{@jqfmt_vfsold='jqfmt=vfsold'}, {@delalloc='delalloc'}]}) 12:59:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 12:59:22 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f0000002280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x60000004}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) connect$bt_rfcomm(r2, &(0x7f0000000140), 0xa) getpeername$inet(r2, 0x0, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0}, 0x10) 12:59:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@sbsector={'sbsector'}}]}) 12:59:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, 0x0) [ 917.041016][ T5442] EXT4-fs (sda1): re-mounted. Opts: jqfmt=vfsold,delalloc, 12:59:23 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1107019, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x22000a0, &(0x7f0000000140)={[{@jqfmt_vfsold='jqfmt=vfsold'}, {@delalloc='delalloc'}]}) [ 917.128188][ T5455] ISOFS: Unable to identify CD-ROM format. 12:59:23 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r0, &(0x7f0000000000)="b6", 0xfffffe7e) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100000, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000580)) umount2(&(0x7f0000000540)='./file0\x00', 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) [ 917.261870][ T5464] ISOFS: Unable to identify CD-ROM format. 12:59:23 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1107019, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x90428, 0x0) [ 917.378780][ T5470] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 917.389567][ T5474] EXT4-fs (sda1): re-mounted. Opts: jqfmt=vfsold,delalloc, 12:59:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) [ 917.424756][ T5470] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 917.436455][ T5484] EXT4-fs (sda1): re-mounted. Opts: [ 917.454105][ T5470] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 12:59:23 executing program 1: semctl$IPC_RMID(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="b40c0737eab6e94a1aed5646", 0xc, 0xfffffffffffffffb) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000008e80), 0x0, 0x0) [ 917.475979][ T5470] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 917.555379][ T5470] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 917.588144][ T5493] EXT4-fs (sda1): re-mounted. Opts: [ 917.627547][ T5499] encrypted_key: insufficient parameters specified [ 917.686728][ T5503] encrypted_key: insufficient parameters specified 12:59:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000001180)='TIPC\x00') syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open(0x0, 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) utimensat(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x100) lchown(0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) 12:59:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) connect$bt_rfcomm(r3, &(0x7f0000000140), 0xa) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 12:59:23 executing program 2: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000008000100000000003000058008000100756470001c0002800800020000000000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200), 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000348e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 12:59:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 12:59:23 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="62ad"], 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 12:59:23 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0x204) rt_sigsuspend(&(0x7f0000000040), 0x8) 12:59:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) connect$bt_rfcomm(r3, &(0x7f0000000140), 0xa) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) [ 918.106382][ T5510] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 918.143457][ T5510] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 918.154233][ T5510] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 918.203057][ T5510] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 918.209882][ T5510] EXT4-fs (loop2): mount failed 12:59:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000001180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4090) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000001c0)={0x8, @time={0x3, 0x7}, 0x0, {0x8, 0x1}, 0x22, 0x1, 0x55}) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x100) lchown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r2, 0xc004743e, 0x0) [ 918.340113][ T5542] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 918.352972][ T5542] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 918.365862][ T5542] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 918.396686][ T5542] EXT4-fs: failed to create workqueue [ 918.402198][ T5542] EXT4-fs (loop2): mount failed 12:59:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f00000000c0)={@private1}, 0x20) tkill(r1, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 12:59:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000000c0)=""/181, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000200)='./file0\x00', 0x4a) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 12:59:24 executing program 2: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000008000100000000003000058008000100756470001c0002800800020000000000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200), 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000348e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 12:59:24 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r0, &(0x7f0000000000)="b6", 0xfffffe7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 918.918122][ T5568] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 918.950357][ T5568] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 918.999707][ T5568] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 919.062420][ T5568] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 919.077581][ T5568] EXT4-fs (loop2): mount failed 12:59:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) 12:59:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x40680, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) mlockall(0x1) listen(r0, 0x0) ustat(0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000080}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r1, 0xe01, 0x70b52b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff7fc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250e00000008003b000008000008003200bd0000000800390000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008840) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000005f779bcd79c27eaf6c904483d31ed4642621ef97ec39fd7f5eb3ad78410b1e24a606518064fb7d3085e85631b982e33174c03fd8f93b69f6df25d8ae8e4f891e77f45fd90004e2c4fbd5e9d2be2523cab7a0ae7e735bb237165dcc58a6741789ca10a0d920fa92b4169cab36fc64efad0dbd2f3984ad28ae63a51a138f82a7b217030957c9e4f0699c18d050231c4ed67c562d2dd43852bdb04eba9310e08cc4daeaeb22e5885ab008da0bfc5241bdab58dfbcf4abacbee23bf6e71adaa4a9b659e63ac5844155e63ee439b42fb1004887b15b19dc7b5a5764443e7eb6f846ac4cff3bd5190f3123", @ANYRES16=r1, @ANYBLOB="040025bd1600fbdbdf2501000000aa00000000006dae3dcff60ee31454822bdded5944792b00"/49], 0x24}}, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b0f9c73c6efd"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x4c050) 12:59:25 executing program 2: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000008000100000000003000058008000100756470001c0002800800020000000000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200), 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000348e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 12:59:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, 0x0, 0x500, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x4800) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000200)='./file0\x00', 0x4a) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 12:59:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@local, @private0, @empty}) 12:59:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:25 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4090) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x100) lchown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:59:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) stat(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r2) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000380)='./file0\x00', 0x8040, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x20006503d, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x218, 0x0, 0x0}, 0x40) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e22, @private=0xa010100}}, 0x0, 0x0, 0x32, 0x0, "f03d6ecbf95fef70aa2b8516158150dccb827d6f16368caac5f11d498c884f458522405382e2343e12af719d64084c1747f1270ec6d1226d5144ee9b31352b28edc7e841a2240ed01af3c3be6550b6ee"}, 0xd8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='pipefs\x00', 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x6, 0x0, 0x2c}, @vsock={0x28, 0x0, 0x2711, @local}, @l2tp={0x2, 0x0, @broadcast, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)='veth1\x00', 0x7fffffff, 0x6, 0x3}) 12:59:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:59:25 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x105441, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:59:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) [ 919.964610][ T5618] pipefs: Unknown parameter '' 12:59:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) [ 920.045649][ T5622] x_tables: duplicate underflow at hook 2 [ 920.054173][ T5622] x_tables: duplicate underflow at hook 2 [ 920.056385][ T5616] pipefs: Unknown parameter '' 12:59:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x40680, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) mlockall(0x1) listen(r0, 0x0) ustat(0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000080}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r1, 0xe01, 0x70b52b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff7fc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250e00000008003b000008000008003200bd0000000800390000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008840) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000005f779bcd79c27eaf6c904483d31ed4642621ef97ec39fd7f5eb3ad78410b1e24a606518064fb7d3085e85631b982e33174c03fd8f93b69f6df25d8ae8e4f891e77f45fd90004e2c4fbd5e9d2be2523cab7a0ae7e735bb237165dcc58a6741789ca10a0d920fa92b4169cab36fc64efad0dbd2f3984ad28ae63a51a138f82a7b217030957c9e4f0699c18d050231c4ed67c562d2dd43852bdb04eba9310e08cc4daeaeb22e5885ab008da0bfc5241bdab58dfbcf4abacbee23bf6e71adaa4a9b659e63ac5844155e63ee439b42fb1004887b15b19dc7b5a5764443e7eb6f846ac4cff3bd5190f3123", @ANYRES16=r1, @ANYBLOB="040025bd1600fbdbdf2501000000aa00000000006dae3dcff60ee31454822bdded5944792b00"/49], 0x24}}, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b0f9c73c6efd"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x4c050) 12:59:26 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fdatasync(r0) 12:59:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:26 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) fallocate(r0, 0x100000010, 0x0, 0x808001) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:59:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) dup3(r2, r3, 0x0) 12:59:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fallocate(r1, 0x10, 0x0, 0x8000) [ 920.999307][ T28] audit: type=1804 audit(1589633966.861:21): pid=5658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/537/bus" dev="sda1" ino=15789 res=1 12:59:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x40680, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) mlockall(0x1) listen(r0, 0x0) ustat(0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000080}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r1, 0xe01, 0x70b52b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff7fc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250e00000008003b000008000008003200bd0000000800390000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008840) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000005f779bcd79c27eaf6c904483d31ed4642621ef97ec39fd7f5eb3ad78410b1e24a606518064fb7d3085e85631b982e33174c03fd8f93b69f6df25d8ae8e4f891e77f45fd90004e2c4fbd5e9d2be2523cab7a0ae7e735bb237165dcc58a6741789ca10a0d920fa92b4169cab36fc64efad0dbd2f3984ad28ae63a51a138f82a7b217030957c9e4f0699c18d050231c4ed67c562d2dd43852bdb04eba9310e08cc4daeaeb22e5885ab008da0bfc5241bdab58dfbcf4abacbee23bf6e71adaa4a9b659e63ac5844155e63ee439b42fb1004887b15b19dc7b5a5764443e7eb6f846ac4cff3bd5190f3123", @ANYRES16=r1, @ANYBLOB="040025bd1600fbdbdf2501000000aa00000000006dae3dcff60ee31454822bdded5944792b00"/49], 0x24}}, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b0f9c73c6efd"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x4c050) 12:59:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) dup3(r2, r3, 0x0) 12:59:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 12:59:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) dup3(r2, r3, 0x0) [ 921.326395][ T28] audit: type=1804 audit(1589633967.191:22): pid=5673 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/538/bus" dev="sda1" ino=16162 res=1 12:59:27 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./file0\x00', 0x4b8582, 0xd9aacd52723b4c87) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[], 0x4) 12:59:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) fallocate(r1, 0x8, 0x0, 0x8000) 12:59:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x400141442, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) write(r2, &(0x7f00000002c0)='y', 0x1) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x400141442, 0x0) write(r4, &(0x7f00000002c0)='y', 0x1) 12:59:28 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) fallocate(r0, 0x100000010, 0x0, 0x808001) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 922.293676][ T28] audit: type=1804 audit(1589633968.161:23): pid=5697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/539/bus" dev="sda1" ino=16187 res=1 12:59:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:28 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 12:59:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fallocate(r1, 0x10, 0x0, 0x8002) 12:59:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:28 executing program 0: mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="bc80d5ce61ef3f12383626e60a08c5731672ac9a44a080ace253d793cad0992673d813ca8ed28fb2bac026c02f5035781d55e5703ee3ee7d99df63072bca294a3be92e8500febf039ccc5ab5eff2e78dcebeaa79979198d6a583d5d3b9aa71ddbde5e135fbc9cf3cd309637fcb1c41c62c6322e80a185f800a4760565d73afc4206ee77b18aead204d8b0505be7682030617db4101f7476274201459f7a645da0d3b173401370467ccbe74e6fb8f860efc8262527d57542b6e9f80b5dad8d7ffa8104b7b85f8e8e085145e94614eec09"]) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000002800)=ANY=[@ANYBLOB="2321202e2ff02000eeb0336bbbd27d"], 0x18) ioctl$BLKRRPART(r1, 0x125f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)={0x77, 0x7d, 0x2, {{0x0, 0x62, 0x8, 0x200, {0x20, 0x1, 0x3}, 0x0, 0x6, 0x4, 0x80, 0x0, '', 0x9, 'subj_type', 0x19, 'GPL.md5sumkselinux:cpuset', 0xd, 'dont_appraise'}, 0x0, '', 0x0, 0x0, r2}}, 0x77) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) openat$vga_arbiter(0xffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_client='access=client'}, {@noextend='noextend'}, {@privport='privport'}, {@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, '/dev/nvram\x00'}}, {@fscache='fscache'}], [{@fsname={'fsname', 0x3d, 'trans=tcp,'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/nvram\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/nvram\x00'}}, {@fowner_gt={'fowner>', r3}}, {@smackfsroot={'smackfsroot'}}]}}) 12:59:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) [ 922.829020][ T28] audit: type=1804 audit(1589633968.691:24): pid=5715 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/540/bus" dev="sda1" ino=16186 res=1 [ 922.860925][ T5717] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:59:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, 0xffffffffffffffff, 0x0) [ 922.885562][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 922.902793][ T5720] 9pnet: p9_fd_create_tcp (5720): problem connecting socket to 127.0.0.1 [ 922.912832][ T5722] device vxlan0 entered promiscuous mode 12:59:28 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) fallocate(r0, 0x100000010, 0x0, 0x808001) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:59:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private2, 0x133}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/48, 0x30}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 922.940119][ T5717] 9pnet: p9_fd_create_tcp (5717): problem connecting socket to 127.0.0.1 [ 922.941938][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, 0xffffffffffffffff, 0x0) 12:59:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 12:59:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x100}}) open(0x0, 0x0, 0x0) 12:59:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, 0xffffffffffffffff, 0x0) [ 923.191000][ T28] audit: type=1804 audit(1589633969.051:25): pid=5740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/541/bus" dev="sda1" ino=16201 res=1 12:59:29 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 12:59:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x100}}) open(0x0, 0x0, 0x0) 12:59:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:29 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) [ 923.446335][ T28] audit: type=1804 audit(1589633969.311:26): pid=5762 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/542/bus" dev="sda1" ino=16168 res=1 12:59:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 12:59:29 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) fallocate(r0, 0x100000010, 0x0, 0x808001) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:59:29 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 12:59:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='A']}) 12:59:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:29 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 12:59:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x100}}) open(0x0, 0x0, 0x0) 12:59:29 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) [ 924.041684][ T28] audit: type=1804 audit(1589633969.901:27): pid=5785 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/543/bus" dev="sda1" ino=16198 res=1 12:59:30 executing program 5: epoll_create1(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)={0x88, 0x6, [], [@generic={0x50, 0x31, "c2e290305ecc91f8d559d93e868c19cda2db057ceaacea9abf1d7bc15c4c88bc88e072ede62d1ae10c75cec490e483fba0"}]}, 0x40) getpid() r1 = creat(0x0, 0x62) ioctl$FS_IOC_SETVERSION(r1, 0x1277, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000408000020700000095000000000086feb46da48f3d91a939fb77bdf22555578cbdeb46da5d16ce7817baff26a83736efeb8361ed7632834e86c97914781acf8578b88fe737af632235d3c403a7a37244f9415a78a03853376b40282139887e1fdb58aa18da0bab9c61dc0f90c73dd3dd45d5411023c8f4329cb8039762fac925bcc2a546223d2bdd447167d16ccf52d6e810a445ee1e19ac26eebf706c6ce4459158cdaf703500b0448fe5d354d5352e709e54ed5c4a27dc729e45e6ab20b4886ca61320962a"], &(0x7f0000000180)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f0000000140)='./bus\x00', 0x0, 0x8}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) write(0xffffffffffffffff, 0x0, 0x0) 12:59:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:30 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}}], 0x2, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private2, 0x133}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/48, 0x30}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:59:30 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 12:59:30 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1107019, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2080a5, 0x0) 12:59:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(0xffffffffffffffff, r2, 0x0) 12:59:30 executing program 2: 12:59:30 executing program 1: [ 924.313338][ T5807] ptrace attach of "/root/syz-executor.2"[5804] was attempted by "/root/syz-executor.2"[5807] 12:59:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:30 executing program 0: 12:59:30 executing program 2: 12:59:30 executing program 5: 12:59:30 executing program 1: 12:59:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(0xffffffffffffffff, r2, 0x0) 12:59:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:30 executing program 2: 12:59:30 executing program 5: 12:59:30 executing program 1: 12:59:30 executing program 0: 12:59:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(0xffffffffffffffff, r2, 0x0) 12:59:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 12:59:30 executing program 2: 12:59:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:30 executing program 1: 12:59:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="be", 0x1, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) 12:59:30 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x400300, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000400000000000002100000000000000", 0x30}], 0x1}, 0x0) 12:59:30 executing program 2: 12:59:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 12:59:30 executing program 1: 12:59:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:31 executing program 0: 12:59:31 executing program 2: 12:59:31 executing program 0: 12:59:31 executing program 5: 12:59:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 12:59:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:31 executing program 1: 12:59:31 executing program 2: 12:59:31 executing program 0: 12:59:31 executing program 5: 12:59:31 executing program 1: 12:59:31 executing program 2: 12:59:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r0, r1, 0x0) 12:59:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:31 executing program 0: 12:59:31 executing program 5: 12:59:31 executing program 1: 12:59:31 executing program 2: 12:59:31 executing program 0: [ 925.664740][ T28] audit: type=1804 audit(1589633971.531:28): pid=5879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/550/bus" dev="sda1" ino=16201 res=1 12:59:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r0, r1, 0x0) 12:59:31 executing program 2: 12:59:31 executing program 5: 12:59:31 executing program 1: 12:59:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:31 executing program 0: 12:59:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r0, r1, 0x0) 12:59:31 executing program 5: [ 925.948778][ T28] audit: type=1804 audit(1589633971.811:29): pid=5893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/551/bus" dev="sda1" ino=16206 res=1 12:59:31 executing program 2: 12:59:31 executing program 1: 12:59:31 executing program 0: 12:59:32 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:32 executing program 1: 12:59:32 executing program 5: 12:59:32 executing program 2: 12:59:32 executing program 0: [ 926.274536][ T28] audit: type=1804 audit(1589633972.141:30): pid=5909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/552/bus" dev="sda1" ino=16203 res=1 12:59:32 executing program 5: 12:59:32 executing program 1: 12:59:32 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:32 executing program 2: 12:59:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 12:59:32 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:32 executing program 1: 12:59:32 executing program 5: 12:59:32 executing program 0: 12:59:32 executing program 2: [ 926.531280][ T28] audit: type=1804 audit(1589633972.391:31): pid=5918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/553/bus" dev="sda1" ino=16057 res=1 12:59:32 executing program 0: 12:59:32 executing program 5: 12:59:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 12:59:32 executing program 1: 12:59:32 executing program 0: 12:59:32 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac04800000000500e931190000000000000680ffffffa5000000e100e2ff87770072003007008200000080000000008000da55aa", 0x40, 0x1c0}]) 12:59:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:32 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x400017e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, 0x0, 0x0, 0x0) 12:59:32 executing program 5: unshare(0x44000600) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') lseek(r0, 0x0, 0x0) 12:59:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a101000418e00000004fcff", 0x58}], 0x1) [ 926.878358][ T28] audit: type=1804 audit(1589633972.741:32): pid=5936 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/554/bus" dev="sda1" ino=16170 res=1 [ 926.946212][ T5937] loop2: p1 p2 < > p3 p4 [ 926.952938][ T5937] loop2: partition table partially beyond EOD, truncated [ 926.984773][ T5945] IPVS: ftp: loaded support on port[0] = 21 12:59:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 12:59:32 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000900)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 12:59:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) [ 927.010530][ T5937] loop2: p1 start 10 is beyond EOD, truncated [ 927.037714][ T5937] loop2: p2 start 25 is beyond EOD, truncated 12:59:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000b081000418e00000004fcff", 0x58}], 0x1) [ 927.080860][ T28] audit: type=1804 audit(1589633972.941:33): pid=5953 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/555/bus" dev="sda1" ino=16196 res=1 [ 927.092977][ T5937] loop2: p3 start 4293001441 is beyond EOD, truncated [ 927.141215][ T5937] loop2: p4 start 128 is beyond EOD, truncated [ 927.175327][ T5278] loop2: p1 p2 < > p3 p4 [ 927.180638][ T5278] loop2: partition table partially beyond EOD, truncated 12:59:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:33 executing program 1: unshare(0x44000600) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') lseek(r0, 0xffffffffffffffff, 0x0) 12:59:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RESETEP(r0, 0x80045515, &(0x7f0000000240)={0x1, 0x1}) [ 927.184283][ T5945] IPVS: ftp: loaded support on port[0] = 21 [ 927.204902][ T5278] loop2: p1 start 10 is beyond EOD, truncated [ 927.231020][ T5278] loop2: p2 start 25 is beyond EOD, truncated [ 927.265088][ T5278] loop2: p3 start 4293001441 is beyond EOD, truncated [ 927.276793][ T5990] IPVS: ftp: loaded support on port[0] = 21 [ 927.285851][ T28] audit: type=1804 audit(1589633973.151:34): pid=5991 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/556/bus" dev="sda1" ino=16198 res=1 [ 927.296579][ T5278] loop2: p4 start 128 is beyond EOD, truncated [ 927.362172][ T6004] usb usb2: usbfs: process 6004 (syz-executor.0) did not claim interface 0 before use [ 927.371482][ T5990] IPVS: ftp: loaded support on port[0] = 21 12:59:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) fstat(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001200192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000028e00000004fcff", 0x58}], 0x1) 12:59:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@hoplimit={{0x18}}], 0x18}}], 0x2, 0x0) [ 927.629522][T10514] tipc: TX() has been purged, node left! 12:59:35 executing program 5: unshare(0x44000600) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') lseek(r0, 0x0, 0x0) 12:59:35 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x3}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:59:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) fstat(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000028e00000004fcff", 0x58}], 0x1) 12:59:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000028e00000904fcff", 0x58}], 0x1) [ 929.170217][ T6075] IPVS: ftp: loaded support on port[0] = 21 [ 929.216137][ T28] audit: type=1804 audit(1589633975.081:35): pid=6078 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/557/bus" dev="sda1" ino=16222 res=1 12:59:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 12:59:35 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000001d00070cab0000000000f00007", 0x11) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff2b) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:59:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:35 executing program 5: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 12:59:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) [ 929.512849][T10514] tipc: TX() has been purged, node left! [ 929.534674][ T5] usb 2-1: new high-speed USB device number 31 using dummy_hcd 12:59:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) [ 929.558568][ T28] audit: type=1804 audit(1589633975.421:36): pid=6121 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/558/bus" dev="sda1" ino=16230 res=1 [ 929.672684][T10514] tipc: TX() has been purged, node left! [ 929.743511][ T5] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 929.752488][ T5] usb 2-1: config 1 has no interface number 1 [ 929.766069][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 929.792676][ T5] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 929.963361][ T5] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 929.978386][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.995655][ T5] usb 2-1: Product: syz [ 930.000321][ T5] usb 2-1: Manufacturer: syz [ 930.005466][ T5] usb 2-1: SerialNumber: syz [ 930.322724][ T5] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 930.330145][ T5] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 930.377800][ T5] usb 2-1: USB disconnect, device number 31 [ 931.042746][T23781] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 931.252706][T23781] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 931.261824][T23781] usb 2-1: config 1 has no interface number 1 [ 931.262576][T10514] tipc: TX() has been purged, node left! [ 931.269458][T23781] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 931.287346][T23781] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 931.454600][T23781] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 931.463721][T23781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.471745][T23781] usb 2-1: Product: syz [ 931.475978][T23781] usb 2-1: Manufacturer: syz [ 931.480618][T23781] usb 2-1: SerialNumber: syz 12:59:37 executing program 1: prctl$PR_SET_NAME(0x19, &(0x7f0000000100)='/dev/rtc#\x00') 12:59:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:59:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') read$rfkill(r0, 0x0, 0x0) 12:59:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:37 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac04800000006300e931190000000000000680ffffffa9000000e100e2ff87770072003007008200000080000000008000da55aa", 0x40, 0x1c0}]) [ 931.795643][ T28] audit: type=1804 audit(1589633977.661:37): pid=6162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/559/bus" dev="sda1" ino=16236 res=1 12:59:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) [ 931.842738][T23781] usb 2-1: 2:1 : format type 0 is detected, processed as PCM 12:59:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) [ 931.888794][T23781] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 931.903343][ T6169] loop0: p1 p2 p3 p4 [ 931.907440][ T6169] loop0: partition table partially beyond EOD, truncated [ 931.941791][ T6169] loop0: p1 start 10 is beyond EOD, truncated [ 931.970644][T23781] usb 2-1: USB disconnect, device number 32 12:59:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) [ 932.000668][ T28] audit: type=1804 audit(1589633977.861:38): pid=6186 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/560/bus" dev="sda1" ino=16236 res=1 [ 932.015127][ T6169] loop0: p2 start 25 is beyond EOD, truncated 12:59:37 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0201630000000a000000ff45ac0480ffffffa500e931190000000000000680ffffff81000000e100e2ff87770072003007008200000080000000008000da55aa", 0x40, 0x1c0}]) 12:59:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) [ 932.100371][ T6169] loop0: p3 start 4293001441 is beyond EOD, truncated [ 932.132641][ T6169] loop0: p4 start 128 is beyond EOD, truncated 12:59:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000028e00000804fcff", 0x58}], 0x1) 12:59:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) [ 932.187133][ T28] audit: type=1804 audit(1589633978.051:39): pid=6205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/561/bus" dev="sda1" ino=15819 res=1 [ 932.248590][ T6202] loop1: p1 p2 p3 p4 [ 932.269099][ T6202] loop1: partition table partially beyond EOD, truncated [ 932.329608][ T6202] loop1: p1 start 10 is beyond EOD, truncated [ 932.362557][ T6202] loop1: p2 start 25 is beyond EOD, truncated [ 932.390224][ T6202] loop1: p3 start 4293001441 is beyond EOD, truncated [ 932.410370][ T6202] loop1: p4 start 128 is beyond EOD, truncated [ 932.514756][ T6202] loop1: p1 p2 p3 p4 [ 932.518902][ T6202] loop1: partition table partially beyond EOD, truncated [ 932.540633][ T6202] loop1: p1 start 10 is beyond EOD, truncated [ 932.547699][ T6202] loop1: p2 start 25 is beyond EOD, truncated [ 932.554587][ T6202] loop1: p3 start 4293001441 is beyond EOD, truncated [ 932.561541][ T6202] loop1: p4 start 128 is beyond EOD, truncated 12:59:38 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac0480ffffff8100e931190000000000000680ffffffa6000000e100e2ff87770072003007008200000080000000008000da55aa", 0x40, 0x1c0}]) 12:59:38 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000028e00000004fcff", 0x58}], 0x1) 12:59:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x5423, 0x800000000001) 12:59:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:38 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac0480ffffff8100e93119000000000000068000000005000000e100e2ff87770072003007008200000080000000008000da55aa", 0x40, 0x1c0}]) [ 932.863395][ T28] audit: type=1804 audit(1589633978.732:40): pid=6232 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/562/bus" dev="sda1" ino=16250 res=1 12:59:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x7}]}, @IFLA_TXQLEN={0x8}]}, 0x34}}, 0x0) 12:59:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r1, r2, 0x0) 12:59:38 executing program 2: ioprio_set$pid(0x0, 0x0, 0xffffffffffffffff) [ 932.934118][ T6235] loop1: p1 p2 p3 < > p4 [ 932.950291][ T6235] loop1: partition table partially beyond EOD, truncated 12:59:38 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) [ 932.975646][ T6242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.005134][ T6235] loop1: p1 start 10 is beyond EOD, truncated [ 933.013722][ T6235] loop1: p2 start 25 is beyond EOD, truncated [ 933.019957][ T6235] loop1: p3 start 4293001441 is beyond EOD, truncated [ 933.026843][ T6235] loop1: p4 start 128 is beyond EOD, truncated [ 933.043319][ T6238] loop5: p1 p2 p3 p4 [ 933.048079][ T6238] loop5: partition table partially beyond EOD, truncated [ 933.081701][ T6238] loop5: p1 start 10 is beyond EOD, truncated [ 933.133117][ T28] audit: type=1804 audit(1589633979.002:41): pid=6255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/563/bus" dev="sda1" ino=16250 res=1 [ 933.139032][ T6238] loop5: p2 start 25 is beyond EOD, truncated [ 933.161991][ T6238] loop5: p3 start 4293001441 is beyond EOD, truncated [ 933.169015][ T6238] loop5: p4 start 128 is beyond EOD, truncated 12:59:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:39 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 933.192489][ T6235] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 933.333815][ T6238] loop5: p1 p2 p3 p4 [ 933.342722][ T6238] loop5: partition table partially beyond EOD, truncated [ 933.368284][ T6238] loop5: p1 start 10 is beyond EOD, truncated [ 933.387302][ T6238] loop5: p2 start 25 is beyond EOD, truncated [ 933.393489][ T6238] loop5: p3 start 4293001441 is beyond EOD, truncated [ 933.400286][ T6238] loop5: p4 start 128 is beyond EOD, truncated 12:59:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x8, 0x2b6}}], 0x18}}], 0x2, 0x0) 12:59:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) ioprio_set$pid(0x0, 0x0, 0x2350) 12:59:39 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac0480ffffff8100e93119000000000000068000000005000000e100e2ff87770072003007008200000080000000008000da55aa", 0x40, 0x1c0}]) 12:59:39 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:39 executing program 0: statx(0xffffffffffffff9c, 0x0, 0x6000, 0x0, 0x0) 12:59:39 executing program 2: unshare(0x44000600) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0x0, 0x3) [ 933.571284][ T28] audit: type=1804 audit(1589633979.432:42): pid=6283 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/564/bus" dev="sda1" ino=16249 res=1 12:59:39 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',no']) 12:59:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x6, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x7b37, 0x80ffff, 0x48c4]}, 0x40) [ 933.654733][ T6279] loop1: p1 p2 p3 < > p4 [ 933.659309][ T6279] loop1: partition table partially beyond EOD, truncated [ 933.673922][ T6279] loop1: p1 start 10 is beyond EOD, truncated 12:59:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) [ 933.705595][ T6279] loop1: p2 start 25 is beyond EOD, truncated [ 933.716659][ T6295] IPVS: ftp: loaded support on port[0] = 21 [ 933.758833][ T6279] loop1: p3 start 4293001441 is beyond EOD, truncated [ 933.766871][ T6295] IPVS: ftp: loaded support on port[0] = 21 [ 933.772987][ T6279] loop1: p4 start 128 is beyond EOD, truncated [ 933.815742][ T6317] fuse: Unknown parameter 'no' 12:59:39 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee00, 0x0) 12:59:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) [ 933.877131][ T28] audit: type=1804 audit(1589633979.742:43): pid=6349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/565/bus" dev="sda1" ino=15921 res=1 12:59:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, r4, 0x1, 0x0, 0x0, {0xa}, [@NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, [@NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_5GHZ={0x14, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, ')'}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000011c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000000140)={0x1030, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x64}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1cc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, "c193"}]}, 0x1030}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0xd}, 0x0, 0x0, &(0x7f0000000040), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:59:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24048000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x10003082}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400007ce}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71082300010ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12:59:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010008081000418e00000004fcff", 0x58}], 0x1) [ 934.032700][T32635] tipc: TX() has been purged, node left! 12:59:39 executing program 1: socket(0x0, 0x402, 0x0) 12:59:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 934.109803][ T28] audit: type=1804 audit(1589633979.972:44): pid=6362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/566/bus" dev="sda1" ino=15763 res=1 12:59:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000b06010300000000000000000000000005000100060000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) 12:59:40 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="c4bbbbbbbbbbaaaaaaaaaaaa8100000086dd60"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:59:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) syz_genetlink_get_family_id$nl80211(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c2d8", 0x14, 0x6, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, [{0x0, 0x0, "e5d8"}]}}}}}, 0x46) 12:59:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="be", 0x1}], 0x1, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a41}], 0x1, 0x0, 0x8003}, 0x0) 12:59:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='#', 0x1}, {&(0x7f0000000240)="be1750b9401fe7318377007f3b300e9b9ac952b4b814f9453c612a", 0x1b}, {&(0x7f0000000300)="b3a45340", 0x4}], 0x3, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a41}], 0x1, 0x0, 0x8003}, 0x0) [ 934.413464][ T28] audit: type=1804 audit(1589633980.282:45): pid=6386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/567/bus" dev="sda1" ino=15937 res=1 12:59:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) [ 934.615995][ T28] audit: type=1804 audit(1589633980.482:46): pid=6418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/568/bus" dev="sda1" ino=15937 res=1 12:59:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='#', 0x1}, {&(0x7f0000000240)="be1750b9401fe7318377007f3b300e9b9ac952b4b814f9453c612a", 0x1b}, {&(0x7f0000000300)="b3a45340", 0x4}], 0x3, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a41}], 0x1, 0x0, 0x8003}, 0x0) 12:59:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {0x0}], 0x3}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x2769, 0x0, 0x0, 0x800e00575) shutdown(r3, 0x0) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="000200bc0f"], 0x10) shutdown(r4, 0x0) 12:59:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000046c0)=""/4096, 0x1000}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/4093, 0xffd}, {0x0}, {0x0}], 0x3}, 0x42) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) read(r3, &(0x7f0000001900)=""/4096, 0x1000) shutdown(r3, 0x0) 12:59:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x4e, 0x0, 0x0, 0x800e004e7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000017c0)=""/230, 0xe6}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/22, 0x16}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/45, 0x2d}, {0x0}], 0x2}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r6, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) shutdown(r5, 0x0) r7 = dup(r3) shutdown(r7, 0x0) 12:59:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x4e, 0x0, 0x0, 0x800e004e7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000017c0)=""/230, 0xe6}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/22, 0x16}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/45, 0x2d}, {0x0}, {0x0}], 0x3}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r6, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) shutdown(r5, 0x0) r7 = dup(r3) shutdown(r7, 0x0) 12:59:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002380)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000002640)=""/239, 0xef}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xf}, 0x42) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) r4 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r3, 0x0) 12:59:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/97, 0x61}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000d80)="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", 0x2c63) shutdown(r2, 0x0) execve(0x0, 0x0, 0x0) 12:59:42 executing program 1: 12:59:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:42 executing program 2: [ 936.342280][T32635] tipc: TX() has been purged, node left! 12:59:42 executing program 2: 12:59:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:42 executing program 1: 12:59:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:42 executing program 2: 12:59:42 executing program 1: 12:59:42 executing program 0: 12:59:43 executing program 5: 12:59:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:43 executing program 1: 12:59:43 executing program 2: 12:59:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:43 executing program 0: 12:59:43 executing program 0: 12:59:43 executing program 1: 12:59:43 executing program 2: [ 937.353355][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 937.353375][ T28] audit: type=1804 audit(1589633983.222:53): pid=6562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/575/bus" dev="sda1" ino=16276 res=1 12:59:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:43 executing program 5: 12:59:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) 12:59:43 executing program 1: 12:59:43 executing program 0: 12:59:43 executing program 2: 12:59:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:43 executing program 5: [ 937.713033][ T28] audit: type=1804 audit(1589633983.582:54): pid=6573 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/576/bus" dev="sda1" ino=16272 res=1 12:59:43 executing program 2: 12:59:43 executing program 1: 12:59:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:43 executing program 0: 12:59:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:43 executing program 5: 12:59:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:43 executing program 0: 12:59:43 executing program 2: [ 937.964838][ T28] audit: type=1804 audit(1589633983.822:55): pid=6587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/577/bus" dev="sda1" ino=15823 res=1 12:59:43 executing program 1: 12:59:43 executing program 0: 12:59:43 executing program 5: 12:59:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:44 executing program 2: 12:59:44 executing program 1: 12:59:44 executing program 0: [ 938.239705][ T28] audit: type=1804 audit(1589633984.092:56): pid=6599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/578/bus" dev="sda1" ino=15787 res=1 12:59:44 executing program 5: 12:59:44 executing program 2: 12:59:44 executing program 0: 12:59:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:44 executing program 1: 12:59:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:44 executing program 0: 12:59:44 executing program 5: 12:59:44 executing program 2: 12:59:44 executing program 1: [ 938.604654][ T28] audit: type=1804 audit(1589633984.452:57): pid=6616 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/579/bus" dev="sda1" ino=16286 res=1 12:59:44 executing program 0: 12:59:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:44 executing program 5: 12:59:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(0x0, 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:44 executing program 0: 12:59:44 executing program 1: 12:59:44 executing program 2: 12:59:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, r3, 0x0) 12:59:44 executing program 5: 12:59:44 executing program 1: 12:59:44 executing program 0: 12:59:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(0x0, 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:44 executing program 5: 12:59:44 executing program 2: 12:59:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x34) dup3(r2, r3, 0x0) 12:59:45 executing program 1: 12:59:45 executing program 0: 12:59:45 executing program 5: 12:59:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x34) dup3(r2, r3, 0x0) 12:59:45 executing program 1: 12:59:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(0x0, 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:45 executing program 2: 12:59:45 executing program 0: 12:59:45 executing program 5: 12:59:45 executing program 2: 12:59:45 executing program 0: 12:59:45 executing program 1: 12:59:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x34) dup3(r2, r3, 0x0) 12:59:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:45 executing program 5: 12:59:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0xafe324b271123cf7, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@private2, 0x0, 0x6c}, @in=@private}}}, 0xf8}}, 0x0) 12:59:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000300)="eb3c906d6b66732e666174000204010002000270f7f8b26371d577684ea028bb071e0189571eef3bb31f8a847bb7e7412a17d97f977a6df0d94e53149e170b14c9a8a142cd", 0x45}], 0x0, 0x0) 12:59:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x34) dup3(r2, r3, 0x0) 12:59:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) close(0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:59:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507c513176a319051c9672baf00", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x24, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 12:59:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) 12:59:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x34) dup3(r2, r3, 0x0) [ 939.762454][ T6667] FAT-fs (loop1): Directory bread(block 51045) failed [ 939.783707][ T6667] FAT-fs (loop1): Directory bread(block 51046) failed [ 939.824352][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 939.863203][ T6667] FAT-fs (loop1): Directory bread(block 51047) failed [ 939.870033][ T6667] FAT-fs (loop1): Directory bread(block 51048) failed 12:59:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)={r1}, 0x0, 0x0) [ 939.934896][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 939.952224][ T6667] FAT-fs (loop1): Directory bread(block 51049) failed 12:59:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:45 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000000840)={0x1a, 0x33a, 0x6, 0x0, 0x0, 0x7f, @remote}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x8000}]}) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)={r4}, 0x0, 0x0) [ 940.042081][ T6667] FAT-fs (loop1): Directory bread(block 51050) failed [ 940.048899][ T6667] FAT-fs (loop1): Directory bread(block 51051) failed 12:59:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, 0xd, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) 12:59:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x34) dup3(r2, r3, 0x0) [ 940.088812][ T6667] FAT-fs (loop1): Directory bread(block 51052) failed [ 940.112179][ T6667] FAT-fs (loop1): Directory bread(block 51053) failed [ 940.119101][ T6667] FAT-fs (loop1): Directory bread(block 51054) failed 12:59:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x34) dup3(r2, r3, 0x0) 12:59:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:46 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000540), 0x0, &(0x7f0000000200)={0x1ff}, 0x0, 0x0) 12:59:46 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x1}, 0xa) 12:59:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x34) dup3(r2, r3, 0x0) 12:59:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:46 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5336, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0105303, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x1004000000016) 12:59:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x34) dup3(r2, r3, 0x0) 12:59:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002"], 0x34) dup3(r2, r3, 0x0) 12:59:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0xafe324b271123cf7, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@private2, 0x0, 0x6c}, @in=@private}}}, 0xf8}}, 0x0) [ 941.338479][ T28] audit: type=1804 audit(1589633987.192:58): pid=6754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/589/bus" dev="sda1" ino=16287 res=1 12:59:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2600, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socket(0x1, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 12:59:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002"], 0x34) dup3(r2, r3, 0x0) 12:59:47 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x185485) [ 941.704185][ T28] audit: type=1804 audit(1589633987.562:59): pid=6771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/590/bus" dev="sda1" ino=16307 res=1 12:59:47 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x836, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) 12:59:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002"], 0x34) dup3(r2, r3, 0x0) 12:59:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x477, 0x181142) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0xff49) 12:59:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) [ 942.029465][ T28] audit: type=1804 audit(1589633987.882:60): pid=6786 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/591/bus" dev="sda1" ino=16304 res=1 12:59:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f00"], 0x34) dup3(r2, r3, 0x0) 12:59:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 12:59:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f00"], 0x34) dup3(r2, r3, 0x0) [ 942.262229][ T28] audit: type=1804 audit(1589633988.122:61): pid=6805 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/592/bus" dev="sda1" ino=16307 res=1 12:59:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) sendfile(r4, r2, 0x0, 0x6f0a77bd) [ 942.526037][ T6801] __loop_clr_fd: partition scan of loop2 failed (rc=-16) 12:59:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000033001901000000000000000001"], 0x24}}, 0x0) 12:59:48 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_unix(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000540)={'trans=unix,'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002840)={0x90, 0x0, 0x2}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) umount2(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) 12:59:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f00"], 0x34) dup3(r2, r3, 0x0) 12:59:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x1, 0x0, 0x0}) 12:59:49 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000780)=""/173, 0xad, 0x100, &(0x7f0000000840)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x7f, @remote}, 0x10) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x8000}]}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000240)={0x19c, 0x0, &(0x7f0000000380)}) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)={r3}, 0x0, 0x0) [ 943.127270][ T28] audit: type=1804 audit(1589633988.982:62): pid=6831 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/593/bus" dev="sda1" ino=16305 res=1 12:59:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(0xffffffffffffffff, r3, 0x0) [ 943.178774][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 12:59:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(0xffffffffffffffff, r2, 0x0, 0x6f0a77bd) 12:59:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:59:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) [ 943.360451][ T28] audit: type=1804 audit(1589633989.212:63): pid=6850 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/594/bus" dev="sda1" ino=16306 res=1 12:59:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(0xffffffffffffffff, r3, 0x0) [ 943.538955][ T28] audit: type=1804 audit(1589633989.392:64): pid=6857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/595/bus" dev="sda1" ino=16269 res=1 [ 943.890533][ T6830] 9pnet: p9_fd_create_unix (6830): problem connecting socket: ./file0/file1: -107 [ 943.926630][ T6837] 9pnet: p9_fd_create_unix (6837): problem connecting socket: ./file0/file1: -107 12:59:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(0xffffffffffffffff, r2, 0x0, 0x6f0a77bd) 12:59:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfffff0000abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xffffffff, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x101, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x7}, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x22, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x6}}, 0x10) 12:59:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(0xffffffffffffffff, r3, 0x0) 12:59:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:49 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_unix(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000540)={'trans=unix,'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002840)={0x90, 0x0, 0x2}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) umount2(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) 12:59:49 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000780)=""/173, 0xad, 0x100, &(0x7f0000000840)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x7f, @remote}, 0x10) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x8000}]}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000240)={0x19c, 0x0, &(0x7f0000000380)}) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)={r3}, 0x0, 0x0) 12:59:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, 0xffffffffffffffff, 0x0) [ 944.088641][ T28] audit: type=1804 audit(1589633989.942:65): pid=6887 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/596/bus" dev="sda1" ino=16314 res=1 12:59:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(0xffffffffffffffff, r2, 0x0, 0x6f0a77bd) 12:59:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 12:59:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, 0xffffffffffffffff, 0x0) 12:59:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfffff0000abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xffffffff, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x101, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x7}, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x22, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x6}}, 0x10) [ 944.383221][ T28] audit: type=1804 audit(1589633990.242:66): pid=6903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/597/bus" dev="sda1" ino=16318 res=1 12:59:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0007"], 0x34) dup3(r2, 0xffffffffffffffff, 0x0) 12:59:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r3, 0x0) 12:59:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000780)=""/173, 0xad, 0x100, &(0x7f0000000840)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x7f, @remote}, 0x10) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x8000}]}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000240)={0x19c, 0x0, &(0x7f0000000380)}) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)={r3}, 0x0, 0x0) 12:59:50 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfffff0000abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0xffffffff, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1, 0xf, 0x9}, &(0x7f0000000140)=0x22, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}}, 0x10) [ 944.617150][ T28] audit: type=1804 audit(1589633990.472:67): pid=6916 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/598/bus" dev="sda1" ino=16314 res=1 12:59:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = mq_open(&(0x7f0000000180)='eth0\x000\x82\xa68\x12D\xdc\xb2\x8d\xccA0\xea\x9ewV\xaaO\x89\xc1\x10\x9b\xfc\xa8\x01\xa7X\xe6+\x88\x14\xc1\xa8\xaa\x9f6O\x8c\xf7g\x8a=|h\xac\x02\x1a\xaa\xbcn\x10\x05,\xdd\xf1*\xcb\xefy\xd7\xf2\xa9\x8a\xeb\x19K\xe3\xc6\xc7F\xfdY\x82\xd3\xef\xb6F\x18Y\a\x0f\x7f\xaf\xa2;@\x90\x0f)\x8d\xeeZ\xeeS^@\x97c\xe9\x9b\xd1\xcc\x00\x8c\xe7^\xccB\x9f\"m=\xc7\"\xbbM\x1dI7\' \x91\xad\xc6\x93\xceg\x8dQ\xd2Q1\xa0\xa6E\xef\x90\x13R6Z\xce\xbd\xb1\x12\xaa\xdc\x7f\xf5\x15\xb0\x95\x01\x05\xe6\xa1\x00\x11\x1c\xfeY\xbe\x0e\xb7\xdc\xcbJn\b:\xb1^G\xc6\x102j-\xe3c\xac\xb1Y\xd9kc\xdbu+\xc4\xffo\xd6h\xc26\x17\x8ci\xf4*@wR\xc6\x1b', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 12:59:50 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) 12:59:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:50 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfffff0000abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0xffffffff, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1, 0xf, 0x9}, &(0x7f0000000140)=0x22, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}}, 0x10) 12:59:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r3, 0x0) [ 944.929747][ T6890] 9pnet: p9_fd_create_unix (6890): problem connecting socket: ./file0/file1: -107 [ 945.052181][ T6939] mmap: syz-executor.2 (6939) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 12:59:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) [ 945.085178][ T28] audit: type=1804 audit(1589633990.942:68): pid=6940 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/599/bus" dev="sda1" ino=16318 res=1 12:59:51 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 12:59:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfffff0000abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xffffffff, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x1, 0xf, 0x9, 0x4}, &(0x7f0000000140)=0x22, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x6}}, 0x10) 12:59:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r3, 0x0) 12:59:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(0xffffffffffffffff, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r2, 0x0, 0x6f0a77bd) [ 945.405467][ T28] audit: type=1804 audit(1589633991.262:69): pid=6956 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/600/bus" dev="sda1" ino=16287 res=1 12:59:51 executing program 0: 12:59:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfffff0000abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xffffffff, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x1, 0xf, 0x9, 0x4}, &(0x7f0000000140)=0x22, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x6}}, 0x10) 12:59:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(0xffffffffffffffff, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r2, 0x0, 0x6f0a77bd) 12:59:51 executing program 2: 12:59:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 12:59:51 executing program 0: 12:59:51 executing program 5: 12:59:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(0xffffffffffffffff, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r2, 0x0, 0x6f0a77bd) [ 945.822902][ T28] audit: type=1804 audit(1589633991.682:70): pid=6970 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/601/bus" dev="sda1" ino=16308 res=1 12:59:51 executing program 3: 12:59:51 executing program 5: 12:59:51 executing program 2: 12:59:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 12:59:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6f0a77bd) 12:59:51 executing program 0: 12:59:52 executing program 2: 12:59:52 executing program 5: [ 946.153756][ T28] audit: type=1804 audit(1589633992.012:71): pid=6986 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045850716/syzkaller.Y5fnyN/602/bus" dev="sda1" ino=16320 res=1 12:59:52 executing program 0: 12:59:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6f0a77bd) 12:59:52 executing program 3: 12:59:52 executing program 2: 12:59:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000100)='./bus\x00', 0x103040, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 12:59:52 executing program 5: 12:59:52 executing program 0: 12:59:52 executing program 3: 12:59:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6f0a77bd) 12:59:52 executing program 5: 12:59:52 executing program 2: 12:59:52 executing program 4: 12:59:52 executing program 0: 12:59:52 executing program 3: 12:59:52 executing program 4: 12:59:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:52 executing program 5: 12:59:52 executing program 0: 12:59:52 executing program 3: 12:59:52 executing program 2: 12:59:52 executing program 4: 12:59:52 executing program 5: 12:59:52 executing program 0: 12:59:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:52 executing program 4: 12:59:52 executing program 2: 12:59:52 executing program 3: 12:59:52 executing program 5: 12:59:52 executing program 0: 12:59:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:53 executing program 4: 12:59:53 executing program 2: 12:59:53 executing program 3: 12:59:53 executing program 5: 12:59:53 executing program 0: 12:59:53 executing program 2: 12:59:53 executing program 4: 12:59:53 executing program 3: 12:59:53 executing program 5: 12:59:53 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) read$snddsp(r0, &(0x7f0000000040)=""/8, 0x8) sendfile(r2, r0, 0x0, 0x6f0a77bd) 12:59:53 executing program 0: 12:59:53 executing program 2: 12:59:53 executing program 4: 12:59:53 executing program 5: 12:59:53 executing program 3: 12:59:53 executing program 2: 12:59:53 executing program 0: 12:59:53 executing program 4: 12:59:53 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) read$snddsp(r0, &(0x7f0000000040)=""/8, 0x8) sendfile(r2, r0, 0x0, 0x6f0a77bd) 12:59:53 executing program 5: 12:59:53 executing program 3: 12:59:53 executing program 2: 12:59:53 executing program 4: 12:59:53 executing program 0: 12:59:53 executing program 5: 12:59:53 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) read$snddsp(r0, &(0x7f0000000040)=""/8, 0x8) sendfile(r2, r0, 0x0, 0x6f0a77bd) 12:59:53 executing program 4: 12:59:53 executing program 3: 12:59:53 executing program 2: 12:59:53 executing program 0: 12:59:53 executing program 5: 12:59:54 executing program 3: 12:59:54 executing program 2: 12:59:54 executing program 4: 12:59:54 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:54 executing program 2: 12:59:54 executing program 0: 12:59:54 executing program 5: socket(0x1f, 0x5, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000), 0x4) connect$inet6(r0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000640)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x35295) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={'vlan0\x00', {0x2, 0x4e22, @multicast2}}) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x9}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x88425, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') clone(0xd48d24434713bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:59:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 12:59:54 executing program 4: 12:59:54 executing program 0: 12:59:54 executing program 2: 12:59:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x5c, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/123, 0x7b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/25, 0x19}, {&(0x7f0000000840)=""/91, 0x5b}, {0x0}], 0x3, &(0x7f0000000d40)=""/33, 0x21}, 0x1900000}], 0x3, 0x0, 0x0) 12:59:54 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001480)=ANY=[@ANYBLOB]) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x8) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 12:59:54 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) close(r0) 12:59:54 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket(0x0, 0x800, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x7, 0x1658, {}, {}, 0x0, 0x4}) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=""/41) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 12:59:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 12:59:54 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={0x0, 0x0}) 12:59:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x5c, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}]}, 0x5c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/123, 0x7b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/25, 0x19}, {&(0x7f0000000840)=""/91, 0x5b}, {0x0}], 0x3, &(0x7f0000000d40)=""/33, 0x21}, 0x1900000}], 0x3, 0x0, 0x0) 12:59:55 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 12:59:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x44, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/123, 0x7b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d40)=""/33, 0x21}, 0x1900000}], 0x3, 0x0, 0x0) 12:59:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x5c, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}]}, 0x5c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/123, 0x7b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/25, 0x19}, {&(0x7f0000000840)=""/91, 0x5b}, {0x0}], 0x3, &(0x7f0000000d40)=""/33, 0x21}, 0x1900000}], 0x3, 0x0, 0x0) 12:59:55 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:55 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() select(0x80c9, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:59:55 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket(0x0, 0x800, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x7, 0x1658, {}, {}, 0x0, 0x4}) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=""/41) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 12:59:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 12:59:55 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) 12:59:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b070700003468"], 0x78) 12:59:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/packet\x00') r1 = socket(0x200000000000011, 0x80002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/113, 0x71}], 0x4a, 0x7) 12:59:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:56 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket(0x0, 0x800, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x7, 0x1658, {}, {}, 0x0, 0x4}) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=""/41) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 12:59:56 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') 12:59:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002b80)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000680)=""/192, 0xc0}, 0x8e8f}, {{&(0x7f0000001180)=@generic, 0x80, &(0x7f0000001280)}, 0x9}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) gettid() vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 12:59:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) read$snddsp(r1, &(0x7f0000000040)=""/8, 0x8) sendfile(r3, r1, 0x0, 0x6f0a77bd) 12:59:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="feca6a8cc18ca36b472b9b0e28ddaeaa507b6d625433c008e0b9a8fa783be6e7111667eb3904cd9bebc9fcfe6a0984da7edbc6e747745e43e777c5e382824b1114ba45ca4dbbec458bc9820e6ea60c5f3c2b2627552473fa33608d0f59f7835184cb23b997f73deae5230b4f7df7e52bc480f2dc9928c01d250c167fd8eaae31b4db0fe9", 0x84}, {0x0}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x4010) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {0x2, 0x101, 0x7, 0x8}, 0x49, [0xe4d, 0x4, 0x3, 0x7, 0x4, 0x5, 0x5, 0x5, 0xe0fa, 0xff, 0xffffffff, 0xecae, 0x2, 0x8001, 0x6, 0x8, 0x20, 0x8000, 0x7, 0x81a, 0x8, 0x2, 0xa2c0, 0x1, 0x43d, 0x0, 0x6, 0x1, 0xffffffff, 0x4, 0xeb, 0x9, 0x1c00000, 0x5, 0x9fb, 0x0, 0x81, 0x3, 0x5, 0x9, 0x10001, 0x5, 0x1ff, 0x2, 0xe047, 0x58, 0x4, 0x2, 0x5, 0x7, 0x20, 0x80, 0x6, 0x5bfd, 0x9, 0x1, 0x5, 0x0, 0x0, 0x6, 0x63, 0x1, 0x8000, 0x849a], [0x6, 0xfffffff8, 0x200, 0x3, 0x3, 0xfffffffb, 0x3ff, 0x376, 0x7, 0x8, 0x80000001, 0x7, 0x9, 0x7, 0xc05d, 0x3, 0x4, 0x1000, 0xf00, 0x807, 0x5, 0x0, 0x5adf, 0x10000, 0x4, 0x9, 0x95, 0xc8f, 0x4f, 0x8001, 0x5, 0x3, 0x7, 0x2, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xffffffff, 0x2, 0x2, 0x7fff, 0x441e8210, 0x5, 0x2, 0x7, 0x67000, 0x1, 0x4, 0x6, 0x6, 0x9, 0x6, 0x800, 0x81, 0x0, 0x4c0, 0x7, 0x8, 0x1800, 0x3, 0x0, 0x4], [0x0, 0x8000, 0x1000, 0xffff, 0x4, 0x2b21, 0xff, 0xae, 0x4, 0x6, 0x6, 0x8001, 0x9, 0x9, 0x3, 0x1000, 0x1f, 0x3, 0x80000001, 0x6, 0xffffffff, 0x8, 0x3, 0x1, 0x6, 0x0, 0x8, 0x1, 0x4bd6, 0x3, 0x9, 0x13, 0x4, 0x25e, 0x101, 0xa5, 0x101, 0x2, 0x1, 0x7, 0xe7e, 0x4a48, 0x9, 0x1, 0x6, 0x4, 0x8, 0x3f2c, 0x9, 0x7, 0xffff8001, 0x1, 0xfff, 0x4, 0xfffff66e, 0x6, 0xffff, 0x0, 0x0, 0x7f, 0xbafe, 0x0, 0x2b4c3ba2, 0x3], [0x2, 0x8, 0x1ec, 0x800, 0x4e5f, 0x8, 0x10000, 0xbff0, 0x2, 0xfffffffb, 0x8000, 0x80000001, 0x2, 0x3, 0xc3, 0x1, 0x4, 0x3, 0x2, 0x5fe, 0x1ea1, 0x6, 0x4, 0x0, 0x8, 0x80000001, 0xceb, 0x5, 0x57b, 0x1, 0x1, 0x3, 0x5, 0x80, 0x5, 0x7829522c, 0xf4, 0x9, 0x4, 0x8, 0x100, 0x0, 0x9, 0x3, 0xe70985fe, 0x4, 0x2, 0x10001, 0x8, 0x5, 0xff, 0x1, 0x1000, 0x2, 0x0, 0x2, 0x1, 0x4, 0x8, 0x9, 0x0, 0x0, 0xff, 0x4]}, 0x45c) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:59:56 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x9) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast=0x18}, @generic={0x0, "89fb5797e760e49e8ec93b9ed957"}, @ipx={0x4, 0x0, 0x0, "3ac875e74b59"}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7094d605", @ANYRES16=r6, @ANYBLOB="00012dbd7000fcdbdf250a00000005003800000000000500300000000000"], 0x24}}, 0x4008011) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x20048000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 12:59:56 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000240)='..', &(0x7f0000000140)='./file0\x00') 12:59:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="feca6a8cc18ca36b472b9b0e28ddaeaa507b6d625433c008e0b9a8fa783be6e7111667eb3904cd9bebc9fcfe6a0984da7edbc6e747745e43e777c5e382824b1114ba45ca4dbbec458bc9820e6ea60c5f3c2b2627552473fa33608d0f59f7835184cb23b997f73deae5230b4f7df7e52bc480f2dc9928c01d250c167fd8eaae31b4db0fe9", 0x84}, {0x0}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x4010) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {0x2, 0x101, 0x7, 0x8}, 0x49, [0xe4d, 0x4, 0x3, 0x7, 0x4, 0x5, 0x5, 0x5, 0xe0fa, 0xff, 0xffffffff, 0xecae, 0x2, 0x8001, 0x6, 0x8, 0x20, 0x8000, 0x7, 0x81a, 0x8, 0x2, 0xa2c0, 0x1, 0x43d, 0x0, 0x6, 0x1, 0xffffffff, 0x4, 0xeb, 0x9, 0x1c00000, 0x5, 0x9fb, 0x0, 0x81, 0x3, 0x5, 0x9, 0x10001, 0x5, 0x1ff, 0x2, 0xe047, 0x58, 0x4, 0x2, 0x5, 0x7, 0x20, 0x80, 0x6, 0x5bfd, 0x9, 0x1, 0x5, 0x0, 0x0, 0x6, 0x63, 0x1, 0x8000, 0x849a], [0x6, 0xfffffff8, 0x200, 0x3, 0x3, 0xfffffffb, 0x3ff, 0x376, 0x7, 0x8, 0x80000001, 0x7, 0x9, 0x7, 0xc05d, 0x3, 0x4, 0x1000, 0xf00, 0x807, 0x5, 0x0, 0x5adf, 0x10000, 0x4, 0x9, 0x95, 0xc8f, 0x4f, 0x8001, 0x5, 0x3, 0x7, 0x2, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xffffffff, 0x2, 0x2, 0x7fff, 0x441e8210, 0x5, 0x2, 0x7, 0x67000, 0x1, 0x4, 0x6, 0x6, 0x9, 0x6, 0x800, 0x81, 0x0, 0x4c0, 0x7, 0x8, 0x1800, 0x3, 0x0, 0x4], [0x0, 0x8000, 0x1000, 0xffff, 0x4, 0x2b21, 0xff, 0xae, 0x4, 0x6, 0x6, 0x8001, 0x9, 0x9, 0x3, 0x1000, 0x1f, 0x3, 0x80000001, 0x6, 0xffffffff, 0x8, 0x3, 0x1, 0x6, 0x0, 0x8, 0x1, 0x4bd6, 0x3, 0x9, 0x13, 0x4, 0x25e, 0x101, 0xa5, 0x101, 0x2, 0x1, 0x7, 0xe7e, 0x4a48, 0x9, 0x1, 0x6, 0x4, 0x8, 0x3f2c, 0x9, 0x7, 0xffff8001, 0x1, 0xfff, 0x4, 0xfffff66e, 0x6, 0xffff, 0x0, 0x0, 0x7f, 0xbafe, 0x0, 0x2b4c3ba2, 0x3], [0x2, 0x8, 0x1ec, 0x800, 0x4e5f, 0x8, 0x10000, 0xbff0, 0x2, 0xfffffffb, 0x8000, 0x80000001, 0x2, 0x3, 0xc3, 0x1, 0x4, 0x3, 0x2, 0x5fe, 0x1ea1, 0x6, 0x4, 0x0, 0x8, 0x80000001, 0xceb, 0x5, 0x57b, 0x1, 0x1, 0x3, 0x5, 0x80, 0x5, 0x7829522c, 0xf4, 0x9, 0x4, 0x8, 0x100, 0x0, 0x9, 0x3, 0xe70985fe, 0x4, 0x2, 0x10001, 0x8, 0x5, 0xff, 0x1, 0x1000, 0x2, 0x0, 0x2, 0x1, 0x4, 0x8, 0x9, 0x0, 0x0, 0xff, 0x4]}, 0x45c) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:59:56 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) 12:59:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="feca6a8cc18ca36b472b9b0e28ddaeaa507b6d625433c008e0b9a8fa783be6e7111667eb3904cd9bebc9fcfe6a0984da7edbc6e747745e43e777c5e382824b1114ba45ca4dbbec458bc9820e6ea60c5f3c2b2627552473fa33608d0f59f7835184cb23b997f73deae5230b4f7df7e52bc480f2dc9928c01d250c167fd8eaae31b4db0fe9", 0x84}, {0x0}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x4010) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {0x2, 0x101, 0x7, 0x8}, 0x49, [0xe4d, 0x4, 0x3, 0x7, 0x4, 0x5, 0x5, 0x5, 0xe0fa, 0xff, 0xffffffff, 0xecae, 0x2, 0x8001, 0x6, 0x8, 0x20, 0x8000, 0x7, 0x81a, 0x8, 0x2, 0xa2c0, 0x1, 0x43d, 0x0, 0x6, 0x1, 0xffffffff, 0x4, 0xeb, 0x9, 0x1c00000, 0x5, 0x9fb, 0x0, 0x81, 0x3, 0x5, 0x9, 0x10001, 0x5, 0x1ff, 0x2, 0xe047, 0x58, 0x4, 0x2, 0x5, 0x7, 0x20, 0x80, 0x6, 0x5bfd, 0x9, 0x1, 0x5, 0x0, 0x0, 0x6, 0x63, 0x1, 0x8000, 0x849a], [0x6, 0xfffffff8, 0x200, 0x3, 0x3, 0xfffffffb, 0x3ff, 0x376, 0x7, 0x8, 0x80000001, 0x7, 0x9, 0x7, 0xc05d, 0x3, 0x4, 0x1000, 0xf00, 0x807, 0x5, 0x0, 0x5adf, 0x10000, 0x4, 0x9, 0x95, 0xc8f, 0x4f, 0x8001, 0x5, 0x3, 0x7, 0x2, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xffffffff, 0x2, 0x2, 0x7fff, 0x441e8210, 0x5, 0x2, 0x7, 0x67000, 0x1, 0x4, 0x6, 0x6, 0x9, 0x6, 0x800, 0x81, 0x0, 0x4c0, 0x7, 0x8, 0x1800, 0x3, 0x0, 0x4], [0x0, 0x8000, 0x1000, 0xffff, 0x4, 0x2b21, 0xff, 0xae, 0x4, 0x6, 0x6, 0x8001, 0x9, 0x9, 0x3, 0x1000, 0x1f, 0x3, 0x80000001, 0x6, 0xffffffff, 0x8, 0x3, 0x1, 0x6, 0x0, 0x8, 0x1, 0x4bd6, 0x3, 0x9, 0x13, 0x4, 0x25e, 0x101, 0xa5, 0x101, 0x2, 0x1, 0x7, 0xe7e, 0x4a48, 0x9, 0x1, 0x6, 0x4, 0x8, 0x3f2c, 0x9, 0x7, 0xffff8001, 0x1, 0xfff, 0x4, 0xfffff66e, 0x6, 0xffff, 0x0, 0x0, 0x7f, 0xbafe, 0x0, 0x2b4c3ba2, 0x3], [0x2, 0x8, 0x1ec, 0x800, 0x4e5f, 0x8, 0x10000, 0xbff0, 0x2, 0xfffffffb, 0x8000, 0x80000001, 0x2, 0x3, 0xc3, 0x1, 0x4, 0x3, 0x2, 0x5fe, 0x1ea1, 0x6, 0x4, 0x0, 0x8, 0x80000001, 0xceb, 0x5, 0x57b, 0x1, 0x1, 0x3, 0x5, 0x80, 0x5, 0x7829522c, 0xf4, 0x9, 0x4, 0x8, 0x100, 0x0, 0x9, 0x3, 0xe70985fe, 0x4, 0x2, 0x10001, 0x8, 0x5, 0xff, 0x1, 0x1000, 0x2, 0x0, 0x2, 0x1, 0x4, 0x8, 0x9, 0x0, 0x0, 0xff, 0x4]}, 0x45c) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:59:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpgid(0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x1, 0x0, 0x4, 0x0, 0x8001, {}, {0x0, 0x0, 0x3, 0x0, 0x5, 0x8, "c7043e09"}, 0x27e, 0x2, @offset=0x1, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = socket(0x2, 0x0, 0xff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060118000000000000000001000007050001000700000014b243cade46ff4a14285f99d1f21805234b33dbced21a71161c081b10d18a3b18e3166a88a738eafeb8e93d904e51d434e1feeb6e94b0b05fb0251b8c237d3bbd0f6f2bcefee75657c24121cd4a95fa"], 0x1c}}, 0x0) dup(r2) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 12:59:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:59:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:59:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:59:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1, 0x0, 0x0, 0xa00}}], 0x503, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:59:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:59:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:59:57 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x5a, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000000)=0x68) 12:59:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:57 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x5a, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000000)=0x68) 12:59:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpgid(0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x1, 0x0, 0x4, 0x0, 0x8001, {}, {0x0, 0x0, 0x3, 0x0, 0x5, 0x8, "c7043e09"}, 0x27e, 0x2, @offset=0x1, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = socket(0x2, 0x0, 0xff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060118000000000000000001000007050001000700000014b243cade46ff4a14285f99d1f21805234b33dbced21a71161c081b10d18a3b18e3166a88a738eafeb8e93d904e51d434e1feeb6e94b0b05fb0251b8c237d3bbd0f6f2bcefee75657c24121cd4a95fa"], 0x1c}}, 0x0) dup(r2) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 12:59:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:59:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x24001, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) dup2(r2, r0) 12:59:58 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) socket$inet6(0xa, 0x0, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 12:59:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1, 0x0, 0x0, 0xa00}}], 0x503, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:59:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b63"], 0x78) 12:59:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b63"], 0x78) 12:59:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:59:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:58 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = getgid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x17) 12:59:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) dup2(r1, r0) 12:59:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:59 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) socket$inet6(0xa, 0x0, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 12:59:59 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140), 0x8b, 0x0, &(0x7f00000001c0)={r1}, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) 12:59:59 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000740)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:59:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 12:59:59 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080)=0x918, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) 12:59:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:59:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 12:59:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x4, 0x5, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20c200a2, r2}) 12:59:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 12:59:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, 0x0) 12:59:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:00:00 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) socket$inet6(0xa, 0x0, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 13:00:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 13:00:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/52, 0x7ffff003}], 0x1) 13:00:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:00:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:00:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 13:00:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:00:02 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) socket$inet6(0xa, 0x0, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 13:00:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = epoll_create(0x7fffffff) epoll_pwait(r1, &(0x7f0000000bc0)=[{}], 0x1, 0x90000200, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) 13:00:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(0xffffffffffffffff, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 13:00:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:00:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, '\x00', "2abd7e7b1b92b68c11cbcc766d84eb975916b6ddc16bfffffd00", "8219cb14", "0000002000000018"}, 0x38) r3 = open(&(0x7f0000000140)='./file0\x00', 0x42042, 0x0) dup3(r3, r0, 0x0) 13:00:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(0xffffffffffffffff, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 13:00:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:00:02 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:00:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(0xffffffffffffffff, 0x2) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 13:00:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:00:02 executing program 3: 13:00:02 executing program 3: 13:00:03 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) socket$inet6(0xa, 0x0, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:00:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:00:05 executing program 0: 13:00:05 executing program 3: 13:00:05 executing program 4: 13:00:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) 13:00:05 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) socket$inet6(0xa, 0x0, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:00:05 executing program 3: 13:00:05 executing program 4: 13:00:05 executing program 0: 13:00:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) read$snddsp(r2, &(0x7f0000000040)=""/8, 0x8) sendfile(r4, r2, 0x0, 0x6f0a77bd) [ 959.631048][ T7471] ================================================================== [ 959.639174][ T7471] BUG: KCSAN: data-race in ion_heap_deferred_free / mm_update_next_owner [ 959.647558][ T7471] [ 959.649872][ T7471] write to 0xffff888126a3d064 of 4 bytes by task 4879 on cpu 0: [ 959.657481][ T7471] ion_heap_deferred_free+0x29a/0x330 [ 959.662850][ T7471] kthread+0x203/0x230 [ 959.666914][ T7471] ret_from_fork+0x1f/0x30 [ 959.671315][ T7471] [ 959.673634][ T7471] read to 0xffff888126a3d064 of 4 bytes by task 7471 on cpu 1: [ 959.681249][ T7471] mm_update_next_owner+0x376/0x5a0 [ 959.686514][ T7471] do_exit+0x63c/0x11e0 [ 959.690655][ T7471] do_group_exit+0xae/0x1a0 [ 959.695142][ T7471] __x64_sys_exit_group+0x2b/0x30 [ 959.700151][ T7471] do_syscall_64+0xc7/0x3b0 [ 959.704635][ T7471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 959.710501][ T7471] [ 959.712813][ T7471] Reported by Kernel Concurrency Sanitizer on: [ 959.718950][ T7471] CPU: 1 PID: 7471 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0 [ 959.727510][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.737542][ T7471] ================================================================== [ 959.745578][ T7471] Kernel panic - not syncing: panic_on_warn set ... [ 959.752145][ T7471] CPU: 1 PID: 7471 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0 [ 959.760715][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.771095][ T7471] Call Trace: [ 959.774376][ T7471] dump_stack+0x11d/0x187 [ 959.778701][ T7471] panic+0x210/0x640 [ 959.782591][ T7471] ? vprintk_func+0x89/0x13a [ 959.787170][ T7471] kcsan_report.cold+0xc/0x1a [ 959.792284][ T7471] kcsan_setup_watchpoint+0x3fb/0x440 [ 959.797654][ T7471] mm_update_next_owner+0x376/0x5a0 [ 959.802842][ T7471] do_exit+0x63c/0x11e0 [ 959.806990][ T7471] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 959.812868][ T7471] ? __read_once_size+0x7c/0x100 [ 959.817840][ T7471] ? zap_other_threads+0x113/0x140 [ 959.822938][ T7471] do_group_exit+0xae/0x1a0 [ 959.827437][ T7471] __x64_sys_exit_group+0x2b/0x30 [ 959.832449][ T7471] do_syscall_64+0xc7/0x3b0 [ 959.836957][ T7471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 959.842918][ T7471] RIP: 0033:0x45ca29 [ 959.846843][ T7471] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 959.866432][ T7471] RSP: 002b:00007ffebc836ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 959.874827][ T7471] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045ca29 [ 959.882792][ T7471] RDX: 0000000000416621 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 959.890756][ T7471] RBP: 0000000000000000 R08: 00000000d3875ad4 R09: 00007ffebc836d40 [ 959.898715][ T7471] R10: 00000000d3875ad0 R11: 0000000000000246 R12: 0000000000000000 [ 959.906684][ T7471] R13: 00007ffebc836d40 R14: 0000000000000000 R15: 00007ffebc836d50 [ 961.054580][ T7471] Shutting down cpus with NMI [ 961.060827][ T7471] Kernel Offset: disabled [ 961.065202][ T7471] Rebooting in 86400 seconds..