512.287346][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.447382][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.447413][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.447435][T14023] usb 8-1: Product: syz [ 512.447450][T14023] usb 8-1: Manufacturer: syz [ 512.447465][T14023] usb 8-1: SerialNumber: syz [ 512.811530][ T40] audit: type=1804 audit(1653802947.636:619): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1190/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 513.237337][T14023] usb 8-1: 0:2 : does not exist [ 513.250205][T14023] usb 8-1: USB disconnect, device number 40 [ 513.265057][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:42:28 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x6b80, 0x0, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080), 0x8}) 05:42:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:28 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x22, 0x0, 0x0) 05:42:28 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:42:28 executing program 0: syz_clone3(&(0x7f0000000780)={0x1000c0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0], 0x1}, 0x58) 05:42:28 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), 0x0) 05:42:28 executing program 0: io_setup(0xceb9, &(0x7f0000000000)) io_submit(0x0, 0xfffffffffffffe7c, 0x0) 05:42:28 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, '\x00', @p_u16=0x0}}) 05:42:28 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x651000, 0x0) 05:42:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@mcast2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'syztnl0\x00', 0x0}) openat$vcsu(0xffffff9c, &(0x7f0000000c40), 0x0, 0x0) [ 514.017252][T11861] usb 8-1: new high-speed USB device number 41 using dummy_hcd 05:42:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 514.277580][T11861] usb 8-1: Using ep0 maxpacket: 8 [ 514.409999][T11861] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.410026][T11861] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.637291][T11861] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.637316][T11861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.637329][T11861] usb 8-1: Product: syz [ 514.637338][T11861] usb 8-1: Manufacturer: syz [ 514.637347][T11861] usb 8-1: SerialNumber: syz [ 514.997309][ T40] audit: type=1804 audit(1653802949.826:620): pid=16285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1191/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 515.347400][T11861] usb 8-1: 0:2 : does not exist [ 515.359225][T11861] usb 8-1: USB disconnect, device number 41 [ 515.387907][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:42:30 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 05:42:30 executing program 0: setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 05:42:30 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:42:30 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:30 executing program 2: socket(0x22, 0x0, 0x7585) 05:42:30 executing program 0: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000400)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x0, 0x300) 05:42:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) 05:42:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 05:42:30 executing program 2: sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x19232cfe8e4f87e6) 05:42:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) [ 516.097154][T14021] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 516.337109][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 516.467517][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.467545][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.628140][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.628161][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.628173][T14021] usb 8-1: Product: syz [ 516.628182][T14021] usb 8-1: Manufacturer: syz [ 516.628210][T14021] usb 8-1: SerialNumber: syz [ 517.003347][ T40] audit: type=1804 audit(1653802951.826:621): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1192/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 517.327738][T14021] usb 8-1: 0:2 : does not exist [ 517.345167][T14021] usb 8-1: USB disconnect, device number 42 [ 517.371749][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:42:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 05:42:32 executing program 0: syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x60742) 05:42:32 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:42:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:32 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0xf, &(0x7f0000000f80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}}) 05:42:32 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 05:42:32 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) 05:42:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 518.076978][ T3094] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 518.077081][ T4122] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 518.108750][T13884] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 518.317231][ T3094] usb 5-1: Using ep0 maxpacket: 8 [ 518.317312][ T4122] usb 8-1: Using ep0 maxpacket: 8 [ 518.347700][T13884] usb 7-1: Using ep0 maxpacket: 32 [ 518.459397][ T4122] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.459416][ T4122] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:42:33 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 518.537658][ T3094] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 518.567193][T13884] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.567231][T13884] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.567262][T13884] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 518.567275][T13884] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 518.567289][T13884] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 518.567302][T13884] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 518.657689][ T4122] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.657721][ T4122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.657741][ T4122] usb 8-1: Product: syz [ 518.657753][ T4122] usb 8-1: Manufacturer: syz [ 518.657767][ T4122] usb 8-1: SerialNumber: syz [ 518.749249][T13884] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.749270][T13884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.749282][T13884] usb 7-1: Product: syz [ 518.749291][T13884] usb 7-1: Manufacturer: syz [ 518.749300][T13884] usb 7-1: SerialNumber: syz [ 518.749925][ T3094] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.749941][ T3094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.749952][ T3094] usb 5-1: Product: syz [ 518.749961][ T3094] usb 5-1: Manufacturer: syz [ 518.749969][ T3094] usb 5-1: SerialNumber: syz [ 518.800489][ T3094] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 519.001187][ T3094] usb 5-1: USB disconnect, device number 15 [ 519.034763][ T40] audit: type=1804 audit(1653802953.856:622): pid=16350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1193/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 519.037375][T13884] cdc_ncm 7-1:1.0: bind() failure [ 519.041826][T13884] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 519.041857][T13884] cdc_ncm 7-1:1.1: bind() failure [ 519.046274][T13884] usb 7-1: USB disconnect, device number 12 [ 519.408466][ T4122] usb 8-1: 0:2 : does not exist [ 519.422086][ T4122] usb 8-1: USB disconnect, device number 43 [ 519.436176][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:42:34 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "949ce2b17dbce209448dbeeabb74732b"}]}}) [ 519.797073][T11861] usb 5-1: new high-speed USB device number 16 using dummy_hcd 05:42:34 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x20, 0x80}, {0x6, 0x24, 0x1a, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xff, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x40}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x7f, 0x0, 0x7, 0x8, 0x3f}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x73, "126c67822890c3973e50dcc80c18a9a0"}]}, 0x5, [{0x0, 0x0}, {0x2, &(0x7f0000000240)=@string={0x2}}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) 05:42:34 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:42:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 520.067045][T11861] usb 5-1: Using ep0 maxpacket: 32 [ 520.107347][ T3739] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 520.158184][ T172] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 520.297532][T11861] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.297575][T11861] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.297640][T11861] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 520.297664][T11861] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 520.297690][T11861] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.297713][T11861] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 520.377073][ T3739] usb 7-1: Using ep0 maxpacket: 32 [ 520.407109][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 520.507294][T11861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.507320][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.507332][T11861] usb 5-1: Product: syz [ 520.507341][T11861] usb 5-1: Manufacturer: syz [ 520.507350][T11861] usb 5-1: SerialNumber: syz [ 520.527431][ T3739] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.527461][ T3739] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 520.527475][ T3739] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 520.527490][ T3739] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.527503][ T3739] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 520.557714][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.557744][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.737540][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.737576][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.737595][ T172] usb 8-1: Product: syz [ 520.737608][ T172] usb 8-1: Manufacturer: syz [ 520.737622][ T172] usb 8-1: SerialNumber: syz [ 520.787142][T11861] cdc_ncm 5-1:1.0: bind() failure [ 520.789717][T11861] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 520.789740][T11861] cdc_ncm 5-1:1.1: bind() failure [ 520.797445][T11861] usb 5-1: USB disconnect, device number 16 [ 520.819234][ T3739] usb 7-1: string descriptor 0 read error: -22 05:42:35 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 520.819310][ T3739] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.819326][ T3739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.107291][ T3739] cdc_ncm 7-1:1.0: bind() failure [ 521.113081][ T3739] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 521.113120][ T3739] cdc_ncm 7-1:1.1: bind() failure [ 521.124364][ T40] audit: type=1804 audit(1653802955.946:623): pid=16365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1194/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 521.137014][ T3739] usb 7-1: USB disconnect, device number 13 05:42:36 executing program 0: socketpair(0x15, 0x0, 0x0, &(0x7f0000000540)) 05:42:36 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, 0x0) 05:42:36 executing program 2: socketpair(0x1e, 0x80000, 0x90, &(0x7f0000000a40)) [ 521.577115][ T172] usb 8-1: 0:2 : does not exist [ 521.592179][ T172] usb 8-1: USB disconnect, device number 44 05:42:36 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0) [ 521.621582][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:42:36 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x40c0) [ 521.647082][T11861] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 521.887019][T11861] usb 5-1: Using ep0 maxpacket: 8 05:42:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff) 05:42:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:36 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) [ 522.008736][T11861] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 522.008770][T11861] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 05:42:36 executing program 2: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x28c0) syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xb903}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x0, 0xff, 0x0, 0x8}, 0x32, &(0x7f0000000f80)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xe0, 0x5, 0x0, 0x0, 0x8, [0x3f00, 0xff3fc0, 0x3fc0, 0x0, 0x0]}]}, 0x2, [{0x17, &(0x7f0000001000)=@string={0x17, 0x3, "70d4c8293e60c570a222a55ebf7a2df78cb050e915"}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) [ 522.008795][T11861] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.167116][T11861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 522.167150][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.167171][T11861] usb 5-1: Product: syz [ 522.167228][T11861] usb 5-1: Manufacturer: syz [ 522.167244][T11861] usb 5-1: SerialNumber: syz [ 522.347084][T11858] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 522.367585][ T172] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 522.411194][ T15] usb 5-1: USB disconnect, device number 17 [ 522.607096][ T172] usb 7-1: Using ep0 maxpacket: 8 [ 522.607253][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 522.757025][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.757044][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.817429][ T172] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 05:42:37 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000280), 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ecm(0x3, 0x61, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x2, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, '\vl\\'}, {0x5, 0x24, 0x0, 0xb903}, {0xd}, [@country_functional={0x8, 0x24, 0x7, 0x0, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xea}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x4, 0xff, 0x9, 0x8}, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000001000)=@string={0x2}}]}) 05:42:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 522.917397][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.917429][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.917448][T11858] usb 8-1: Product: syz [ 522.917462][T11858] usb 8-1: Manufacturer: syz [ 522.917477][T11858] usb 8-1: SerialNumber: syz [ 522.988783][ T172] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.988806][ T172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.988818][ T172] usb 7-1: Product: syz [ 522.988832][ T172] usb 7-1: SerialNumber: syz [ 523.017480][T16382] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 523.217055][T11860] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 523.307882][ T172] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 523.310571][ T172] usb 7-1: USB disconnect, device number 14 05:42:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.337324][T11858] usb 8-1: 0:2 : does not exist [ 523.351927][T11858] usb 8-1: USB disconnect, device number 45 [ 523.390911][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.478024][T11860] usb 5-1: Using ep0 maxpacket: 8 [ 523.657915][T11860] usb 5-1: unable to get BOS descriptor or descriptor too short 05:42:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:38 executing program 2: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x28c0) syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xb903}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x0, 0xff, 0x0, 0x8}, 0x32, &(0x7f0000000f80)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xe0, 0x5, 0x0, 0x0, 0x8, [0x3f00, 0xff3fc0, 0x3fc0, 0x0, 0x0]}]}, 0x2, [{0x17, &(0x7f0000001000)=@string={0x17, 0x3, "70d4c8293e60c570a222a55ebf7a2df78cb050e915"}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) 05:42:38 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) [ 523.757405][T11860] usb 5-1: config 1 interface 0 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 523.757429][T11860] usb 5-1: config 1 interface 0 has no altsetting 0 [ 523.803417][T11860] usb 5-1: language id specifier not provided by device, defaulting to English [ 523.917281][T11860] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.917305][T11860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.917319][T11860] usb 5-1: Product: syz [ 523.917328][T11860] usb 5-1: Manufacturer: syz [ 523.917337][T11860] usb 5-1: SerialNumber: syz [ 523.942539][T16391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 524.027067][ T4122] usb 7-1: new high-speed USB device number 15 using dummy_hcd 05:42:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 524.057123][ T172] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 524.208200][T11860] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 524.210383][T11860] usb 5-1: USB disconnect, device number 18 [ 524.286970][ T4122] usb 7-1: Using ep0 maxpacket: 8 [ 524.297093][ T172] usb 8-1: Using ep0 maxpacket: 8 05:42:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 524.417631][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.417652][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.517178][ T4122] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 524.577253][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.577291][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.577304][ T172] usb 8-1: Product: syz [ 524.577312][ T172] usb 8-1: Manufacturer: syz [ 524.577321][ T172] usb 8-1: SerialNumber: syz 05:42:39 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xeb, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}, [{}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x4, [@generic={0x14, 0x10, 0x4, "4936962035a7f42e6f6f6610862c0f2404"}, @wireless={0xb}, @ptm_cap={0x3}, @generic={0x7, 0x10, 0x2, "ee8dbb67"}]}}) [ 524.697477][ T4122] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.697575][ T4122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.697597][ T4122] usb 7-1: Product: syz [ 524.697613][ T4122] usb 7-1: SerialNumber: syz [ 524.728623][T16402] raw-gadget gadget: fail, usb_ep_enable returned -22 05:42:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 524.957423][ T172] usb 8-1: 0:2 : does not exist [ 524.974495][ T172] usb 8-1: USB disconnect, device number 46 [ 524.974606][ T3094] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 525.016744][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.037707][ T4122] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 525.044711][ T4122] usb 7-1: USB disconnect, device number 15 05:42:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 525.277017][ T3094] usb 5-1: Using ep0 maxpacket: 8 05:42:40 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:42:40 executing program 2: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x28c0) syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xb903}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x0, 0xff, 0x0, 0x8}, 0x32, &(0x7f0000000f80)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xe0, 0x5, 0x0, 0x0, 0x8, [0x3f00, 0xff3fc0, 0x3fc0, 0x0, 0x0]}]}, 0x2, [{0x17, &(0x7f0000001000)=@string={0x17, 0x3, "70d4c8293e60c570a222a55ebf7a2df78cb050e915"}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) [ 525.527135][ T3094] usb 5-1: config 1 interface 0 altsetting 235 bulk endpoint 0x1 has invalid maxpacket 1024 [ 525.527159][ T3094] usb 5-1: config 1 interface 0 altsetting 235 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.527173][ T3094] usb 5-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 0 [ 525.527187][ T3094] usb 5-1: config 1 interface 0 has no altsetting 0 05:42:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 525.711406][ T3094] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 525.711483][ T3094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.711505][ T3094] usb 5-1: Product: syz [ 525.711518][ T3094] usb 5-1: Manufacturer: syz [ 525.711530][ T3094] usb 5-1: SerialNumber: syz [ 525.737483][T16414] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 525.757034][T11860] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 525.777073][T14020] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 526.007204][T11860] usb 8-1: Using ep0 maxpacket: 8 [ 526.022252][ T3094] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 235 proto 1 vid 0x0525 pid 0xA4A8 [ 526.027375][T14020] usb 7-1: Using ep0 maxpacket: 8 [ 526.037789][ T3094] usb 5-1: USB disconnect, device number 19 [ 526.040788][ T3094] usblp0: removed 05:42:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 526.127174][T11860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.127193][T11860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.247433][T14020] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 526.297143][T11860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.297164][T11860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.297177][T11860] usb 8-1: Product: syz [ 526.297186][T11860] usb 8-1: Manufacturer: syz [ 526.297195][T11860] usb 8-1: SerialNumber: syz [ 526.427278][T14020] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.427310][T14020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.427331][T14020] usb 7-1: Product: syz 05:42:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000500), 0x10) [ 526.427346][T14020] usb 7-1: SerialNumber: syz [ 526.450925][T16428] raw-gadget gadget: fail, usb_ep_enable returned -22 05:42:41 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 526.494833][ T40] audit: type=1400 audit(1653802961.316:624): avc: denied { setopt } for pid=16437 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 05:42:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) [ 526.531845][ T40] audit: type=1400 audit(1653802961.356:625): avc: denied { ioctl } for pid=16439 comm="syz-executor.0" path="socket:[113719]" dev="sockfs" ino=113719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 05:42:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) [ 526.677184][T11860] usb 8-1: 0:2 : does not exist [ 526.684041][T11860] usb 8-1: USB disconnect, device number 47 [ 526.714933][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.767787][T14020] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 526.770135][T14020] usb 7-1: USB disconnect, device number 16 05:42:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:42 executing program 2: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x28c0) syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xb903}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x0, 0xff, 0x0, 0x8}, 0x32, &(0x7f0000000f80)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xe0, 0x5, 0x0, 0x0, 0x8, [0x3f00, 0xff3fc0, 0x3fc0, 0x0, 0x0]}]}, 0x2, [{0x17, &(0x7f0000001000)=@string={0x17, 0x3, "70d4c8293e60c570a222a55ebf7a2df78cb050e915"}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) 05:42:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) 05:42:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) 05:42:42 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$eventfd(r0, 0x0, 0x0) 05:42:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 05:42:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) [ 527.311683][ T40] audit: type=1804 audit(1653802962.136:626): pid=16453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1198/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 527.477082][ T3094] usb 7-1: new high-speed USB device number 17 using dummy_hcd 05:42:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) [ 527.747208][ T3094] usb 7-1: Using ep0 maxpacket: 8 [ 527.878544][ T40] audit: type=1804 audit(1653802962.706:627): pid=16466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1199/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 527.997954][ T3094] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 528.177304][ T3094] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.177335][ T3094] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.177356][ T3094] usb 7-1: Product: syz [ 528.177370][ T3094] usb 7-1: SerialNumber: syz [ 528.199746][T16452] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 528.498293][ T3094] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 528.501650][ T3094] usb 7-1: USB disconnect, device number 17 05:42:43 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20142, 0x0) 05:42:43 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='check=relaxed,time_offset=0x00000000000002d7,dots,dots,debug,dots,check=normal']) 05:42:43 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0xa3, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003020000202505a1a4400001020301090291000201e890690904000001020d00000724060001226705240005000d240f010900000004000080e006241a98050008241c0200800100042402010c241b810003001ffd01000708241c0200009206072414018000b00c241b010100081229070000090581030000e00102090401"], &(0x7f00000005c0)={0x0, 0x0, 0x14d, &(0x7f0000000600)=ANY=[@ANYBLOB="050f4d01050b10010c0000d2722700089b100351157b7c76c608992046b0ed6a86e03edeab6b96a086c18abf4f863d08a2e0274baa9917235feb927aa7bfb7640745266a74dafeab776420b3d57cbffcd77602f7af26f5af08cf4378d9f019ee4c6002c9d9f64cc53cac2f40a99ef9589c567b19a8c8a4b9885bb0b3d039dea912fd9ed054736b0d73385446e3a5b045550cd53d77965c679cc1eed56c53ed6fe56fac4c5c243660355e6ffb"]}) [ 529.016777][T16478] FAT-fs (loop2): bogus number of reserved sectors [ 529.016792][T16478] FAT-fs (loop2): Can't find a valid FAT filesystem 05:42:43 executing program 2: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0x29, &(0x7f0000000200)=@string={0x29, 0x3, "cec798aead9d192255358afdb6809d25722833af76fc09892e3104c693c87441eb5c54de215410"}}]}) [ 529.115900][ T40] audit: type=1804 audit(1653802963.936:628): pid=16480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1200/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 [ 529.308752][T14020] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 529.347552][ T172] usb 7-1: new low-speed USB device number 18 using dummy_hcd 05:42:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:44 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) [ 529.577046][T14020] usb 5-1: Using ep0 maxpacket: 32 [ 529.592972][ T40] audit: type=1804 audit(1653802964.416:629): pid=16490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1201/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 529.707680][ T172] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 05:42:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 529.787307][T14020] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.787353][T14020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 224, changing to 11 [ 529.787382][T14020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.987426][T14020] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.987449][T14020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.987463][T14020] usb 5-1: Product: syz [ 529.987472][T14020] usb 5-1: Manufacturer: syz [ 529.987481][T14020] usb 5-1: SerialNumber: syz [ 530.070261][ T40] audit: type=1400 audit(1653802964.896:630): avc: denied { search } for pid=16495 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.075543][ T40] audit: type=1400 audit(1653802964.896:631): avc: denied { read } for pid=16496 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.075940][ T40] audit: type=1400 audit(1653802964.896:632): avc: denied { open } for pid=16496 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.076382][ T40] audit: type=1400 audit(1653802964.896:633): avc: denied { getattr } for pid=16496 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 05:42:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 530.268508][T14020] usb 5-1: selecting invalid altsetting 1 [ 530.297803][T14020] cdc_ncm 5-1:1.0: bind() failure [ 530.308576][T14020] usb 5-1: USB disconnect, device number 20 [ 530.327277][ T172] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 530.327299][ T172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.327313][ T172] usb 7-1: SerialNumber: 쟎꺘鶭∙㕕ﶊ肶â–â¡²ê¼³ï±¶è¤‰ã„®ì˜„ì¢“ä…´å³«å¡ 05:42:45 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) [ 530.571531][ T15] usb 7-1: USB disconnect, device number 18 05:42:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(r0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 05:42:45 executing program 2: bpf$MAP_CREATE(0x4, &(0x7f0000001ac0), 0x48) 05:42:45 executing program 0: getitimer(0x0, &(0x7f0000000480)) 05:42:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x5}, 0x48) 05:42:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x19}, 0x48) 05:42:46 executing program 0: socketpair(0x28, 0x0, 0x3, &(0x7f0000000380)) 05:42:46 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pread64(r0, 0x0, 0x0, 0x0) 05:42:46 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:46 executing program 0: bpf$MAP_CREATE(0x11, &(0x7f0000001ac0), 0x48) 05:42:46 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x295e3a9a, 0x1) write$cgroup_pressure(r0, &(0x7f0000000340)={'some'}, 0xfffffffffffffef8) 05:42:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) 05:42:46 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x16}, 0x48) 05:42:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$unix(r0, 0x0, &(0x7f0000000180)) 05:42:46 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) writev(r0, 0x0, 0x0) [ 531.511495][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 531.511526][ T40] audit: type=1804 audit(1653802966.336:644): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1203/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 05:42:47 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:47 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2c40, 0x0) 05:42:47 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x5451, 0x0) 05:42:47 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:47 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) 05:42:47 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.impure\x00') 05:42:47 executing program 0: syz_open_dev$vcsa(&(0x7f0000001400), 0x0, 0x200800) [ 532.362909][ T40] audit: type=1400 audit(1653802967.186:645): avc: denied { read } for pid=16560 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 05:42:47 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000300)) [ 532.362970][ T40] audit: type=1400 audit(1653802967.186:646): avc: denied { open } for pid=16560 comm="syz-executor.2" path="/dev/nvram" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 532.365934][ T40] audit: type=1400 audit(1653802967.186:647): avc: denied { setattr } for pid=16560 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 532.637197][ T15] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 532.828413][ T15] usb 8-1: device descriptor read/64, error 18 [ 533.097194][ T15] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 533.307081][ T15] usb 8-1: device descriptor read/64, error 18 [ 533.427332][ T15] usb usb8-port1: attempt power cycle [ 533.847124][ T15] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 533.941407][ T15] usb 8-1: Invalid ep0 maxpacket: 0 [ 534.087122][ T15] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 534.197302][ T15] usb 8-1: Invalid ep0 maxpacket: 0 [ 534.197664][ T15] usb usb8-port1: unable to enumerate USB device 05:42:50 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:50 executing program 0: bpf$MAP_CREATE(0x1d, &(0x7f0000001ac0), 0x48) 05:42:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000500)=@raw={0xfe}) 05:42:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:50 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x2, &(0x7f0000000040)=@raw=[@map_fd], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:42:50 executing program 2: bpf$MAP_CREATE(0x2, 0x0, 0x700) 05:42:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) 05:42:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x77, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params, @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x28}}, 0x0) [ 535.451258][T16585] ip6tnl0: mtu less than device minimum [ 535.867053][ T3094] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 536.058829][ T3094] usb 8-1: device descriptor read/64, error 18 [ 536.327126][ T3094] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 536.538296][ T3094] usb 8-1: device descriptor read/64, error 18 [ 536.661262][ T3094] usb usb8-port1: attempt power cycle [ 537.086929][ T3094] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 537.207248][ T3094] usb 8-1: Invalid ep0 maxpacket: 0 [ 537.367049][ T3094] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 537.457150][ T3094] usb 8-1: Invalid ep0 maxpacket: 0 [ 537.457284][ T3094] usb usb8-port1: unable to enumerate USB device 05:42:53 executing program 3: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:53 executing program 2: syz_clone3(&(0x7f0000003e40)={0x28801100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:42:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f000000ad00)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 05:42:53 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:53 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) 05:42:53 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000005040)=[{&(0x7f0000003f80)="bb", 0x1}], 0x0, 0x0) 05:42:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x80) 05:42:53 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)={0x0, "cd9ff80e6cbdf957a4675a63cba7e61a6b51bb7f4ef03ab6bb92dceb9d4bf929810f93e763821e49338d6b3ce3834b2e0334a4520d725df57fe28acbd296c0b1"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "cd9ff80e6cbdf957a4675a63cba7e61a6b51bb7f4ef03ab6bb92dceb9d4bf929810f93e763821e49338d6b3ce3834b2e0334a4520d725df57fe28acbd296c0b1"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "cd9ff80e6cbdf957a4675a63cba7e61a6b51bb7f4ef03ab6bb92dceb9d4bf929810f93e763821e49338d6b3ce3834b2e0334a4520d725df57fe28acbd296c0b1"}, 0x48, 0xfffffffffffffffe) [ 538.907148][T11858] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 539.137102][T11858] usb 8-1: device descriptor read/64, error 18 [ 539.427096][T11858] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 539.627229][T11858] usb 8-1: device descriptor read/64, error 18 [ 539.750368][T11858] usb usb8-port1: attempt power cycle [ 540.169061][T11858] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 540.268191][T11858] usb 8-1: Invalid ep0 maxpacket: 0 [ 540.417138][T11858] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 540.528305][T11858] usb 8-1: Invalid ep0 maxpacket: 0 [ 540.528491][T11858] usb usb8-port1: unable to enumerate USB device 05:42:56 executing program 3: syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:56 executing program 2: syz_clone(0xc0088080, 0x0, 0x0, 0x0, &(0x7f0000002d40), &(0x7f0000002d80)="edf17af8c2b88c425525ed75d55e59de24e37bc9e98ee37e50812b82519a8737b69386fb31c2a4d1de72ec8b036729a3fb01b63a680d311627e59ed0d2bd094f0550842cabaa38d0a62b01ea64fa1a4b8d8ae03b62561c3d192635cb0a119e7e4e0ffc7a103c26adc30dc6213a12cb8ac77a188333797722bce3cd629732b3c0bb099e554971131f4b0b32d3b51f2f7c673b30aa22c0767050a533aa44b7b14aae2fc88b861c5430e99d2a076b2760b906bcb692517bb6a176bb78bc65506061d50149fdf08cc2625e364d05abc4c4fc6c9941eb3b699b903848e74bb410e7") 05:42:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x4, &(0x7f0000000d40)=@framed={{}, [@func]}, &(0x7f0000000dc0)='GPL\x00', 0x7, 0xd8, &(0x7f0000000e00)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:42:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250100000010"], 0x24}}, 0x0) 05:42:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) 05:42:56 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x4, 0x0, 0x0, 'z'}, 0x14}}, 0x0) 05:42:56 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x2, &(0x7f00000002c0)=@raw=[@generic, @call], &(0x7f0000000080)='GPL\x00', 0x5, 0xae, &(0x7f00000000c0)=""/174, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 541.569285][ T40] audit: type=1107 audit(1653802976.386:648): pid=16620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='z' [ 541.927417][T13884] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 542.177317][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 542.327210][T13884] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 542.327237][T13884] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 542.327256][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.497469][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.497503][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.497522][T13884] usb 8-1: Product: syz [ 542.497535][T13884] usb 8-1: Manufacturer: syz [ 542.497573][T13884] usb 8-1: SerialNumber: syz [ 542.865831][ T40] audit: type=1804 audit(1653802977.686:649): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1207/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 543.163110][T13884] usb 8-1: 0:2 : does not exist [ 543.190528][T13884] usb 8-1: USB disconnect, device number 60 [ 543.213153][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:42:58 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@dev, @random="d580675bc1ad", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0e1983", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 05:42:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 05:42:58 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:58 executing program 3: syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:42:58 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) 05:42:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) 05:42:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a00)=ANY=[@ANYBLOB="3c0000001000010800005355f5cc3d2e919477ea", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000140014"], 0x3c}}, 0x0) 05:42:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 543.713776][T16641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 543.726747][T16641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 543.729106][T16641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:42:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:42:58 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 543.917093][ T3739] usb 8-1: new high-speed USB device number 61 using dummy_hcd 05:42:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 544.157053][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 544.277288][ T3739] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 544.277306][ T3739] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 544.277318][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.437164][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.437194][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.437211][ T3739] usb 8-1: Product: syz [ 544.437224][ T3739] usb 8-1: Manufacturer: syz [ 544.437251][ T3739] usb 8-1: SerialNumber: syz [ 544.811359][ T40] audit: type=1804 audit(1653802979.636:650): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1208/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 545.097227][ T3739] usb 8-1: 0:2 : does not exist [ 545.112271][ T3739] usb 8-1: USB disconnect, device number 61 [ 545.128909][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:00 executing program 3: syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {0x0}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af3010004000000000000000000", 0x36, 0x8c80}, {&(0x7f0000012c00)}, {0x0}], 0x0, &(0x7f0000013800)) 05:43:00 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:00 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 545.876995][T13884] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 546.127016][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 546.277409][T13884] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 546.277643][T13884] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 546.277663][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.482111][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.482151][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.482173][T13884] usb 8-1: Product: syz [ 546.482189][T13884] usb 8-1: Manufacturer: syz [ 546.482205][T13884] usb 8-1: SerialNumber: syz [ 546.860165][ T40] audit: type=1804 audit(1653802981.686:651): pid=16670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1209/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 547.188485][T13884] usb 8-1: 0:2 : does not exist [ 547.193228][T13884] usb 8-1: USB disconnect, device number 62 [ 547.216040][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:02 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:02 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000140)) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 05:43:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03b0500) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) read(r2, &(0x7f00000000c0)=""/236, 0xec) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 05:43:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:43:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 547.947071][ T3739] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 548.197097][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 548.318696][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.318715][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.477409][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.477431][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.477443][ T3739] usb 8-1: Product: syz [ 548.477452][ T3739] usb 8-1: Manufacturer: syz [ 548.477461][ T3739] usb 8-1: SerialNumber: syz [ 548.847968][ T40] audit: type=1804 audit(1653802983.676:652): pid=16692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1210/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 549.137284][ T3739] usb 8-1: 0:2 : does not exist [ 549.154195][ T3739] usb 8-1: USB disconnect, device number 63 05:43:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:43:04 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:04 executing program 3: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:04 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @rand_addr=0x64010100}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 05:43:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) 05:43:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) 05:43:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) 05:43:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6e020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) [ 549.927099][ T4122] usb 8-1: new high-speed USB device number 64 using dummy_hcd 05:43:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0) [ 550.188328][ T4122] usb 8-1: Using ep0 maxpacket: 8 [ 550.347057][ T4122] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.347078][ T4122] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.539124][ T4122] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.539148][ T4122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.539161][ T4122] usb 8-1: Product: syz [ 550.539170][ T4122] usb 8-1: Manufacturer: syz [ 550.539179][ T4122] usb 8-1: SerialNumber: syz [ 550.911000][ T40] audit: type=1804 audit(1653802985.736:653): pid=16716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1211/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 551.227217][ T4122] usb 8-1: 0:2 : does not exist [ 551.236791][ T4122] usb 8-1: USB disconnect, device number 64 [ 551.275489][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:06 executing program 3: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:43:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0) 05:43:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b41, 0x0) 05:43:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0) 05:43:06 executing program 0: syz_clone(0x121000, 0x0, 0x0, 0x0, 0x0, 0x0) 05:43:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 551.977130][ T3739] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 552.217104][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 552.337438][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.337470][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.497252][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.497274][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.497286][ T3739] usb 8-1: Product: syz [ 552.497295][ T3739] usb 8-1: Manufacturer: syz [ 552.497304][ T3739] usb 8-1: SerialNumber: syz [ 552.849237][ T40] audit: type=1804 audit(1653802987.676:654): pid=16726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1212/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 553.217607][ T3739] usb 8-1: 0:2 : does not exist [ 553.235379][ T3739] usb 8-1: USB disconnect, device number 65 05:43:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:08 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000200)=@ready={0x0, 0x0, 0x8, "02ebba2b", {0x1, 0x0, 0x2}}) 05:43:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:08 executing program 3: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 05:43:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) 05:43:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) 05:43:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) 05:43:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01}, 0x0) [ 553.939837][T14023] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 553.997047][ T4122] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 554.267153][ T4122] usb 8-1: Using ep0 maxpacket: 8 [ 554.407424][ T4122] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.407458][ T4122] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.587351][T14023] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 554.587382][T14023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.587401][T14023] usb 5-1: Product: syz [ 554.587414][T14023] usb 5-1: Manufacturer: syz [ 554.587428][T14023] usb 5-1: SerialNumber: syz [ 554.587576][ T4122] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.587604][ T4122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.587624][ T4122] usb 8-1: Product: syz [ 554.587639][ T4122] usb 8-1: Manufacturer: syz [ 554.587654][ T4122] usb 8-1: SerialNumber: syz [ 554.629772][T14023] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 554.947089][ T40] audit: type=1804 audit(1653802989.766:655): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1213/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 555.257281][ T4122] usb 8-1: 0:2 : does not exist [ 555.264215][ T4122] usb 8-1: USB disconnect, device number 66 [ 555.291955][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.377272][T14020] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 555.791716][T14021] usb 5-1: USB disconnect, device number 21 05:43:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01}, 0x0) 05:43:11 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b69, 0x0) 05:43:11 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01}, 0x0) 05:43:11 executing program 0: capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) 05:43:11 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x3, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbaee}}, &(0x7f0000002740)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:43:11 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000002380)={0xec4, 0x3ed, 0x0, 0x0, 0x0, "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", [""]}, 0xec4}}, 0x0) 05:43:11 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x3, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbaee}}, &(0x7f0000002740)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 556.617114][ T3739] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 556.637087][T14020] usb 5-1: Service connection timeout for: 256 [ 556.637107][T14020] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 556.637947][T14020] ath9k_htc: Failed to initialize the device [ 556.638177][T14021] usb 5-1: ath9k_htc: USB layer deinitialized 05:43:11 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:11 executing program 0: io_setup(0x8, &(0x7f0000000100)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 556.877155][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 557.007316][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.007345][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.178765][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.178786][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.178799][ T3739] usb 8-1: Product: syz [ 557.178807][ T3739] usb 8-1: Manufacturer: syz [ 557.178816][ T3739] usb 8-1: SerialNumber: syz [ 557.577369][ T3739] usb 8-1: 0:2 : does not exist [ 557.589863][ T3739] usb 8-1: USB disconnect, device number 67 [ 557.611297][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:12 executing program 0: read$usbmon(0xffffffffffffffff, 0x0, 0x0) 05:43:12 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x3, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbaee}}, &(0x7f0000002740)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:43:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:12 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:12 executing program 0: bpf$MAP_DELETE_BATCH(0x21, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0}, 0x38) 05:43:12 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x3, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbaee}}, &(0x7f0000002740)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:43:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x8c784dd5d4078240, 0x2, &(0x7f0000000280)=@raw=[@cb_func], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:43:12 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 05:43:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x3ed, 0x4, 0x70bd2d, 0x0, "53dd93a321fb6e8d27dfe8118b6d97b08363ca2738fd21c667fe", ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004}, 0x8040) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x4004) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) syz_usb_connect(0x0, 0xe4, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xaa, 0xaf, 0x4e, 0x10, 0x45e, 0x458, 0xc0ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x1, 0x0, 0x9, 0x10, 0x3f, [{{0x9, 0x4, 0x43, 0x6, 0x8, 0x2a, 0x6a, 0x6d, 0xd6, [], [{{0x9, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1a, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @generic={0x4a, 0x4, "3892a4b54e9d43cfd36107e703ce8955938c9b200bf20effb87b63b064abf7ee654f7ca6e0fecd5921133004a474a15e17483da7c2dc864924b5d1047fe4281b1fccb1c9f35fc2e1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x19, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x4}]}}, {{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x9, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x50, 0x4}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0xff, 0x8}, 0x11, &(0x7f0000000ac0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}, 0x5, [{0x2, &(0x7f0000000bc0)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x429}}, {0x2, &(0x7f0000000d40)=@string={0x2}}, {0x0, 0x0}]}) r0 = syz_usb_connect(0x4, 0x5f, &(0x7f0000000f80)={{0x12, 0x1, 0x200, 0xc5, 0x54, 0x81, 0x20, 0x45b, 0x248, 0xfc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd1, 0x4, 0x1, 0xb8, 0x36, 0xb6, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x200, 0x1}, [@acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7}]}], [{{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0x0, 0x3, [@generic={0xd, 0x9, "35c0a58a4e6bbe9f2f04e7"}, @generic={0x3, 0x24, "e3"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x6, 0x0, 0x0) socketpair(0x26, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x0) 05:43:12 executing program 2: socketpair(0x28, 0x0, 0x9158, &(0x7f0000000080)) [ 558.307212][T13884] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 558.417223][ T3739] usb 5-1: new high-speed USB device number 22 using dummy_hcd 05:43:13 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd6005078800000000808000000000000000000000000000bbff02"], 0x0) [ 558.587225][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 558.658309][ T3739] usb 5-1: Using ep0 maxpacket: 16 [ 558.709761][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.709780][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.857259][ T3739] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 558.857290][ T3739] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 558.857311][ T3739] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 558.857333][ T3739] usb 5-1: config 0 has no interface number 0 [ 558.857349][ T3739] usb 5-1: config 0 has no interface number 1 [ 558.857390][ T3739] usb 5-1: config 0 interface 67 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 558.857419][ T3739] usb 5-1: config 0 interface 67 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.857441][ T3739] usb 5-1: config 0 interface 67 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 558.857464][ T3739] usb 5-1: config 0 interface 67 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 558.857487][ T3739] usb 5-1: config 0 interface 67 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 558.857516][ T3739] usb 5-1: too many endpoints for config 0 interface 56 altsetting 146: 164, using maximum allowed: 30 [ 558.857584][ T3739] usb 5-1: config 0 interface 56 altsetting 146 has an invalid endpoint with address 0x0, skipping [ 558.857649][ T3739] usb 5-1: config 0 interface 56 altsetting 146 endpoint 0xE has invalid wMaxPacketSize 0 [ 558.857674][ T3739] usb 5-1: config 0 interface 56 altsetting 146 endpoint 0xF has invalid wMaxPacketSize 0 [ 558.857697][ T3739] usb 5-1: config 0 interface 56 altsetting 146 has an invalid endpoint with address 0x80, skipping [ 558.857721][ T3739] usb 5-1: config 0 interface 56 altsetting 146 has 5 endpoint descriptors, different from the interface descriptor's value: 164 [ 558.857750][ T3739] usb 5-1: config 0 interface 67 has no altsetting 0 [ 558.857769][ T3739] usb 5-1: config 0 interface 56 has no altsetting 0 [ 558.903282][ T3739] usb 5-1: language id specifier not provided by device, defaulting to English [ 558.907428][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.907461][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.907481][T13884] usb 8-1: Product: syz [ 558.907495][T13884] usb 8-1: Manufacturer: syz [ 558.907510][T13884] usb 8-1: SerialNumber: syz [ 559.217198][ T3739] usb 5-1: New USB device found, idVendor=045e, idProduct=0458, bcdDevice=c0.ef [ 559.217229][ T3739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.217249][ T3739] usb 5-1: Product: Щ [ 559.219148][ T3739] usb 5-1: config 0 descriptor?? [ 559.307915][T13884] usb 8-1: 0:2 : does not exist [ 559.323367][T13884] usb 8-1: USB disconnect, device number 68 [ 559.338739][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.585573][ T3739] usb 5-1: USB disconnect, device number 22 05:43:14 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:14 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:14 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8949, 0x0) 05:43:14 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 05:43:14 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x6000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 05:43:14 executing program 0: openat$bsg(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_clone(0x241a0180, 0x0, 0x63, 0x0, 0x0, 0x0) 05:43:14 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @local, @val={@void, {0x810b}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "050788", 0x44, 0x2f, 0x0, @remote, @mcast2}}}}, 0x0) 05:43:14 executing program 2: syz_emit_ethernet(0x26, &(0x7f0000000040)={@remote, @remote, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @dev}}}}, 0x0) [ 560.047066][T13884] usb 8-1: new high-speed USB device number 69 using dummy_hcd 05:43:14 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 560.317422][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 560.493322][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.493341][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.650297][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.650322][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.650335][T13884] usb 8-1: Product: syz [ 560.650344][T13884] usb 8-1: Manufacturer: syz [ 560.650353][T13884] usb 8-1: SerialNumber: syz [ 561.067393][T13884] usb 8-1: 0:2 : does not exist [ 561.088582][T13884] usb 8-1: USB disconnect, device number 69 [ 561.110475][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:16 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "050788", 0x2, 0x2f, 0x0, @remote, @mcast2, {[@fragment]}}}}}, 0x0) 05:43:16 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffd9e29545e6b608"], 0x0) 05:43:16 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:16 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 05:43:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 05:43:16 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000000000)) getpid() openat$cachefiles(0xffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_clone(0x40000000, 0x0, 0xfffffffffffffeac, 0x0, 0x0, 0x0) 05:43:16 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) shmdt(r0) 05:43:16 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8904, 0x0) [ 561.847080][T11860] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 562.097634][T11860] usb 8-1: Using ep0 maxpacket: 8 [ 562.237447][T11860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.237470][T11860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.417623][T11860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.417645][T11860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.417658][T11860] usb 8-1: Product: syz [ 562.417667][T11860] usb 8-1: Manufacturer: syz [ 562.417693][T11860] usb 8-1: SerialNumber: syz [ 562.787884][ T40] audit: type=1804 audit(1653802997.616:656): pid=16859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1217/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 563.097387][T11860] usb 8-1: 0:2 : does not exist [ 563.103634][T11860] usb 8-1: USB disconnect, device number 70 [ 563.131370][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:18 executing program 2: r0 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 05:43:18 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:18 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:18 executing program 0: r0 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000300)=[@enter_looper], 0x0, 0x0, 0x0}) 05:43:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x33fe0}}, 0x0) [ 563.547224][T16862] binder: 16860:16862 ioctl c0046209 0 returned -22 05:43:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 05:43:18 executing program 2: r0 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000300)=[@enter_looper], 0x1, 0x0, &(0x7f00000003c0)='1'}) 05:43:18 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={0x0, r0+60000000}, 0x0) 05:43:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8912, 0x0) [ 563.857397][T13884] usb 8-1: new high-speed USB device number 71 using dummy_hcd 05:43:18 executing program 2: openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff3000/0x1000)=nil, 0x4000) [ 564.127106][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 564.277203][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.277230][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.448638][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.448663][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.448676][T13884] usb 8-1: Product: syz [ 564.448685][T13884] usb 8-1: Manufacturer: syz [ 564.448694][T13884] usb 8-1: SerialNumber: syz [ 564.801346][ T40] audit: type=1804 audit(1653802999.626:657): pid=16872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1218/cgroup.controllers" dev="sda1" ino=1146 res=1 errno=0 [ 565.017939][T13884] usb 8-1: 0:2 : does not exist [ 565.022084][T13884] usb 8-1: USB disconnect, device number 71 [ 565.045635][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:20 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:20 executing program 0: syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffd9e29545e6b6892f"], 0x0) 05:43:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) 05:43:20 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:20 executing program 2: r0 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 05:43:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400038008000500000000000a"], 0x38}}, 0x0) [ 565.500833][T16894] binder: 16893:16894 ioctl 541b 0 returned -22 05:43:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000007000046009cb0abfef16b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 05:43:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x3, &(0x7f00000003c0)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 565.520777][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 565.565561][T16900] 9pnet: p9_errstr2errno: server reported unknown error œ°«þñk [ 565.797230][T13884] usb 8-1: new high-speed USB device number 72 using dummy_hcd 05:43:20 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:20 executing program 2: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={0x0}, 0x10) 05:43:20 executing program 0: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 566.067017][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 566.207204][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.207225][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.398159][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.398192][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.398208][T13884] usb 8-1: Product: syz [ 566.398219][T13884] usb 8-1: Manufacturer: syz [ 566.398231][T13884] usb 8-1: SerialNumber: syz [ 566.770459][ T40] audit: type=1804 audit(1653803001.596:658): pid=16912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1219/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 567.049792][T13884] usb 8-1: 0:2 : does not exist [ 567.059019][T13884] usb 8-1: USB disconnect, device number 72 [ 567.086515][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:22 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r0}) 05:43:22 executing program 0: sched_getaffinity(0x0, 0x8, &(0x7f0000001440)) 05:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:22 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:22 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 05:43:22 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffb}) 05:43:22 executing program 0: openat$vcsu(0xffffff9c, 0x0, 0x400900, 0x0) 05:43:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000880)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 05:43:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 567.817183][T13884] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 568.067061][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 568.217351][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.217377][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.407225][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 568.407311][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.407331][T13884] usb 8-1: Product: syz [ 568.407400][T13884] usb 8-1: Manufacturer: syz [ 568.407414][T13884] usb 8-1: SerialNumber: syz [ 568.781348][ T40] audit: type=1804 audit(1653803003.606:659): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1220/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 568.811178][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.811302][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.127373][T13884] usb 8-1: 0:2 : does not exist [ 569.132561][T13884] usb 8-1: USB disconnect, device number 73 [ 569.156420][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:24 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x88, 0x0, 0x4, 0x101, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x9}, [@typed={0x8, 0x4c, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="390964e0ec6ee0a210c2c5a515c6dd02b79eac047f37fb4b3364ceb2fcbe36a7b8b23526bf47e6a977387bcdb7e189ec01ae96e6e327d7de1fa844cae5a53865c19da2a5e924b60c3a906aaff83880ab9082efbe5f5c3699e3621c3eab36094fad89a78f91edadf45c15ca", @generic]}, 0x88}, 0x1, 0x0, 0x0, 0x8000000}, 0x40080) 05:43:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) [ 569.577524][T16943] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. 05:43:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) [ 569.897052][T14021] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 570.137279][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 570.257619][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.257692][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.440420][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.440442][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.440455][T14021] usb 8-1: Product: syz [ 570.440463][T14021] usb 8-1: Manufacturer: syz [ 570.440472][T14021] usb 8-1: SerialNumber: syz [ 570.805972][ T40] audit: type=1804 audit(1653803005.626:660): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1221/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 571.127167][T14021] usb 8-1: 0:2 : does not exist [ 571.134488][T14021] usb 8-1: USB disconnect, device number 74 [ 571.152178][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:26 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:26 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:26 executing program 0: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) [ 571.927336][T11860] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 572.167085][T11860] usb 8-1: Using ep0 maxpacket: 8 [ 572.299726][T11860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.299749][T11860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.467317][T11860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.467348][T11860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.467368][T11860] usb 8-1: Product: syz [ 572.467383][T11860] usb 8-1: Manufacturer: syz [ 572.467399][T11860] usb 8-1: SerialNumber: syz [ 572.835256][ T40] audit: type=1804 audit(1653803007.656:661): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1222/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 573.207455][T11860] usb 8-1: 0:2 : does not exist [ 573.218574][T11860] usb 8-1: USB disconnect, device number 75 [ 573.253948][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:28 executing program 0: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:28 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:28 executing program 0: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:28 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:28 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:28 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:28 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:28 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) [ 574.000300][T13233] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 574.247092][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 574.367210][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.367239][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.527223][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.527265][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.527287][T13233] usb 8-1: Product: syz [ 574.527302][T13233] usb 8-1: Manufacturer: syz [ 574.527316][T13233] usb 8-1: SerialNumber: syz [ 574.949613][ T40] audit: type=1804 audit(1653803009.776:662): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1223/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 575.297298][T13233] usb 8-1: 0:2 : does not exist [ 575.304693][T13233] usb 8-1: USB disconnect, device number 76 [ 575.323430][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:30 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:30 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:30 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:30 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 576.068525][T11857] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 576.329305][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 576.457238][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.457286][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.629049][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.629087][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.629109][T11857] usb 8-1: Product: syz [ 576.629124][T11857] usb 8-1: Manufacturer: syz [ 576.629140][T11857] usb 8-1: SerialNumber: syz [ 576.990812][ T40] audit: type=1804 audit(1653803011.816:663): pid=17031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1224/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 577.257298][T11857] usb 8-1: 0:2 : does not exist [ 577.265356][T11857] usb 8-1: USB disconnect, device number 77 [ 577.283408][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:32 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:32 executing program 0: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:32 executing program 0: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) 05:43:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:32 executing program 0: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) [ 578.027105][ T25] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 578.287888][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 578.417199][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.417226][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.607180][ T25] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.607221][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.607233][ T25] usb 8-1: Product: syz [ 578.607242][ T25] usb 8-1: Manufacturer: syz [ 578.607251][ T25] usb 8-1: SerialNumber: syz [ 578.967032][ T40] audit: type=1804 audit(1653803013.786:664): pid=17045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1225/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 579.277269][ T25] usb 8-1: 0:2 : does not exist [ 579.289579][ T25] usb 8-1: USB disconnect, device number 78 [ 579.312611][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 05:43:34 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 05:43:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 05:43:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}) [ 580.017107][T13233] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 580.267077][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 580.427492][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.427510][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.597693][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.597715][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.597728][T13233] usb 8-1: Product: syz [ 580.597737][T13233] usb 8-1: Manufacturer: syz [ 580.597746][T13233] usb 8-1: SerialNumber: syz [ 580.969068][ T40] audit: type=1804 audit(1653803015.796:665): pid=17078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1226/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 581.307283][T13233] usb 8-1: 0:2 : does not exist [ 581.315248][T13233] usb 8-1: USB disconnect, device number 79 [ 581.357173][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}) 05:43:36 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}) 05:43:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 05:43:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) 05:43:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 05:43:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) [ 582.047929][T14021] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 582.297502][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 582.417325][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.417353][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.607118][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.607150][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.607172][T14021] usb 8-1: Product: syz [ 582.607187][T14021] usb 8-1: Manufacturer: syz [ 582.607202][T14021] usb 8-1: SerialNumber: syz [ 582.979093][ T40] audit: type=1804 audit(1653803017.806:666): pid=17088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1227/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 583.297183][T14021] usb 8-1: 0:2 : does not exist [ 583.303986][T14021] usb 8-1: USB disconnect, device number 80 [ 583.334925][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 05:43:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) 05:43:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:38 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:43:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 05:43:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 05:43:38 executing program 2: request_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0xfffffffffffffff8) 05:43:38 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = inotify_init() epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x20000000}) 05:43:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 584.087014][T14021] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 584.337076][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 584.477550][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.477578][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.647088][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.647110][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.647123][T14021] usb 8-1: Product: syz [ 584.647132][T14021] usb 8-1: Manufacturer: syz [ 584.647140][T14021] usb 8-1: SerialNumber: syz [ 585.007124][ T40] audit: type=1804 audit(1653803019.836:667): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1228/cgroup.controllers" dev="sda1" ino=1146 res=1 errno=0 [ 585.357361][T14021] usb 8-1: 0:2 : does not exist [ 585.364761][T14021] usb 8-1: USB disconnect, device number 81 [ 585.399152][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:40 executing program 2: r0 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0) 05:43:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 05:43:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:40 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:40 executing program 2: pipe(&(0x7f0000000280)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) socketpair(0x9, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r2, &(0x7f0000001540)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x286400, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f00000000c0)={0x145, 0xd, &(0x7f00000002c0)="f42ead7ebb7a4918d5bc4ab9820363c100c87a3494f7820df4e9993b05797de0edcfb7b040bfe101c6a6a44ef6fdcda7245ffddf535a8fae22bd700baffb9f8ca32fbd58387cfde9a708543a733a39d814fdfff488e3ad44b9b3c507f29eb0a5e25a56355c9fd4deb6a48595016a63cf6080e42e8e3455721038ac2373326d2d5bef9e0d0f53e846cf31eb110adefb404646b2186a2b10c9b43c231dbd8cf863312fbc5f28ba4c0bcf7f5802293753c9c7288b85a38616cd66ffc6e98c3861ae69ab7886c275e2c993ed40c3b426a9c4a23e4ce58ae1540a0a9d51122da941d7a6e47b5c368aa6e14beaaecca45a55e467faa6f8d859a4db42eeea92ba42660614741dddff590f4d228eb83638ed6d13842d6287906362765fc22dc05af73720d13228109373d59e1a05b2f97ad443d9557bb5306d74f42dafc3b7a954262e961d732a3437744982f230ae2881adaad676faad858495de261d9aeb2a95658f9954b7a5ae0aa3c1fd17785a9a0b71a0ce637375593fd7429b0cec699a0d3a4825449f7bd8aaca9207e97b1dbc515ea636733b46871779682b173736a6a39c0bb0829b70db3bd827cc9b8ddb45fdd6e387636686ae40855dce08623f7b373c6449e2765eb40e01758b5e68804dd40f8ecf07dfc1ec7e7683adaead0bfe65f0995fd1f2300aa5b9a7163fff56d07f2247ee39f0cc258bbf995dba08c39a3073c32ddfdf50d3cc4f09aaa683e22f1b4cdc9a3eb00ff8f295f7775e1cfef1eeb49fbbc82b9688df5ee4698032179a35c9c8d452c45849df5633fef25ea09a411fbbc397f04568d2d9ca6a120c4d0c70b658e7187d572ccaed0c58e45b8c261159929f0424786800ceaeb3e368546e2ef8279061cfec39a58db1b6e7b1b3601388518e9d1a24b51821d90841b03b5f98dae16c85427fcf323a78b4c45a86ccb8f1ea496631947f04156310346b72a9e0dd741fad8290f9bfe81de1806194cee3ad7bc5e1ba9ce24d146414728df841e59b0bc4cac7a4ece8647385c40a8bf47f413ceabea6edd04066bc53de9abf16dd6031e0a6840a9a36b5825c53631c145c7885781df550f4e0d8ca68dc130becd2843d8b556a65f459e31d6fa96d6d6f687cfa4646b736d26dd55e8b649fe0b317977842f91410216a3368ee06d245444376a16eb8cd218ed385377ee9a02b44f5970423bd3de81dc277b40d58fc9f074fd7bc6c5b365b5686da3a2ee79d92c4147e6d16cc67ab09cb63450e761029ae656518f8c38adf7fad7b2ccbbb99aa2e345661a709524b912a0d4e88ccf95a8f85c671ffe0af76b6437cbc6be47382087a62c7614313b61915e33b80ab1f96070e7076c9d752319a9c81e63559dbfb9f3f837cde385713dbba90b07001dc28057c2dc15064459f4fb67a6c5c01e1c7dd522578af26052d044aa992d48a144063b3e810b4"}) 05:43:40 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) [ 585.886149][ T40] audit: type=1400 audit(1653803020.706:668): avc: denied { create } for pid=17138 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 05:43:40 executing program 2: r0 = syz_io_uring_setup(0xbf9, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r1], 0x1) 05:43:40 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000e00)='./file0\x00', 0x0, 0x2, &(0x7f0000001240)=[{&(0x7f0000000e40)="cd04dc1df562b233867f1c1fe442efdba30ba8edb3c0aba9f02cb3b89e1a4ab3fe461fb7b84ac725c3e1936a92dfbfbb84c86936a40f36612b84fed4ac", 0x3d, 0x7}, {0x0}], 0x0, &(0x7f0000003300)={[{@check_strict}, {@cruft}, {}, {@session={'session', 0x3d, 0x52}}, {@map_acorn}, {@nojoliet}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) 05:43:40 executing program 2: r0 = syz_io_uring_setup(0xbfe, &(0x7f0000000040), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000feb000/0xe000)=nil, &(0x7f0000000380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff]}, 0x1) 05:43:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 586.148093][T11858] usb 8-1: new high-speed USB device number 82 using dummy_hcd 05:43:41 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 586.407526][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 586.537608][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.537717][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.707325][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.707358][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.707378][T11858] usb 8-1: Product: syz [ 586.707393][T11858] usb 8-1: Manufacturer: syz [ 586.707408][T11858] usb 8-1: SerialNumber: syz [ 587.057834][ T40] audit: type=1804 audit(1653803021.886:669): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1229/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 587.348925][T11858] usb 8-1: 0:2 : does not exist [ 587.356416][T11858] usb 8-1: USB disconnect, device number 82 [ 587.380566][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:42 executing program 2: syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000003300)={[{@check_strict}, {@map_off}, {@cruft}, {}, {@session={'session', 0x3d, 0x52}}, {@nojoliet}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt}]}) 05:43:42 executing program 0: syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x40000, &(0x7f0000003300)) 05:43:42 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 587.799363][T17162] SELinux: security_context_str_to_sid (root) failed with errno=-22 05:43:42 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 05:43:42 executing program 0: epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 05:43:42 executing program 0: epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 05:43:42 executing program 2: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 05:43:42 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x840, 0x0) 05:43:42 executing program 0: epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') [ 588.109718][T13233] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 588.357372][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 588.487691][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.487711][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.687142][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.687163][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.687175][T13233] usb 8-1: Product: syz [ 588.687184][T13233] usb 8-1: Manufacturer: syz [ 588.687192][T13233] usb 8-1: SerialNumber: syz [ 589.049530][ T40] audit: type=1804 audit(1653803023.876:670): pid=17169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1230/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 589.359110][T13233] usb 8-1: 0:2 : does not exist [ 589.367123][T13233] usb 8-1: USB disconnect, device number 83 [ 589.388967][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') mknodat(r0, &(0x7f0000004240)='./file0\x00', 0x0, 0x0) 05:43:44 executing program 0: epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 05:43:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:43:44 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:43:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$l2tp6(0xa, 0x2, 0x73) ppoll(&(0x7f0000000140)=[{r0}, {}, {r1}, {}], 0x4, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x1f]}, 0x8) 05:43:44 executing program 2: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 05:43:44 executing program 2: r0 = socket(0x1e, 0x4, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc8}}, 0x0) 05:43:44 executing program 2: r0 = socket(0xa, 0x6, 0x0) bind$l2tp(r0, 0x0, 0x0) 05:43:44 executing program 2: r0 = socket(0x2, 0x6, 0x0) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) [ 590.127597][T13233] usb 8-1: new high-speed USB device number 84 using dummy_hcd 05:43:44 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040), 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) [ 590.367272][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 590.487171][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.487207][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.667336][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.667357][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.667370][T13233] usb 8-1: Product: syz [ 590.667379][T13233] usb 8-1: Manufacturer: syz [ 590.667388][T13233] usb 8-1: SerialNumber: syz [ 591.027577][ T40] audit: type=1804 audit(1653803025.856:671): pid=17195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1231/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 591.350179][T13233] usb 8-1: 0:2 : does not exist [ 591.361602][T13233] usb 8-1: USB disconnect, device number 84 05:43:46 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0x0, 0xfd, 0x80}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x5]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r1]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:43:46 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040), 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) 05:43:46 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:43:46 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 05:43:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:43:46 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty=0xe0000000}, 0x10) 05:43:46 executing program 2: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) 05:43:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x1, 0x8000}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000080)=""/212, 0x35, 0xd4, 0x1}, 0x20) 05:43:46 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x3, 0x25}]}}, {0x0, 0x0, 0x0, @multicast2}}}}}, 0x0) 05:43:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x9}}, &(0x7f0000000040)='GPL\x00', 0x7, 0xec, &(0x7f0000000280)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 592.131635][T11857] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 592.377332][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 592.497306][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.497332][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.667324][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 592.667360][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.667377][T11857] usb 8-1: Product: syz [ 592.667389][T11857] usb 8-1: Manufacturer: syz [ 592.667402][T11857] usb 8-1: SerialNumber: syz [ 593.058830][ T40] audit: type=1804 audit(1653803027.886:672): pid=17230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1232/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 593.359673][T11857] usb 8-1: 0:2 : does not exist [ 593.368233][T11857] usb 8-1: USB disconnect, device number 85 [ 593.394985][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:48 executing program 0: bpf$PROG_LOAD_XDP(0x6, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:43:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 05:43:48 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:43:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, &(0x7f0000000140)=""/164, 0x26, 0xa4, 0x1}, 0x20) 05:43:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, &(0x7f0000000140)=""/164, 0x26, 0xa4, 0x1}, 0x20) 05:43:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 05:43:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 05:43:48 executing program 2: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x5225c272f90cd668) 05:43:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, &(0x7f0000000140)=""/164, 0x26, 0xa4, 0x1}, 0x20) 05:43:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)) [ 594.107062][T13233] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 594.347066][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 594.467218][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.467246][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.647145][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.647177][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.647196][T13233] usb 8-1: Product: syz [ 594.647208][T13233] usb 8-1: Manufacturer: syz [ 594.647221][T13233] usb 8-1: SerialNumber: syz [ 595.007154][ T40] audit: type=1804 audit(1653803029.836:673): pid=17241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1233/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 595.257285][T13233] usb 8-1: 0:2 : does not exist [ 595.262844][T13233] usb 8-1: USB disconnect, device number 86 [ 595.287962][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:50 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:43:50 executing program 2: bpf$LINK_DETACH(0x9, 0x0, 0x0) 05:43:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, &(0x7f0000000140)=""/164, 0x26, 0xa4, 0x1}, 0x20) 05:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 05:43:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1100}]}]}, 0x20}}, 0x0) 05:43:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 05:43:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000100)=@un=@abs={0x8, 0x1}, 0x8) 05:43:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000000)={r2, 0x0, 0x1, "b2"}, 0x9) [ 596.008155][T13233] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 596.257069][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 596.387085][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.387105][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.577164][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.577197][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.577215][T13233] usb 8-1: Product: syz [ 596.577286][T13233] usb 8-1: Manufacturer: syz [ 596.577302][T13233] usb 8-1: SerialNumber: syz [ 596.944876][ T40] audit: type=1804 audit(1653803031.766:674): pid=17259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1234/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 597.188936][T13233] usb 8-1: 0:2 : does not exist [ 597.201483][T13233] usb 8-1: USB disconnect, device number 87 [ 597.221578][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:52 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20105) 05:43:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x1c}], 0x1c}, 0x0) 05:43:52 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:43:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000500), &(0x7f0000001700)=0x4) 05:43:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=@in={0x10, 0x2}, 0x10) 05:43:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000a40)={@multicast2}, 0x8) 05:43:52 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @val, {@ipv6}}, 0x0) 05:43:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000cc0)={&(0x7f0000000280)=@in={0x10, 0x2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1, &(0x7f0000000c00)=[@authinfo={0x10}], 0x10}, 0x88) 05:43:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xe4, 0x54}, 0x14) 05:43:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x10) [ 597.967129][ T3739] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 598.207242][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 598.327262][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.327290][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.491652][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.491674][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.491687][ T3739] usb 8-1: Product: syz [ 598.491696][ T3739] usb 8-1: Manufacturer: syz [ 598.491705][ T3739] usb 8-1: SerialNumber: syz [ 598.844990][ T40] audit: type=1804 audit(1653803033.666:675): pid=17279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1235/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 599.087402][ T3739] usb 8-1: 0:2 : does not exist [ 599.093924][ T3739] usb 8-1: USB disconnect, device number 88 [ 599.119317][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:54 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08060001080006040004aaaaaaaaaa83652bb658e92d48aaaaaaac1400bb"], 0x0) 05:43:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) dup2(r1, r0) 05:43:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="f0", 0x1}], 0x1}, 0x20184) 05:43:54 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:43:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)='p', 0x1}], 0x1, &(0x7f00000002c0)=[@sndrcv={0x2c}], 0x2c}, 0x0) 05:43:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000280), 0xc) 05:43:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}, 0x14) 05:43:54 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000040), 0x20) 05:43:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) dup2(r1, r0) 05:43:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 599.887115][ T25] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 600.164869][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 600.307242][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.307260][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.489877][ T25] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.489909][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.489935][ T25] usb 8-1: Product: syz [ 600.489951][ T25] usb 8-1: Manufacturer: syz [ 600.489964][ T25] usb 8-1: SerialNumber: syz [ 600.914647][ T40] audit: type=1804 audit(1653803035.736:676): pid=17311 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1236/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 601.287673][ T25] usb 8-1: 0:2 : does not exist [ 601.297879][ T25] usb 8-1: USB disconnect, device number 89 [ 601.364529][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:56 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x1c, 0x1c, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f00000002c0)) 05:43:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1000}, 0x10) 05:43:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000080)='V', 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 05:43:56 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:43:56 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) listen(r0, 0x0) 05:43:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="ad", 0x1}], 0x1, &(0x7f0000000680)=[{0x10}, {0x10}], 0x20}, 0x0) 05:43:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macvlan0\x00', &(0x7f0000000180)=@ethtool_ts_info}) 05:43:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 05:43:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x98) 05:43:56 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000280), &(0x7f00000001c0)=0x98) 05:43:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f0000000380)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000840000000100000008000900ffffffff1400000084"], 0xb0}, 0x0) [ 602.088108][T13233] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 602.357350][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 602.487391][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.487554][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.658340][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 602.658392][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.658424][T13233] usb 8-1: Product: syz [ 602.658448][T13233] usb 8-1: Manufacturer: syz [ 602.658462][T13233] usb 8-1: SerialNumber: syz [ 603.023359][ T40] audit: type=1804 audit(1653803037.846:677): pid=17325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1237/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 603.288017][T13233] usb 8-1: 0:2 : does not exist [ 603.300843][T13233] usb 8-1: USB disconnect, device number 90 [ 603.336392][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:43:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000001c0)={0xffff, 0x5d20}, 0x10) sendto$inet(r0, &(0x7f0000000080)='V', 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 05:43:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000000), 0x3) 05:43:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/88, 0x58}, 0x40001) 05:43:58 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:43:58 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 05:43:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000140), &(0x7f0000000180)=0x18) 05:43:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000000), 0x6) [ 603.792890][ T40] audit: type=1400 audit(1653803038.616:678): avc: denied { read } for pid=17340 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 05:43:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@init={0x14}, @sndrcv={0x2c}, @authinfo={0x10}, @sndrcv={0x2c}, @sndinfo={0x1c}, @sndinfo={0x1c}], 0xb4}, 0x0) 05:43:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000100), 0x4) 05:43:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000000)=0x9, 0x4) 05:43:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) [ 604.127316][ T3739] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 604.367150][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 604.497253][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.497280][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.687524][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.687557][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.687574][ T3739] usb 8-1: Product: syz [ 604.687587][ T3739] usb 8-1: Manufacturer: syz [ 604.687596][ T3739] usb 8-1: SerialNumber: syz [ 605.072623][ T40] audit: type=1804 audit(1653803039.896:679): pid=17361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1238/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 605.417380][ T3739] usb 8-1: 0:2 : does not exist [ 605.425857][ T3739] usb 8-1: USB disconnect, device number 91 [ 605.470129][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:00 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:44:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)='H', 0x1}], 0x1, &(0x7f0000000800)=[@authinfo={0x10}], 0x10}, 0x0) 05:44:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4008c2, 0x0) fdatasync(r0) 05:44:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000000), 0x8) 05:44:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000000c0), &(0x7f0000000040)=0x90) 05:44:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), 0x98) 05:44:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 05:44:00 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08060001080006040004aaaaaaaaaa8365"], 0x0) [ 606.228628][T14021] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 606.497418][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 606.648333][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.648359][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.833279][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.833372][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.833423][T14021] usb 8-1: Product: syz [ 606.833462][T14021] usb 8-1: Manufacturer: syz [ 606.833497][T14021] usb 8-1: SerialNumber: syz [ 607.248338][ T40] audit: type=1804 audit(1653803042.066:680): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1239/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 607.567554][T14021] usb 8-1: 0:2 : does not exist [ 607.605771][T14021] usb 8-1: USB disconnect, device number 92 [ 607.640651][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)=0x8) 05:44:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000280), 0x4) 05:44:02 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@sndinfo={0x1c}, @init={0x14}], 0x30}, 0x0) 05:44:02 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000000) 05:44:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a012e01"], 0xa) 05:44:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000240)=0x10) 05:44:02 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000340)="c47925305aa90811acc37d5c1b", 0xd, 0x0, &(0x7f00000003c0)={0x1c, 0x1c, 0x1}, 0x1c) 05:44:02 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv4}}, 0x0) 05:44:02 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000340)="c47925305aa90811acc37d5c1b3d07c02491c01a0466a86246ce5b75cba6c413c4f58ec3bf5f01b82c87fa9c740d5b8653345441bea516336395a3af19a98184132c", 0x42, 0x4, &(0x7f00000003c0)={0x1c, 0x1c, 0x1}, 0x1c) 05:44:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x0, 0x8}, 0x8) [ 608.347105][T11857] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 608.639963][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 608.777188][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.777245][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.957594][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.957640][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.957662][T11857] usb 8-1: Product: syz [ 608.957672][T11857] usb 8-1: Manufacturer: syz [ 608.957684][T11857] usb 8-1: SerialNumber: syz [ 609.314093][ T40] audit: type=1804 audit(1653803044.136:681): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1240/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 609.640521][T11857] usb 8-1: 0:2 : does not exist [ 609.666154][T11857] usb 8-1: USB disconnect, device number 93 [ 609.698753][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fcntl$getown(r0, 0x5) 05:44:04 executing program 2: sendto(0xffffffffffffffff, &(0x7f0000000000)="a10ca6c30cd264cecf4361cd9e46170b5ef8d5478ef1728efd82c5a76283d39188569542dbc4f1d7fdf9b69ac98b530fa89ae7d9fcfff7621cd53dd743d855a861f407acabc96f", 0x47, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xffffffffffffffaf, 0x1c}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB="8a70ea25", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x32, &(0x7f0000000040)={r2}, 0x8) 05:44:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x88) 05:44:04 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:04 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 05:44:05 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv4}}, 0x0) 05:44:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000002c0)={0xfffb}, 0x10) 05:44:05 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) sendto$inet6(r0, &(0x7f0000000200)='o', 0x1, 0x0, &(0x7f0000000300)={0x1c, 0x1c, 0x2}, 0x1c) 05:44:05 executing program 1: syz_emit_ethernet(0x23, &(0x7f0000000040)={@local, @local, @val, {@ipv4}}, 0x0) 05:44:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000280)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 05:44:05 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x104, &(0x7f0000001000)={0x10, 0x2}, 0x10) [ 610.447519][ T3739] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 610.737136][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 610.857201][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.857226][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.017577][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.017622][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.017652][ T3739] usb 8-1: Product: syz [ 611.017667][ T3739] usb 8-1: Manufacturer: syz [ 611.017688][ T3739] usb 8-1: SerialNumber: syz [ 611.456041][ T40] audit: type=1804 audit(1653803046.276:682): pid=17433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1241/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 611.468559][T17420] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.857617][ T3739] usb 8-1: 0:2 : does not exist [ 611.875281][ T3739] usb 8-1: USB disconnect, device number 94 [ 611.908244][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:07 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:07 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @multicast2, @random="9123dc8f1f27"}}}}, 0x0) 05:44:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000001540), 0xc) 05:44:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a012e2f666902"], 0xa) 05:44:07 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="a8bc4bc81f35", @val, {@ipv6}}, 0x0) 05:44:07 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv4}}, 0x0) 05:44:07 executing program 1: semget(0x1, 0x1, 0x100) 05:44:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000040), &(0x7f0000000100)=0x90) [ 612.687102][ T25] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 612.957099][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 613.087359][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.087395][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.247867][ T25] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.247898][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.247918][ T25] usb 8-1: Product: syz [ 613.247932][ T25] usb 8-1: Manufacturer: syz [ 613.247947][ T25] usb 8-1: SerialNumber: syz [ 613.645075][ T40] audit: type=1804 audit(1653803048.466:683): pid=17449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1242/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 613.697419][T17449] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 613.907601][ T25] usb 8-1: 0:2 : does not exist [ 613.930725][ T25] usb 8-1: USB disconnect, device number 95 [ 613.956536][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:09 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/255, 0xff}, 0xc3) 05:44:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000040), 0x8) 05:44:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@authinfo={0x10}], 0x10}, 0x0) 05:44:09 executing program 1: syz_emit_ethernet(0x27, &(0x7f0000000040)={@local, @local, @val, {@ipv4}}, 0x0) 05:44:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a012e2f"], 0xa) 05:44:09 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000180)={r2}, 0x8) 05:44:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@init={0x14}, @sndrcv={0x2c}], 0x40}, 0x0) [ 614.697247][T13233] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 614.957133][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 615.087538][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.087586][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.277665][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.277705][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.277726][T13233] usb 8-1: Product: syz [ 615.277736][T13233] usb 8-1: Manufacturer: syz [ 615.277748][T13233] usb 8-1: SerialNumber: syz [ 615.665986][ T40] audit: type=1804 audit(1653803050.486:684): pid=17471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1243/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 615.673661][T17463] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.037206][T13233] usb 8-1: 0:2 : does not exist [ 616.046136][T13233] usb 8-1: USB disconnect, device number 96 [ 616.084329][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}, @sndrcv={0x2c}, @sndinfo={0x1c}, @prinfo={0x14}, @sndrcv={0x2c}], 0xa4}, 0x0) 05:44:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="01"], 0x24) 05:44:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0xa}, 0x98) 05:44:11 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000040)=0x88) 05:44:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x1c}], 0x1c}, 0x0) 05:44:11 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv4}}, 0x0) 05:44:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/242, 0xf2}, 0x40080) 05:44:11 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000080), 0x8) 05:44:11 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @local={0xac, 0x14, 0x0}, @broadcast}}}}, 0x0) 05:44:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@init={0x14}], 0x14}, 0x0) [ 616.847398][T14020] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 617.107170][T14020] usb 8-1: Using ep0 maxpacket: 8 [ 617.237419][T14020] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.237476][T14020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.417794][T14020] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.417959][T14020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.417983][T14020] usb 8-1: Product: syz [ 617.418003][T14020] usb 8-1: Manufacturer: syz [ 617.418015][T14020] usb 8-1: SerialNumber: syz [ 617.795452][ T40] audit: type=1804 audit(1653803052.616:685): pid=17482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1244/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 617.801634][T17482] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.047754][T14020] usb 8-1: 0:2 : does not exist [ 618.053657][T14020] usb 8-1: USB disconnect, device number 97 [ 618.081247][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:13 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)='a', 0x1}], 0x1}, 0x0) 05:44:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7}, 0x14) 05:44:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x10) 05:44:13 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08060078b5167f"], 0x0) 05:44:13 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000240)='a', 0x1}], 0x1}, 0x0) dup2(r0, r1) 05:44:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00000001c0)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="100000008400000008"], 0x90}, 0x0) 05:44:13 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x0) [ 618.807190][T14020] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 619.077202][T14020] usb 8-1: Using ep0 maxpacket: 8 [ 619.227353][T14020] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.227385][T14020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.397253][T14020] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.397278][T14020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.397291][T14020] usb 8-1: Product: syz [ 619.397300][T14020] usb 8-1: Manufacturer: syz [ 619.397309][T14020] usb 8-1: SerialNumber: syz [ 619.770806][ T40] audit: type=1804 audit(1653803054.596:686): pid=17513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1245/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 619.774519][T17513] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.107165][T14020] usb 8-1: 0:2 : does not exist [ 620.118490][T14020] usb 8-1: USB disconnect, device number 98 [ 620.134515][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x14}, 0x33fe0}}, 0x0) 05:44:15 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 05:44:15 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:15 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) 05:44:15 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) 05:44:15 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) [ 620.578196][ T40] audit: type=1400 audit(1653803055.406:687): avc: denied { setopt } for pid=17517 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 620.583773][ T40] audit: type=1400 audit(1653803055.406:688): avc: denied { bind } for pid=17518 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 05:44:15 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) [ 620.586057][T17522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17522 comm=syz-executor.2 05:44:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 05:44:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000080)='syzkaller\x00', 0x7fff, 0x7c, &(0x7f00000000c0)=""/124, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 05:44:15 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) [ 620.589942][T17521] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 620.653820][T17526] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 620.682505][ T40] audit: type=1400 audit(1653803055.506:689): avc: denied { read } for pid=17529 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 620.917102][T11857] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 621.157136][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 621.307255][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.307282][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 621.487250][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 621.487272][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.487284][T11857] usb 8-1: Product: syz [ 621.487293][T11857] usb 8-1: Manufacturer: syz [ 621.487302][T11857] usb 8-1: SerialNumber: syz [ 621.840332][ T40] audit: type=1804 audit(1653803056.666:690): pid=17524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1246/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 621.845505][T17524] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 622.089088][T11857] usb 8-1: 0:2 : does not exist [ 622.100125][T11857] usb 8-1: USB disconnect, device number 99 [ 622.118254][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)=ANY=[]}) 05:44:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x0, 0x0, 0x0, &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:44:17 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52e"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:17 executing program 1: utimes(0x0, &(0x7f0000000180)={{0x0, 0xfffffffffffeffff}}) 05:44:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:44:17 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 05:44:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x1, 0x0) 05:44:17 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/33, 0x21}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 05:44:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="66f4"], 0x6c}}, 0x0) [ 622.568687][ T40] audit: type=1400 audit(1653803057.396:691): avc: denied { write } for pid=17547 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 05:44:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xfb, &(0x7f00000000c0)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 622.887623][T14021] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 623.157811][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 623.287288][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.287333][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.457291][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.457323][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.457342][T14021] usb 8-1: Product: syz [ 623.457356][T14021] usb 8-1: Manufacturer: syz [ 623.457370][T14021] usb 8-1: SerialNumber: syz [ 623.842036][ T40] audit: type=1804 audit(1653803058.666:692): pid=17553 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1247/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 624.217604][T14021] usb 8-1: 0:2 : does not exist [ 624.224196][T14021] usb 8-1: USB disconnect, device number 100 [ 624.266386][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:19 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002000)=[{0x28, 0x0, 0x0, "66f498c9b8871e6ebadcc0341c37821a47"}], 0x28}}], 0x1, 0x0) 05:44:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000440), 0x8) 05:44:19 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52e"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:19 executing program 2: socketpair(0x2, 0x1, 0x4, &(0x7f0000000e40)) 05:44:19 executing program 0: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 05:44:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x8001, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) 05:44:19 executing program 0: select(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xea60}) 05:44:19 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x1f}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) 05:44:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) 05:44:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, 0x0}, 0x80) [ 624.770735][ T40] audit: type=1400 audit(1653803059.596:693): avc: denied { create } for pid=17579 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 624.774622][ T40] audit: type=1400 audit(1653803059.596:694): avc: denied { write } for pid=17579 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 624.774915][ T40] audit: type=1400 audit(1653803059.596:695): avc: denied { read } for pid=17579 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 625.007041][T14021] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 625.267155][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 625.407413][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.407440][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.577366][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.577399][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.577420][T14021] usb 8-1: Product: syz [ 625.577434][T14021] usb 8-1: Manufacturer: syz [ 625.577448][T14021] usb 8-1: SerialNumber: syz [ 625.947308][ T40] audit: type=1804 audit(1653803060.766:696): pid=17574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1248/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 626.247634][T14021] usb 8-1: 0:2 : does not exist [ 626.255904][T14021] usb 8-1: USB disconnect, device number 101 [ 626.287308][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:21 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52e"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:21 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 05:44:21 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x401c5820, 0x0) 05:44:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xf, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:44:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7c, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 05:44:21 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) [ 626.699701][ T40] audit: type=1400 audit(1653803061.526:697): avc: denied { setopt } for pid=17584 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 05:44:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x17, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 05:44:21 executing program 1: socket(0x5ca91cf149a2a065, 0x0, 0x0) [ 627.037162][T11857] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 627.298231][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 627.427272][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.427300][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.607261][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.607294][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.607316][T11857] usb 8-1: Product: syz [ 627.607331][T11857] usb 8-1: Manufacturer: syz [ 627.607348][T11857] usb 8-1: SerialNumber: syz [ 627.989484][ T40] audit: type=1804 audit(1653803062.816:698): pid=17600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1249/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 628.409902][T11857] usb 8-1: 0:2 : does not exist [ 628.419735][T11857] usb 8-1: USB disconnect, device number 102 [ 628.455637][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:23 executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 05:44:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_CACHEINFO={0x14}]}, 0x30}}, 0x0) 05:44:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x0, 0x0, 0x0, 0x524, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 05:44:23 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 05:44:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xb, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xe) 05:44:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}}, 0x0) 05:44:23 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000002e80)={0x2, 0x0, @loopback}, 0x10) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 05:44:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) 05:44:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 05:44:23 executing program 0: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) accept4(r0, 0x0, &(0x7f0000000640), 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) [ 628.964971][ T40] audit: type=1400 audit(1653803063.786:699): avc: denied { ioctl } for pid=17620 comm="syz-executor.1" path="socket:[118298]" dev="sockfs" ino=118298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 629.010598][ T40] audit: type=1400 audit(1653803063.836:700): avc: denied { accept } for pid=17623 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 629.197563][T11858] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 629.457024][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 629.577312][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.577355][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.747576][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 629.747609][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.747629][T11858] usb 8-1: Product: syz [ 629.747643][T11858] usb 8-1: Manufacturer: syz [ 629.747658][T11858] usb 8-1: SerialNumber: syz [ 630.115200][ T40] audit: type=1804 audit(1653803064.936:701): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1250/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 630.250319][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.250428][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.397886][T11858] usb 8-1: 0:2 : does not exist [ 630.402857][T11858] usb 8-1: USB disconnect, device number 103 [ 630.440452][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:25 executing program 1: socketpair(0xa, 0x801, 0x0, &(0x7f00000007c0)) 05:44:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 05:44:25 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) 05:44:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x0) 05:44:25 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:25 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x4308c18ecd9aff22, 0x0) 05:44:25 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x4050) 05:44:25 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0xc020660b, 0x0) 05:44:25 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x101, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 05:44:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000064126f"], 0x14}}, 0x0) [ 630.928592][ T40] audit: type=1400 audit(1653803065.756:702): avc: denied { write } for pid=17638 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 05:44:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) 05:44:25 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x2710}, 0x10) [ 631.197181][T14020] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 631.447095][T14020] usb 8-1: Using ep0 maxpacket: 8 [ 631.567519][T14020] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.567544][T14020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.757647][T14020] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.757679][T14020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.757698][T14020] usb 8-1: Product: syz [ 631.757707][T14020] usb 8-1: Manufacturer: syz [ 631.757716][T14020] usb 8-1: SerialNumber: syz [ 632.126653][ T40] audit: type=1804 audit(1653803066.946:703): pid=17650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1251/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 632.517582][T14020] usb 8-1: 0:2 : does not exist [ 632.532151][T14020] usb 8-1: USB disconnect, device number 104 [ 632.549621][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:27 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', 0x0}) 05:44:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="78000080000000070000000044ba00d00064"]}) 05:44:27 executing program 2: socketpair(0xa, 0x0, 0x0, &(0x7f00000007c0)) 05:44:27 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)={0x0, 0x0, 0x18}, 0x10) 05:44:27 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x2, 0x0, 0x0) 05:44:27 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000040)=""/33) 05:44:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x49001, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[], 0x1014) [ 633.327111][T13233] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 633.577928][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 633.697369][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.697393][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.887248][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.887280][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.887321][T13233] usb 8-1: Product: syz [ 633.887337][T13233] usb 8-1: Manufacturer: syz [ 633.887353][T13233] usb 8-1: SerialNumber: syz [ 634.274105][ T40] audit: type=1804 audit(1653803069.096:704): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1252/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 634.627184][T13233] usb 8-1: 0:2 : does not exist [ 634.633425][T13233] usb 8-1: USB disconnect, device number 105 [ 634.654460][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:29 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:29 executing program 2: mq_open(&(0x7f0000000000)=':$%\'^.]\x00', 0x40, 0x0, &(0x7f0000000040)) 05:44:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000012c0), 0x0) 05:44:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x49001, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[], 0x1014) 05:44:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f00000012c0)="e8", 0x1) 05:44:29 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x29, 0xb5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x11, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x54, 0x40, 0x80, 0x0, 0x1}, 0x2b, &(0x7f00000000c0)={0x5, 0xf, 0x2b, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x58, 0x9, 0x58, 0x4, 0x40}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0xc3, 0xf00, 0x81, [0xffff, 0xff00, 0x0]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}, {0x0, 0x0}, {0x0, 0x0}, {0x87, &(0x7f0000000300)=@string={0x87, 0x3, "fa30bd2a788ce1b6be927ec1c26892d43ce09531639a36f5cc7173911e0b86b27217ea2330aec0d4adbe135891c625bd7d7c5c5a24789cb3b8fe63f1ac9c381ce04d3183724db4c9d025f9c45333f0bafd5b8af67559ce1e58a3fe95511e85908c5451e8621660a71af234aef84567bf5840a99067a275814028c45bccb8539d689de37fcb"}}]}) 05:44:29 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x410040) 05:44:29 executing program 1: syz_open_dev$evdev(&(0x7f0000000500), 0x0, 0x199002) [ 635.367525][ T172] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 635.373104][T11857] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 635.627092][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 635.747138][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.747158][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.857178][ T172] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 635.857206][ T172] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 635.857226][ T172] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 635.857244][ T172] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 635.917482][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.917627][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.917648][T11857] usb 8-1: Product: syz [ 635.917664][T11857] usb 8-1: Manufacturer: syz [ 635.917679][T11857] usb 8-1: SerialNumber: syz [ 636.269629][ T40] audit: type=1804 audit(1653803071.096:705): pid=17678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1253/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 636.517301][ T172] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.517333][ T172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.517354][ T172] usb 7-1: SerialNumber: ヺ⪽豸뛡銾셾棂풒㆕驣燌酳ଞ늆á²âªê¸°í“€ëº­å “욑봥籽婜砤뎜ﺸ鲬᰸䷠茱䵲즴â—쓹ã“뫰寽奵Ỏê˜é—¾á¹‘邅和ᙢê ïˆšê¸´ä—¸ë½§ä˜é‚©ê‰§è…µâ¡€å¯„료鵓鵨翣 [ 636.577831][T11857] usb 8-1: 0:2 : does not exist [ 636.595948][T11857] usb 8-1: USB disconnect, device number 106 [ 636.611829][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.883733][ T172] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 636.894242][ T172] usb 7-1: USB disconnect, device number 19 05:44:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, 0x0, 0x0}, &(0x7f0000000c80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x1, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x40, 0x8001}, {0x6, 0x24, 0x1a, 0x8, 0x26}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x85}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x6, 0x40}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000580)={0x40, 0x30, 0x7c, {0x7c, 0x23, "cb3721d68041f5293bbf12b6e80a6fdcc105b385e16161d45f100aaa3a7ead758dc7b301a13f1c542409f17a303cc244af17d3cc7e20c6d9ebea8f392227eb5a7d161150412856842cc25b9d6d5f6b960c205d15bb756d23025be395a3caa3757bb1b1f752ecbb745c34ea1c593871547e47791e551713884698"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x20, 0x0, 0xb1, "3d5df888832a8dd2c1d9ed4730c672b515ba6a317dbaaca3b91ef40358d001d16a916d64972d166747d4c38584b602e38b4c0265a8c94ebb35838eb38b40b4816d03db833ccd1b814efc30c21bcf6739c24344522c90b75ad56ff58e652fc6d42e9915246daa7726eecf562a0a8fa8e6cf7e29076b3abb3805b96efe97e80f77280f253bd9e81910e55378c857f11a4c91de8dfc39a482980d8fd7be160fa6472f76bab0dc6e1abfb9cc932553d762562a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc}, 0x0, &(0x7f0000000780)={0x20, 0x85, 0x4}, &(0x7f0000000840)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0xa58}, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_open_dev$hidraw(0x0, 0x9, 0x10400) 05:44:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x49001, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[], 0x1014) 05:44:31 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x49001, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[], 0x1014) 05:44:31 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x155, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x143, 0x2, 0x1, 0x5, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x1, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x3ff, 0x6, 0x1, 0x0, 0x0, 0x27}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x1, 0x8, 0x1}, @mdlm_detail={0xc4, 0x24, 0x13, 0x6, "e71ca8a054781fd42c7fdbad6ee11e0109ecf911c6cd9cc73bbda9ea56cef70553b87302363e9e0b8a1cc0337c2ac902d9cd30cd0eaf8394933bc15e110d245373b146843bed091370ae653576dc6ecffadbee72223c197e6adcbc16df959ee981c028098e4a1f9ef1f5fe88ee1955e649faab845aabd259d804bdfb7e3491ce8fb1c8f6179fb4f9148c2cfce554781b19b3a929ea8f45615ea1b2e903641f5b7802b7e13816c71fe0d2ca5c67a7ec6c59cc7a0c30eb3566ff257b6bc4cbbc0a"}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x4a}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xc0, 0x9, 0xc6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x3, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x81, 0x8}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x1f, 0x1, 0x0, 0x40, 0x4}, 0x6d, &(0x7f0000000780)={0x5, 0xf, 0x6d, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x101, 0xf16, 0x50e, [0xf0, 0x30, 0xc0, 0xc03f, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0xfd, 0x5, 0x0, 0xf00, 0xa9, [0xffc030, 0x1013f30, 0x1a080, 0xffc000, 0x1bfff]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d03f6a1a848e5ace476035f23b2bd663"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b865a7e9fb3fde82e77f13234edc9dfb"}]}, 0x6, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x446}}, {0x5e, &(0x7f00000008c0)=@string={0x5e, 0x3, "8fb134df5f61916b9c50b2e049b834b0c18e625762ea0eb115ec9d3ec71c8f252951abaeb2bd168f06c706858c3615bd4932e7617a1431d660c435febacf1609f0c858024e7dec93db77a485c43cac5646a115e574fd85e4f3db7687"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x810}}, {0xe5, &(0x7f0000000980)=@string={0xe5, 0x3, "498342a6c6e08f2a1973835373293071549f90089da69ef2177d7e916c9fa148bf1bb41595a3589be5d23c05a2e128077bbff947bb8b0a94d32feb2763e83f2beda82e8f2d57bfcb687cf2de0f47e144bdce2a1f602ff513be714fd537cf0035aea23f2f05ba284e522ee3b3f4b7f4853c5bc931a03a8feae7e5528844ea3e171ccc0fc31082362529705b10c912fab497459cafad784c9498d227083872a1cda24b2b9157df0fe0163534212b0fd098117e45cfec8b7a90c222101ee4dcbe9590b99b1bd6ac2cc8499f0e5fcf910cb95ff771e1ddd87d361d4022cae07ec15d6350ce"}}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000030c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x730, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0x1f, [{{0x9, 0x4, 0x0, 0xd0, 0x2, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x273}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0xb7, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xa3, 0x6, 0xc9}}]}}}]}}]}}, &(0x7f0000003480)={0xa, &(0x7f0000003100)={0xa, 0x6, 0x4f2566d68405be61, 0xe0, 0x4, 0x83, 0x40, 0xff}, 0x5f, &(0x7f0000003140)={0x5, 0xf, 0x5f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x7, 0x9}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x26, 0x10, 0x4, "4058e7ba2c35b30e8579d4924d909ab05eb1228f2bd22095baf2897d90984d9911eb1c"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x0, 0xf000, 0x93, [0xc000, 0x140, 0x3f00, 0xcf, 0xff000f, 0xff0000]}, @ptm_cap={0x3}]}, 0x6, [{0x5e, &(0x7f00000031c0)=@string={0x5e, 0x3, "37138ee99a3a15ba4a90e8df191ed7ffe03ba4caecfb942818e64254a1aa7ea632f4c6ef638409ee7a99fd3be6c1553fb1c4792d98e0401c1b37a14d7578b503f9ef5893126f2cc00f8083b279a30642fbd1154d8d88f3c14a717b1e"}}, {0x5e, &(0x7f0000003240)=@string={0x5e, 0x3, "2f76a085df0303e60ab3ceb0c90cc938fe6095c865acf2ad3d4ea62a1f52f309ccf57d406ef78bfa9a4fcc31dc19082772bcd353a3cd805ef50be3d325c6fc09f26f30b60dadfe980473b69ba7b2ac2355345803f90b931923a57795"}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000003300)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000003340)=@lang_id={0x4, 0x3, 0x81a}}, {0xff, &(0x7f0000003380)=@string={0xff, 0x3, "191a075a0f7c983c75d3adf9421ed554825b2384ba00cf9e6cf9d7f85e250a16a2e1c0889873909042ace6786767174238a52cd883016ac61b610a8784160147b749d1a127343c58cbd57c2602607d5635754755d59b6958906bf0c252b70547ce67a20acae2e0f33ea8e506cb0de7c0cbeaa646219664389e15b8c7f4cd22d4b6cd90e22ada53254df3b922925e45219d05e00180279c9d3500c849e7c67e75aec81b51c9aeaae14c9d6b63e48721e61099b9023f0674daf69989295f84e4dbf4a88f0a5029084aa3f4d1911b4dead6ec4b4ce466d692141750fbce7f0a9a6a44023b88bd3afba24d8567ae9ceae6dd0ccbe86d37b297a2032f14f6e1"}}]}) 05:44:32 executing program 2: syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x107280) [ 637.313677][T14020] usb 6-1: new high-speed USB device number 7 using dummy_hcd 05:44:32 executing program 2: syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x600000) [ 637.337175][T11857] usb 8-1: new high-speed USB device number 107 using dummy_hcd 05:44:32 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x81, 0x81) [ 637.447206][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 637.587009][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 637.697382][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 637.707378][T14020] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.707424][T14020] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.717554][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.717583][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.829211][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 637.829270][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 637.829294][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 637.867305][T14020] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.867335][T14020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.867358][T14020] usb 6-1: Product: syz [ 637.867371][T14020] usb 6-1: Manufacturer: syz [ 637.867387][T14020] usb 6-1: SerialNumber: syz [ 637.905985][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.906007][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.906020][T11857] usb 8-1: Product: syz [ 637.906029][T11857] usb 8-1: Manufacturer: syz [ 637.906037][T11857] usb 8-1: SerialNumber: syz [ 637.919056][T14020] usb 6-1: selecting invalid altsetting 1 [ 637.997194][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.997238][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.997251][ T25] usb 5-1: Product: ц [ 637.997260][ T25] usb 5-1: Manufacturer: ÑŽ [ 637.997270][ T25] usb 5-1: SerialNumber: ë†æ…Ÿæ®‘傜롉뀴è»å¢î©¢ë„Žî°•ãºá³‡â–儩꺫붲輖윆蔆㚌봕㉉懧ᑺ혱쑠︵쾺ख죰ɘ絎é¬çŸ›è–¤ã³„åš¬ê…†î”•ïµ´î’…è¶ [ 638.242964][T17696] UDC core: couldn't find an available UDC or it's busy: -16 [ 638.243024][T17696] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 638.284184][ T40] audit: type=1804 audit(1653803073.106:706): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1254/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0 [ 638.338903][ T25] cdc_ncm 5-1:1.0: bind() failure [ 638.339200][T17690] UDC core: couldn't find an available UDC or it's busy: -16 [ 638.339225][T17690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 638.343309][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 638.343343][ T25] cdc_ncm 5-1:1.1: bind() failure [ 638.357111][T14020] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 638.357150][T14020] cdc_ncm 6-1:1.0: bind() failure [ 638.360238][T14020] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 638.360268][T14020] cdc_ncm 6-1:1.1: bind() failure [ 638.363396][T14020] usb 6-1: USB disconnect, device number 7 [ 638.375500][ T25] usb 5-1: USB disconnect, device number 23 [ 638.717182][T11857] usb 8-1: 0:2 : does not exist [ 638.730214][T11857] usb 8-1: USB disconnect, device number 107 [ 638.760004][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:33 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x29, 0xb5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x11, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x54, 0x40, 0x80, 0x0, 0x1}, 0x2f, &(0x7f00000000c0)={0x5, 0xf, 0x2f, 0x3, [@generic={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x58, 0x0, 0x58, 0x4, 0x40}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xc3, 0xf00, 0x81, [0xff3f30, 0xffff, 0xff00, 0x0]}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x89, &(0x7f0000000300)=@string={0x89, 0x3, "fa30bd2a788ce1b6be927ec1c26892d43ce09531639a36f5cc7173911e0b86b27217ea2330aec0d4adbe135891c625bd7d7c5c5a24789cb3b8fe63f1ac9c381ce04d3183724db4c9d025f9c45333f0bafd5b8af67559ce1e58a3fe95511e85908c5451e8621660a71af234aef84567bf5840a99067a275814028c45bccb8539d689de37fcbff2e"}}]}) 05:44:33 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x29, 0xb5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x54, 0x0, 0x0, 0x0, 0x1}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x58, 0x9, 0x58, 0x4, 0x40}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}, {0x0, 0x0}]}) [ 639.137194][T11860] usb 5-1: new high-speed USB device number 24 using dummy_hcd 05:44:34 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xa2a, 0x410040) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x2, 0xfff]) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x41ca42) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/129) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x800, 0x189002) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000001c0)={0x1f, 0x15, 0x40, 0x3, "1dd22ae9b7c53fdacb1700525102cd53ff5afe0f3328a90e7e9815329af3f2b3"}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000200)=[0x1, 0xf77]) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x40, 0xe, 0x92, {0x92, 0xc, "fdde921663f3228c6803666af780c54f168ab60e2c675a74d496f6c0b36009abd378af00584a1d8098b9d72a8604a2888d189e3aee1f65e9a1695a571597b021730ffa97019cb23ed07fe2c314ca1f3d4981c6825e8fee532ddd831a024c38d6a8afa0830dfc2f99cc27f46421c74ffb32512fa30e3b7a2ec6dbe263acb1de43d6198bead82d306449e9a77ca7fae062"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x20, 0x12, 0x5a, "5df530b36d017ae0460947be3172980cff031294887a0d1137ea31c274fbb7b6fcb989babd1e9f8535d049a2c6b9ff0e3438b6e137b6d6cdd2d5a58e3966999c1928d226f8d74c7d9cf661f533c563c6e3edd7ff4860e8517d40"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x12}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xbb}}) syz_usb_connect$uac1(0x5, 0xbf, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x6, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x40}, [@mixer_unit={0x5, 0x24, 0x4, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x5, 0x4, 0xef}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x18, 'R'}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x1], 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x5, 0x4, [0x7, 0x6, 0x7, 0x3], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x3, 0x20, "7dcda5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x5, 0x20, 0x3, {0x7, 0x25, 0x1, 0x2, 0x1, 0x2c9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xec, 0x2, 0x5, 0x4, "4cb7c32132"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x92, 0x3, 0x6, 0xfc, "7b1f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa4, 0x8, 0x9, {0x7, 0x25, 0x1, 0x0, 0x6, 0x2e}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x4, 0xd0, 0x1, 0x20, 0xc0}, 0x46, &(0x7f0000000a00)={0x5, 0xf, 0x46, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x3, 0xf00, 0xc154, [0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x10a, 0x0, 0x2, [0x0, 0x1fe3f00, 0x0, 0xc0, 0x3f]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x7, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x3d, 0x1, 0x6}]}, 0x1, [{0x41, &(0x7f0000000a80)=@string={0x41, 0x3, "0f82253eee63633ef7b5f0990a8e68d806b1cc89599aa27c95c1746bb3280e5f8522c6421ea95b834d07cc393e3ab82c4eb16f9e972c87b6de5a864baf380c"}}]}) syz_open_dev$evdev(&(0x7f0000001640), 0x81, 0x325000) [ 639.147478][T11858] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 639.457204][ T4122] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 639.487652][T11857] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 639.617210][T11860] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 639.617231][T11860] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 639.617247][T11860] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 639.617259][T11860] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 639.617448][T11858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 639.617461][T11858] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 639.617476][T11858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 639.617489][T11858] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 639.726986][ T4122] usb 7-1: Using ep0 maxpacket: 8 [ 639.737416][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 639.817829][T11858] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.817862][T11858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.817885][T11858] usb 6-1: Product: ヺ⪽豸뛡銾셾棂풒㆕驣燌酳ଞ늆á²âªê¸°í“€ëº­å “욑봥籽婜砤뎜ﺸ鲬᰸䷠茱䵲즴â—쓹ã“뫰寽奵Ỏê˜é—¾á¹‘邅和ᙢê ïˆšê¸´ä—¸ë½§ä˜é‚©ê‰§è…µâ¡€å¯„료鵓鵨翣ￋ [ 639.817911][T11858] usb 6-1: Manufacturer: â [ 639.817948][T11858] usb 6-1: SerialNumber: syz [ 639.897447][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.897477][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.937070][ T4122] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.937098][ T4122] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 639.937119][ T4122] usb 7-1: config 1 has no interface number 1 [ 639.937160][ T4122] usb 7-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 640.067355][T11860] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.067380][T11860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.067392][T11860] usb 5-1: Manufacturer: Ðœ [ 640.067402][T11860] usb 5-1: SerialNumber: syz [ 640.068541][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.068571][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.068583][T11857] usb 8-1: Product: syz [ 640.068592][T11857] usb 8-1: Manufacturer: syz [ 640.068600][T11857] usb 8-1: SerialNumber: syz [ 640.117271][ T4122] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.117296][ T4122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.117308][ T4122] usb 7-1: Product: syz [ 640.117320][ T4122] usb 7-1: Manufacturer: syz [ 640.117329][ T4122] usb 7-1: SerialNumber: syz [ 640.169444][T11858] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 640.187655][T11858] usb 6-1: USB disconnect, device number 8 [ 640.358471][T11860] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 640.363214][T11860] usb 5-1: USB disconnect, device number 24 [ 640.451467][ T40] audit: type=1804 audit(1653803075.266:707): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1255/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0 05:44:35 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x29}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x11, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x54, 0x40, 0x80, 0x0, 0x1}, 0x28, &(0x7f00000000c0)={0x5, 0xf, 0x28, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x58, 0x4, 0x40}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0xf00, 0x0, [0xffff, 0xff00, 0x0]}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x3e, &(0x7f0000000300)=@string={0x3e, 0x3, "fa30bd2a788ce1b6be927ec1c26892d43ce09531639a36f5cc7173911e0b86b27217ea2330aec0d4adbe135891c625bd7d7c5c5a24789cb3b8fe63f1"}}]}) [ 640.785507][T11857] usb 8-1: 0:2 : does not exist [ 640.806274][T11857] usb 8-1: USB disconnect, device number 108 05:44:35 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xb6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xcc, 0x29, 0xb5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x11, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x54, 0x40, 0x80, 0x0, 0x1}, 0x6b, &(0x7f00000000c0)={0x5, 0xf, 0x6b, 0x4, [@ptm_cap={0x3}, @generic={0x40, 0x10, 0x4, "f318dd7e46734f9c834e8a8cb0b63ab38fb19506873ebcf8f98ab64294a3fc90a56e56b97cbfc00edfc9c924e4434eabf86f8fdfeb2e33768bd1605cd1"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x58, 0x9, 0x58, 0x4, 0x40}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0xc3, 0x0, 0x81, [0xff3f30, 0xffff, 0xff00]}]}, 0x5, [{0xe0, &(0x7f0000000140)=@string={0xe0, 0x3, "ec5920f85c7df78cc590470666426f4cfe2b5cace776f1e5dba41ddf4a025698993310a2de27772389bb78d7274b55dcc49f797b3f68e9089b8e836b76bcdb035fe0973e8e456ec50192695052e943a779d264337d8546bf63dfdfaa8e284b46145868b61a1a1256ce14c57aba69c75474aa10f37c929a7757116a48df85e5d745cf3543ba670b79f7ef86fadda11ada743db6d562c28a64a21668d63b1fdd0c33d6976008f216111b2774010547dbcfa98cc84d3f246a4912011ee73a01fc9951977db3cee5ee34c608516462e2cd7a8ad57f8ff67cc2dc52d985a0a8c3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x8b, &(0x7f0000000300)=@string={0x8b, 0x3, "fa30bd2a788ce1b6be927ec1c26892d43ce09531639a36f5cc7173911e0b86b27217ea2330aec0d4adbe135891c625bd7d7c5c5a24789cb3b8fe63f1ac9c381ce04d3183724db4c9d025f9c45333f0bafd5b8af67559ce1e58a3fe95511e85908c5451e8621660a71af234aef84567bf5840a99067a275814028c45bccb8539d689de37fcbff2e491a"}}]}) 05:44:35 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x81) [ 640.887290][ T15] usb 6-1: new high-speed USB device number 9 using dummy_hcd 05:44:35 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xb6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xcc, 0x29, 0xb5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x11, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x54, 0x40, 0x0, 0x0, 0x1}, 0x74, &(0x7f00000000c0)={0x5, 0xf, 0x74, 0x4, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0x0, "f318dd7e46734f9c834e8a8cb0b63ab38fb19506873ebcf8f98ab64294a3fc90a56e56b97cbfc00edfc9c924e4434eabf86f8fdfeb2e33768bd1605cd13f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x58, 0x4, 0x40}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0xc3, 0xf00, 0x81, [0x0, 0x0, 0xffff, 0xff00, 0x0]}]}, 0x5, [{0xe1, &(0x7f0000000140)=@string={0xe1, 0x3, "ec5920f85c7df78cc590470666426f4cfe2b5cace776f1e5dba41ddf4a025698993310a2de27772389bb78d7274b55dcc49f797b3f68e9089b8e836b76bcdb035fe0973e8e456ec50192695052e943a779d264337d8546bf63dfdfaa8e284b46145868b61a1a1256ce14c57aba69c75474aa10f37c929a7757116a48df85e5d745cf3543ba670b79f7ef86fadda11ada743db6d562c28a64a21668d63b1fdd0c33d6976008f216111b2774010547dbcfa98cc84d3f246a4912011ee73a01fc9951977db3cee5ee34c608516462e2cd7a8ad57f8ff67cc2dc52d985a0a8c33d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x7a, &(0x7f0000000300)=@string={0x7a, 0x3, "fa30bd2a788ce1b6be927ec1c26892d43ce09531639a36f5cc7173911e0b86b27217ea2330aec0d4adbe135891c625bd7d7c5c5a24789cb3b8fe63f1ac9c381ce04d3183724db4c9d025f9c45333f0bafd5b8af67559ce1e58a3fe95511e85908c5451e8621660a71af234aef84567bf5840a99067a27581"}}]}) [ 640.972275][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.990818][ T4122] usb 7-1: USB disconnect, device number 20 [ 641.009790][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 641.127324][T14023] usb 5-1: new high-speed USB device number 25 using dummy_hcd 05:44:36 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) [ 641.337234][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 641.388461][ T4122] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 641.547456][T11857] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 641.577910][ T15] usb 6-1: string descriptor 0 read error: -22 [ 641.578000][ T15] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.578025][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.627144][T14023] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1023 [ 641.627167][T14023] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 641.627181][T14023] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 641.627195][T14023] usb 5-1: config 1 interface 0 has no altsetting 0 [ 641.628928][ T15] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 641.787017][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 641.797427][T14023] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.797457][T14023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.797499][T14023] usb 5-1: Product: Ðœ [ 641.797514][T14023] usb 5-1: Manufacturer: Ð [ 641.797529][T14023] usb 5-1: SerialNumber: â [ 641.817445][T17716] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 641.829538][T13233] usb 6-1: USB disconnect, device number 9 [ 641.907137][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.907156][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.927154][ T4122] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1023 [ 641.927181][ T4122] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 641.927195][ T4122] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 641.927210][ T4122] usb 7-1: config 1 interface 0 has no altsetting 0 [ 642.089551][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.089632][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.089644][T11857] usb 8-1: Product: syz [ 642.089653][T11857] usb 8-1: Manufacturer: syz [ 642.089662][T11857] usb 8-1: SerialNumber: syz [ 642.097987][ T4122] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 642.098017][ T4122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.098066][ T4122] usb 7-1: Product: Ðœ [ 642.098082][ T4122] usb 7-1: SerialNumber: â [ 642.118902][T14023] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 642.124208][T17720] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 642.129060][T14023] usb 5-1: USB disconnect, device number 25 05:44:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:44:37 executing program 1: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x3}) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x107280) 05:44:37 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2c9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xa4, 0x0, 0x9, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000cc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 642.435739][ T40] audit: type=1804 audit(1653803077.256:708): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1256/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0 [ 642.474083][ T4122] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 642.486041][ T4122] usb 7-1: USB disconnect, device number 21 05:44:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x800, 0x0) 05:44:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x800, 0x600000) 05:44:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x0, 0x2}, 0x48) [ 642.727228][T11858] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 642.787288][T11857] usb 8-1: 0:2 : does not exist [ 642.794801][T11857] usb 8-1: USB disconnect, device number 109 [ 642.846457][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'w'}]}}, &(0x7f0000000480)=""/204, 0x2a, 0xcc, 0x1}, 0x20) [ 642.907207][T11858] usb 6-1: device descriptor read/64, error 18 [ 643.177231][T11858] usb 6-1: new high-speed USB device number 11 using dummy_hcd 05:44:38 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:38 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='h', 0x1}], 0x1, &(0x7f0000001e80)=[{0x28, 0x0, 0x0, "67fb0a7d9b4b273141a3950b94ef5b827c"}], 0x28}, 0x0) 05:44:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x0, 0x2, &(0x7f0000002300)=@raw=[@map_idx_val], &(0x7f0000002340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002480), 0x10}, 0x80) [ 643.377180][T11858] usb 6-1: device descriptor read/64, error 18 [ 643.507131][ T4122] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 643.507793][T11858] usb usb6-port1: attempt power cycle [ 643.767113][ T4122] usb 8-1: Using ep0 maxpacket: 8 [ 643.908494][ T4122] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.908520][ T4122] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.937076][T11858] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 644.027337][T11858] usb 6-1: Invalid ep0 maxpacket: 0 [ 644.117265][ T4122] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.117304][ T4122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.117326][ T4122] usb 8-1: Product: syz [ 644.117341][ T4122] usb 8-1: Manufacturer: syz [ 644.117356][ T4122] usb 8-1: SerialNumber: syz [ 644.177041][T11858] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 644.297543][T11858] usb 6-1: Invalid ep0 maxpacket: 0 [ 644.297836][T11858] usb usb6-port1: unable to enumerate USB device [ 644.480961][ T40] audit: type=1804 audit(1653803079.306:709): pid=17744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1257/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 644.829628][ T4122] usb 8-1: 0:2 : does not exist [ 644.850999][ T4122] usb 8-1: USB disconnect, device number 110 05:44:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x0, 0x0, 0x9}, 0x48) 05:44:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x0, 0x0, 0x9}, 0x48) 05:44:40 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x8640, 0x0) 05:44:40 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) 05:44:40 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0}, 0x48) 05:44:40 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 05:44:40 executing program 0: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 05:44:40 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x1a10c0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000) 05:44:40 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/dmi', 0x101100, 0x122) 05:44:40 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8801, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) [ 645.727001][T14023] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 645.977035][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 646.118644][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.118664][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.287259][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.287292][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.287312][T14023] usb 8-1: Product: syz [ 646.287327][T14023] usb 8-1: Manufacturer: syz [ 646.287340][T14023] usb 8-1: SerialNumber: syz [ 646.657734][ T40] audit: type=1804 audit(1653803081.486:710): pid=17767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1258/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 647.030082][T14023] usb 8-1: 0:2 : does not exist [ 647.041946][T14023] usb 8-1: USB disconnect, device number 111 [ 647.079901][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup2(r0, r1) write$FUSE_LSEEK(r2, 0x0, 0x0) 05:44:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x1a10c0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140), 0x0, 0x0, 0x3) 05:44:42 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:44:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup2(r0, r1) write$FUSE_POLL(r2, 0x0, 0x0) 05:44:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup2(r0, r1) write$P9_RSYMLINK(r2, 0x0, 0x0) 05:44:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) 05:44:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140), 0x0, 0xffffffffffffffc1, 0x0) 05:44:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454cc, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 05:44:42 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x1a10c0, 0x111) 05:44:42 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/151) [ 647.797267][ T3739] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 648.047076][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 648.177149][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.177179][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.348880][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.348919][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.348932][ T3739] usb 8-1: Product: syz [ 648.348941][ T3739] usb 8-1: Manufacturer: syz [ 648.348950][ T3739] usb 8-1: SerialNumber: syz [ 648.710192][ T40] audit: type=1804 audit(1653803083.536:711): pid=17777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1259/cgroup.controllers" dev="sda1" ino=1146 res=1 errno=0 [ 648.715109][T17777] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 648.997389][ T3739] usb 8-1: 0:2 : does not exist [ 649.004230][ T3739] usb 8-1: USB disconnect, device number 112 [ 649.034402][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:44 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x12d8c4, 0x0) 05:44:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$unix(r0, 0x0, 0x0, 0x800, 0x0, 0xffffff28) 05:44:44 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:44:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454cc, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 05:44:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454e2, &(0x7f0000000040)) 05:44:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f00000002c0)={'lo\x00'}) 05:44:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffba, &(0x7f00000002c0), 0x46}, 0x0) 05:44:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="e37fea2e089b5e7bdcbfe1cb00d3fe7faaa005de4ac76633cdeb3a888807e26f1247cd5372e35bc95cd9da1ac222fb8aba0f35ed0e4a4cf079fa505845a35666621ef5663962994fee69ecb6724c89ac97973d0c8485c717c95d7c360dee0c620ade9ed2e9df78f453d2062e482bff51a4d9392bb229ad4dd21da0590d611542ad93b49dbb8aacb07aef4cece60aaf78e3e6cf6a74faa110f5cf613d0b2fc88b49450f6064876b838892cc9b566b371e42eaff116616c5a1eff36f01247741fd0e63bacd74f01cc8dc01086fe51e7ba908035fc1", 0xd4}, {&(0x7f00000001c0)="c631ac5e30b4f00dc99e8a66d1ab95b25046b9c5b416b35e7c592bded45854186dddf45db60803a7b1743bec57465e14005bb8fadbdd87f9e0063299367505307fac0b82e9a18b4f4da9784677bf1f38", 0x50}, {&(0x7f0000000240)="84d8637760444872ee863991e6972a56df59cbcb344c393abe8f4e34f292eac44a0100000046a11e11f60dffc18aad3aec579f9b389cd4f1634009ab133f157620cee5", 0x43}, {&(0x7f0000003a00)="214acb8f35b183bfd40465536672c26936b3791699b4f66d4ecf9fb506d29a651bf766e3408f94b073c330cd3f7893c45888c281e47549c7230127a40d58f0db56546de08f518ca0ebd76ca1ab2d1796409deb19f64bbd49e5d279d79964759f66e0eb8f75d76c3c184f5f83e667a9ed04ae9bc3ac84332b4174fe6b544c321168fe99f3cf6a9050b63a28a10165d4bc163111eae72a1f7d1250c6d27aae6586277393138ac48c3113098a57d6768c0e6720d913fe97398a8400072b0d8a44474bbd9ee3e6fd26ce9fa9aa2d308320778e1b01f9def8a9523d27949026145480b2b8bfada120b259a535ee9041f1775799646607a84b90faed4689dac08b52abe45d9efbd747b898c5dc8eea2b6139c9fc2dacd66dd3846d9f4df8b8266da00b9536041eefd2dfa997fc1d71d2a72ca8c6303a1476f52d503a1f73abbd8c657acf0801a567b4dfbec2c4121d746f96fb0b1ee0b6269fb2f028575bf43478c86d0278bc2e04f65d2360aa7468ca08669916a7ddf9f330a4e12d34173c85eed68f0c8057a3c70b46c558770e462446a662328ae358805e9e203852dbe702f715cafeffb1947b225b931e16911df2cd1337b666fca18e261600d5f2f6e2be86526d98b8e60ac05cc8ee7b92c9a5b6745cefddfd0de59dabb23d81fe2603590e5778cba789deee3cafb255e4d809cc126b9adec6b81b659bfc8fe09f16f4c3db28ec5dc9e312122a3432863d933353070311ca1da295435b1ffb0f2521d78119e8725ae3c5d72c4d2d4f39d39932f2e4fd5d4088c8efe23a2dc9a7ae43be8fe49d39a86aba903e387fda8b26761247f525396c33480b517af4f434e292f71f317db746d6ae1568aa5e86f58eabc167f7e2ff217c8e55e2fa63abf2ff5f7a3b656d82917d8a1e8988e017a45d0157b419b32f17ce013c1810d369c67f1c1b9f1521fcb6a06a73a90cfe8af7a5f387151a8e5568e919a7e0386b416697ee2a82686d7917a1f67178fb632e503575dc496873561c337b928ff4880a6279fd1ef2e885c5ee77f1dd4f2efc6877aaa028682eca6eaadc9170090dbac1031bb753b73199920e72d942e0f1cd0f996bf6ed6b50e98f0c36dde2aa4cb5b9328d69a0be974f4ece690189936a2abea5b953515aa191768e5bdca4d0d69f6a76ce63c0464764af15ff356a109593d3ff953f84b0073c369e0e7262dcce326d201501379e99a10a960b2e20520912b9d1c3cdbe5859fa79e5f3ad1be9ec17fdd4ee46d12f07037735269a7d28c2a3faa810713221670e34b2cb910113b6d81a361809bfe41a948238197469f1f8ce952ed89c918b35112c1b965790125cfd27e2529928ffde8890cd24181e9e3d5cccecda00b933e9018321f59ae9a21ddc90626771fbca20f780d774d7429ed5b9e08170c02264994bb74fd2cf713bee4e35ba5291a21f7ef9c96d5b710d9365a1d8d89439aa21cb684ff90a136769f6f2a3018f4eb573bdbd8248f3419d3f723a304bfc331f151a872c4bdc4e9f3545a7acbdcbbdad5fb11a5c1d173acbe07f88f54f4fd730d3b1e24275ce1b9b060c257472158a0360d8f399ff8221848d1100b9aab448543fa1aa6c2839a0727c710522dff29a4ed841cb555dabcbd969163c50d16e2039b52c654300fe157db8558b4aa9ebcf0017bea1b69e6c5cd03992906441ad2a50b4095400b58124c6e4e5ed0377c0d0bcc209ed5703c9acbf3b71e2f3b58d140020e1dda90c5c79fa1901e94ecb4b553b1fa16b9201ac132472823580ee64bf26147e500f4fd8b1f053713f7f609e8c5f3886950158ba45797e3a7945daaedaa7bdadd461b387035146fea60770c7bfbc128e4580f0f07c8b63cc2542d8776b971de713d9b6c385d191c77c9daa491a26089ae075a33db99ecd31ae1f575df325db2a20c438af8843d89a418b1006a38f626c44f0b54f10fb8dd41cbee06902f5534a68ffd0dd64cbd042ca3347135507eb8eef79d529c234dca730aadb3344f4f069b759b1394f9baf0981b21e352e67811adb7b43366825124b288ae0e970800853f540c511cf399e6c00b17942e4c9e95614eb0be4a176d0f79fbec6457e2815bd83d24bb1e595ac526eb7e1fc5e4308235912cfa7daa1bcbdfc915f3c7e76a32dd51e5e93ad26da4a9d6c98f723a440a8008828c342a2e821066d58fd2f189549b3b098af4b58d57c615b9874d7d985453ea285cba5a18ea2cb92e27081f3a6141266768bda1ea93f5d88aa497236b81467eb4e8e0624a64ba8fe0e6a6c7fbf53522f4773aef58c1b676972e90013a4d4f38e20aabc1ba87a731a204ab0c45acbbb3efbc8b679f17f771e4e2e1e76b211cdb1f2117aa33d0b73162f7a336a2272bb3b5524c9f8798454ed7698e0a3a60ac5d571ec042f1a38fed002f6650118635d51495ed26e3237c09aa06becd159fbedf4c2e6955c4a9f26ab65c296236b94c23c25ac561ee8d5197eb16093576ae012e07e168a4eace8a34025023514706e665910e52492f74808a67c2e3d953545e4748abb63e7b96baedf19c347d8ae95a9b6094c8a2688d5257e2e28baf12183a1b77a446e86c9b86f16e9ad74f7ba62ee4bfeffc5bfa377f196de37aca09411a614128aaf4ca1dec04bed6a6f87b50823b6c4ff7e5995e6cb099c9bcaa4065455aae98dec2d2f066141174c90bdc17836a61524fb021a4e82e3e1df07c353a04bab2e77531a4617c25095bac63b5dc6eb837478e20c6bb9a81d5f4aa13c0402e85f780fc3962928a3ab4a6abebccdc6cffe85f92fddca5bc40fd7a685c76e5d5312a05a595f434ff6a003a261401bc2fbbdd126b1669f15d26dbfbbc982b15a0d9866e7e133c61880f5b2f55584c0213ac419cdb23a572e9bc2755369b62e4be9aa90790b36de20d2e88fedae45e92a85a9855af40254b91c2821fe8d312fc280b59aabc35a1d2794ebc3ad51cfafa456ed685fda1bd8386f501348f17d1b1475bef2d8a1827ca00950d35cae50ce6a2f05a7c0b089973f4a5842100eb030b6904c7a06a1677b9c532306ccb360edb905ed5934e5c2a99062fab5ef251503ff1abb72bbc68aa5e5e1645362d2add76507c2370995fc59a39f6c9908f07e50c5b139127b9c895713b7b688cbc9608f573130d2270450b1909115944a7d6390c154f0a84115d7583d75e459886be092299b4fda57d44bdfba6d44ce22191351e873edcf4ccaef71132b02e8f225ebf56d9663bd2fe05ab71a06f78e9399fb8e86f7abb01efdcc7356ff9eb8da55821a8c9c330862e83d6d9eba72547cbe0841d61f478f1bb73ea17a6482eab821f8c5f2ffa562f1caab2f37a6454c5704bbb0c284d403f3ad87037c789453485c61ec826d86a3176a98cb8447857f10f2e495b2debac00ba86af5451e641c8ae9bd45da6c9a98042c2a3ca01a814cc0bed4e38f717f32c8baaf7a19a74ba72ae7e077f14b18bb387a6a02967cbf9b000367be7e791a4ce65537db19ef8cd60990a586747c753890d4326f221c54515270cfb5e4011bbdbf54335613d2a96125083edbc6676a14a4442f26da2057c4604cbe81ded5cac62e711a62a10b03fe945d76da3c6ce866b25835a91a308b4c892f2aeeddcc0f7280c509835bc551614d4f66c15e847da4e0fcc7283765d6443ea2c3df6e9e3c8d62c12b8c643fbe15b5bcd9ca3c94f16d4181575374e8243db43ad353d38b658d432490c4b02c593ba1dbc4ddeb869ea1b62d05b59f3eeee8bcff8badd62cfeffae4d48b89d6dd6722e56dc0f1a5c6415b40dfd24116e4062aabb197fc69007465b5e4a52d18bde2f9d906d79397cd9df0de393e7ea6aba9399a802f4edaf3df15cbaf60a0be64f1c4a50d2d1ee8321dbfc70ec762572329de4bac15c17c0f67cdaf750cfc345232004b35e89bbd25a50a381fec4b80d8898873a0b3df682d925db2fe915083e74ba970d232488a00cd35c2bcabe010da50cef13ae3c8c757e63033caf4861d0b85615eabe811f0d9e3676d1779a14715a9cdeb0df27164f2dbfb9b854059e1cbe5faf1f35ec7bbd789361ada1e6faa80de12fc90ec23d2a643e3831f36a7f76d116639f2f40e93648946d9edcabcba7baecd49c6a4ad59637bd9e83a05bb43df6c83d3e19174a093460e7ecbbe77310c153313697b32e62ec7fccf2ae78899358f883a2800b7e6bf2f910078e81f916d7353359412ffd0d80cc8d94e710607fbd03f0fa9484627353545cf5857a519165600e2ee685b0a9432c8367653295898fbc87a1009bc8b259fba80434f0ea4592e4ded996edfa3b05220b52fc186b04b5b37f67b2fd880f3e119f45328091c8da75bdffcca19ea2ecf2299306e4ad8ee4ae9c949922b802ae0f3836acd265b5220bc7e5a0a3823bcb5d8baa278a6dbed280a41c8ba68f8063d203e9df2e26f6e01fab6ea013c24684a7057c1042f1fda6a23fa6a44b2e259016966dda0d9a0ac25b458d8e0d0df9a8c95a772137711c08073b3b5ec8cf523b17b966abd8c08b81356b011e87b58696972212781f26322676100a00d34720d02d0123462360add00c3357f55496e4f9361ea1cb3fae52527911f7372cb69cae36fa9249864e4e6779027ba86ab0607201a2a5ae23e7280493b6eb3d00e114bef83a818b77a0d5ec3978a021c62cd0f8b55af356057cc87430754b53cf69d41a12069e39e68226974e5b825c9fadc6009bcc964f3e66e0e424c58fd0ba25c07de963160a2c57e02bc9695ef1b1e3af7e880688056f1888d527be256f5b76dd8b6ede896ee097f5565abab05a822969a53f02edfee76d9bb0782dcf9229b3ce1ae0d2cf3b1250960995b5ede230c0ad89945246b63bdd5361d845040fae1bab2f1f9ad21236a8cbb8e7b71b637518fd11f5d00e6c4af47fea3154a0ee99452e1af845c3f873c7341355401ecd3efdab5e085ef48dc69931c433ac6298df8adf7966d4fa4c97e6683e27157b420cc3ed594db99aeefec34517a5b81c93f274e5c05aed5d8c2134a97c35ca4d9e6c63cd948aebe8f9150af9cd6fdbf9aba0311ec908bce875d79f36c0b3eb583e6e7695c3ea2a4f1c53fea789b67a51ddeaa0a7a7edae99653f298749f006be13001b5c905210a1cfcc40f352ab15816469ec0150c9489fb5e69cb26b69fab9633caa278c3b78efb5aa6db400541269967c0096c0dba1dae44da8d6c26dade391687b4584346e90af47106e77fa7031cba0c14374d9b4e8a03444a62a4f109a326fbcc1cafe181bf1005e28bde5a892e9e609bac9c25c7ff47b4c5d0343c1", 0xe9a}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x0) [ 649.797075][T11858] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 650.059610][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 650.187104][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.187131][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.347147][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.347169][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.347182][T11858] usb 8-1: Product: syz [ 650.347191][T11858] usb 8-1: Manufacturer: syz [ 650.347252][T11858] usb 8-1: SerialNumber: syz [ 650.744305][ T40] audit: type=1804 audit(1653803085.566:712): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1260/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 650.796558][T17799] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 651.192021][T11858] usb 8-1: 0:2 : does not exist [ 651.221401][T11858] usb 8-1: USB disconnect, device number 113 [ 651.254302][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:46 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:44:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 05:44:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x1, &(0x7f0000001340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x1009, &(0x7f0000002940)=""/4105, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:44:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) 05:44:46 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)="41bd", 0x2d880}], 0x1}, 0x40005) 05:44:46 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000080)="f65c37c8226fbd358a91bfd58e", 0xd}, {&(0x7f0000000180)="0e3700f2301a26e98f950846cd6ff81478dd81511267563834bbd354c3fa2cfbd4303630eae3eb24ab37c5bc54b0c2cbebd7c2941086b288a7eb754768a85b5bc7ba03972f4808a0eaeabd402af05ecbfd7d01448273bcde761e14bfb607b8fda11523f7d21c30a402ffd2a965d1611b60b542f53a93590f7935ddc295a5d67325c78969b6a7c89f155924b2f54fe840d2e005e36261142212f216b16cd380c633f1f8c645e111e0bcc4f1a97effc272f57850f9bb2eebfbe08981e4db382e9894ca60ce0e65e4a71c4b1be7ebd7aebc8305465eed5b350c9b5a8ab54c84b43b79b01f143502b10f59bd6ccb43a6bf163fbb09", 0xf3}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="d11f54af6c88f520402b916c528ba6300e8617281a942409fb45c4fff25981bae70d926485655851863bdbea3e75fe47bbde443121b3b7f9bf741c9004aa356df2b040bbb8e7b5b90d1d6505a9e899d84d5482dfeab62b45a31de6a9b5363ead6eb93cda1610291705fbe5a2", 0x6c}, {&(0x7f0000001300)="a9612f50a2b86ae373cf9991d8de11bcb200494d737d29e7f7776196f98b605a7b2c60337f26128bd37fba688eb4d4c9125b4b4294ccb44c524f12d5da73e202687c983987bcc183a2e51e2c6ad23d76a0b67005c29c6dc94a997f436cd892edf76f3f005c3af3971637c0d9bf30e9862a0256a54e65bae555fead3ba0063a1d760dfa67d39b9ad3afeb204c8ade2241672a911656decf8a43b48977e03c99ab5a4cd6daec44638329f5b5c4e7fc19c2fa26bd5c884f670a93b071f2d76d910ad97c3bc8", 0xc4}, {&(0x7f0000001400)="c16b51c2fc136fa70d317b0087fda322c4d2a4fafb64c37e6e73886fa6f0bf73431a1dad31c7ea43dc78afe657238956bf059cc7e5875528d4de501bc33ca4ebabe4064c23feade45ca0a3812c9f353a3215b7708d914ffab2e6048fe428193a38c926ed15dd7c0a6e85088c6e048d2362156e29314f23e17d01949a61b2f1f769d2bb07e1c05360308eb52c18932d79475a052f8955cb03b5b5dba659da8ff097317ead8a3cfd5a59806d16ac6ab2a00292c1e8a3baa35196a09c76d2e9ea744d8cc23e5bbd0a278c030cca5172166927f8f82668cf16d41d8cd286f6f4896add1519f0c78d760562249bda15704575c77a749007ec7f71b4627d5beb4cb005bfbb699c31646848ed7dcf752463990a9daccd0aad233068989f20af180b107dbc5887fe7e8da9bceb4093dd1f1378b4948446ae1a84529173eaffc70f71b8ae60ba4b60c7d7e0d7e2bcece38049a2fd3d311fe1366273ac2b187fe7b34e52ed34f28ad401913b8568a497454b9c0fcff446e78bf2bfc616e2bbd98b6b58bbb868053254d3e785618fecbad07577c31a0e6ecea1a9ba52180a92bd05cfd1fe10ed16f39607686687b6b5fe2819d70476e70f9314a6169c57d686e1a195d27c3e73824d2a76578e6c63f2ecdf0b9e9d36c79d9e9819cfa00d90089c46520d349a0c0d1725913b0d8c75d4fdd848926152b577955c5c9f2063fcd2639c365064dd8cff3a4d5038d5069cb6b923aa5107965abe68a43c389e85bffa773649bffe6dba89cd19958b4571d0c3313706f6db9bc171e1ffdfbb26541637166ec96377fcdd893a0b96179d148b9aa75b505fd8c341102c3d383569ebb05ff8b40aa71d64688ff41bf4a60981dea61806e5567016bfd8ed8539c510aaf8f1143d350a1053ea11f31853dd02a28e92a230aef5ae7abe05cd17dc290f5a40df077e0d1a636efe15baf2a0579faeb8ad14e9a5050b3026a58781275662186eba45e35033123c400efca9f223200bdddf124fa523f5df53e1ac7e7a99390c6df88c4d92fd96060883a480596c30d19b4635b4d97f877bf4113ca07a5c3fc242507a57b2d883f983332520995afa79e46ae80f06e9f0676f4de7de08f3896ba6382d8b0c94c554231dfcc46247602a89cbc5c9a85f292666b2af35e9ab6063fea349282c9061b8b1da62a88c55c08979b2112cdf0fd93e76521a41f71589527609f593a70164987eabad5ea2a17d576880d41c18a4b2ba113599a13f250fa120fe563112f6d32c6f47d76b12e281fcea8bce3351adbea4d730c00e9da56e758d8d59b2a167a30e35096595eebc00f2162cc388c7b017a0a01ef6f1541403cbc63795c738f7f34023b079881263dbcabd0500908060020682279aef68b93903c6b66a7da860dc5ee586367f65fffbc8f828c901c55517a575d6254e3bab843a63594b0586d7907491e8a84308e1e3f5774178942fb64f6a081748cc3635b2d000c60b7ee1832864e9bc785d369660ed5e9218392aaaca8df1c2b616940255f033251117d7ddfa35337dd74171f638d538fb7b92bb8de216304637bf48adb9bc5bdc4e487c43ec653eb19f6a79cc1c2508302ca0e4ae97be56e74fea9641263c52dfb61edc16116c43de4f2f2d8596df6452365d28ed91949e5046b6263937973300f99897c8a99c2e113c56263abafa1034e9aa117a2ae41f61479eca58a7b1520fe1cd2fe5147f2f943aeb975d95e171df3e7b1ea80eb3191035b24d230dd3bcd143359a90b4ec187640edcc6a5bc89569e6197357db9a63b39d12a9755a3ba700a7d61c28c316ba30c9c5a5da5a3de87843f00b9208b619186acf9a6bfa52b0bc24c9c841f3907904c03bf056418fb01216b1a2d7627b45963bf2f76fa2cde5ebe0aa36c0b1d21195431082c4d3f03669daeb975e58ef476f1e529db0b97b26b3532e6b3e87664a5666d01a43269e2744ec55326daa5cb3268fa85e0338c25e36bb3834aa03bbdc53abb232f76caf0717a95f7d053c781ef31438db8de99582ae7a62ed89a6426f00f8d30ce7c2b04a452dd8a8710620ee4853336caf8c310306c891ab7513a88fcdbfe93f47af1031272bf971e19f26b5c9367911a6feb6e0c8105171f1d57dfaf07c4895cf1ff75f8a0494e359358b1dd885dd923be0e856ef1b8880166610a4c9488ccfa96870686a886f8633c96435b0211ddaa8a621757e407be8fed22b6793a17d337536b757b14da529ca4875b713f328f42a5a07461a90be127e3648017c16a1f2f2379bf6aeeda5ff4e6526a936e37fbb07ff374a826f60c227d3e9d8efb3263381a630bc9e4782e4baa88f7d93239d06cc14276433c3ced85ad194182c83c53ebef09755766fe5e3fe38f57e926940b487e7a0d5192f803c783b70f5f634862e13632190fe4035f0d0a0d789a7c04180c6a41e8d988eaa1c94d745d18eb3cc0088d495612fa6ac404334698fdfb7562a668301efe7450710834ee30404f863ffa88663081625383e028673ce41a7a381cd6653f859239c5c8df6649d592eab184d36f01d3f992c03aafb8672eb6812e4775aba7f4938b8549bb2f9f96f9cb97a6f8a1800b4f95e24f7b1eb3c9c46eea04049f2889ae6e736ddb761ecf800c09250f2ef712c330315ed1999fb9f8ebf164c2edf9c9e8509cec3641f5772fc895a1644e8af8e737af3cbdeec0242bf4d912dd356ede1670fc4d84a21933dce13f3475cc4397ae566a63bd6172a531e7b34e18cd6823520a5a594d1498bc1a2ec0588781e09af04c6de946782df1348d236e78f89d4e32cab737736eb2df077da84a764cb6379eec017c6f08b6b603612cf384b32cb1c68db5743fe10bd3b91e94d97168b189847c30d4cfb6cd7193cd4f0e83d0811827913c2e445f574c614b38a437db0982532cb0d63ade5acf08d9b5aa57e39f6e6d045a116528b5332d5a75a94878ce1ab43aa9af3c168c32fe9ad6079266ae011056a50f975acdcb9e4dbbec038a97c8d2fca416b69d53971d693fb723948df8cb5b3197cfebd63442b5e697ebc974a250d0c3c972799d0788fd7320037ba66ef095c78c6f74580a3bff2c2c8e42a083b8691da0c4d02348765c33d4e4fa2deca38f7e4dc83d79341f5106d6c7d83856fda1ff30bbb7b806e405ef404c0c2a17910c7edb17e4072933a7c53dc184b281c6611661c06b47e508e7ea698cec9ff2648c71be95b09b7ef2575d0c0cfa0a93b024cd98f387da3277b46713537eba54819833b48bdf1630c9f6be8530acd0752b869e362bbcf9d340894792e620b4927cf4e5fe5a87e7460bd8d232f3adf699d931188d580e26a0b88000dde95777426b2532de8d7c56dbc92e855e6dc2f81064a436dd66d43ed835c66a8241331029f2a8b5838cf072e681ceee03263578879b8b85e150270a8cb5610d5c4393ce182dd61a7ef9120096c320a47bc18386e604e2d532ab133e2c69260330cba6dc5ee23bc6e916e3afa3547f814303ec0cf12cd4ee5fe767f7622000b5c9c4c1a210b78a9e2582a12ee7df89b7439ed6f5015f30392cc9e818231e0cca92633062d8f2c2ae9b13e9af24d6482c6035c0843e58cee02f100865dd66a5a575d9652d6c9e1a7e1abd9c43e451480cfe954409baa0ef718a3cb9c05acded55377dddfb133fe2be11a4de9c0140e8c3cdefac58537e7e715507014dfab738dc66e6206fcd278ea5487e63e1dfcf5d697236aae10bbe9c0a02955afdfa99083d092efeeb1fb1a0c28b2cce10a0137e7aa26d5ac57356b38ee051d7cf8bc0377945e6b5a3d59be5acfb1a055a27e73b1a45d501be8242d775569575550f21992836d27f84973ca9e27c8d68eecc7a250206bb537faf4b96428d867a7abd1c8436a4d781d4d84c6e7cae3bbd9c3a280698a1933963f2e17b4400af2fa8b7e552a9bacf3535f5a716cc989111f254223a3948d513b41b321073737b373225811a1d016a53bd27cdc71ca86c994c752e6d7c7d5e01cc1b1e9d5b29c275a327fa408858facf5b9ab71fca997e33d303f2831b26cc305fb18446448e7cfcb3a4e93b5240ba7f9eccdfe02d0715a27030420434d960f0b42fe1e52798d0489659943660bce0f0ff6293f25085d1ab8bb7e1578d7db60f6416a64fe6ee48269161296b0150c311fd32684ca1d978491ddb54927a6cf3ed5f7d06a473050930a612b7e808f3ad4c441", 0xb99}], 0x6}, 0x200400c0) 05:44:46 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000002140), 0x8) [ 651.957407][T13233] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 652.217061][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 652.340973][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.341000][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.527150][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.527171][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.527184][T13233] usb 8-1: Product: syz [ 652.527193][T13233] usb 8-1: Manufacturer: syz [ 652.527201][T13233] usb 8-1: SerialNumber: syz [ 652.889487][ T40] audit: type=1804 audit(1653803087.716:713): pid=17820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1261/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 652.893362][T17820] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.307493][T13233] usb 8-1: 0:2 : does not exist [ 653.314133][T13233] usb 8-1: USB disconnect, device number 114 [ 653.342574][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:48 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:44:48 executing program 0: socketpair(0x25, 0x1, 0x1, &(0x7f00000000c0)) 05:44:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x400000a2) 05:44:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:48 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x1b1081, 0x0) 05:44:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454dd, &(0x7f0000000040)) 05:44:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) [ 654.127126][T14023] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 654.377067][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 654.527190][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.527220][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.699850][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.699883][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.699905][T14023] usb 8-1: Product: syz [ 654.699920][T14023] usb 8-1: Manufacturer: syz [ 654.700006][T14023] usb 8-1: SerialNumber: syz [ 655.088463][ T40] audit: type=1804 audit(1653803089.916:714): pid=17843 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1262/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 655.429801][T14023] usb 8-1: 0:2 : does not exist [ 655.434963][T14023] usb 8-1: USB disconnect, device number 115 [ 655.451848][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:50 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:44:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) 05:44:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, &(0x7f0000000180)=""/228, 0x26, 0xe4, 0x1}, 0x20) 05:44:50 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) 05:44:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, 0x0, 0x0) 05:44:50 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x17) 05:44:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x9, 0x7, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 656.237074][ T3739] usb 8-1: new high-speed USB device number 116 using dummy_hcd [ 656.477221][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 656.597393][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.597421][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.757401][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.757449][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.757471][ T3739] usb 8-1: Product: syz [ 656.757487][ T3739] usb 8-1: Manufacturer: syz [ 656.757502][ T3739] usb 8-1: SerialNumber: syz [ 657.125045][ T40] audit: type=1804 audit(1653803091.946:715): pid=17858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1263/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 657.417939][ T3739] usb 8-1: 0:2 : does not exist [ 657.424257][ T3739] usb 8-1: USB disconnect, device number 116 [ 657.447892][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:52 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:44:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x2, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:44:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@empty]}) 05:44:52 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x17) 05:44:52 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x17) 05:44:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x0, 0x72, 0x1}, 0x48) 05:44:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 658.207042][T14023] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 658.447022][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 658.567268][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.567294][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.748018][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.748114][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.748128][T14023] usb 8-1: Product: syz [ 658.748145][T14023] usb 8-1: Manufacturer: syz [ 658.748154][T14023] usb 8-1: SerialNumber: syz [ 659.116712][ T40] audit: type=1804 audit(1653803093.936:716): pid=17868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1264/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 659.337516][T14023] usb 8-1: 0:2 : does not exist [ 659.351778][T14023] usb 8-1: USB disconnect, device number 117 [ 659.372449][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:54 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/194, 0x45, 0xc2}, 0x20) 05:44:54 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x19}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) 05:44:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 05:44:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 05:44:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) [ 660.137362][ T15] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 660.387401][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 660.508337][ T15] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.508366][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.667240][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 660.667292][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.667312][ T15] usb 8-1: Product: syz [ 660.667326][ T15] usb 8-1: Manufacturer: syz [ 660.667341][ T15] usb 8-1: SerialNumber: syz [ 661.048124][ T40] audit: type=1804 audit(1653803095.876:717): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1265/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 661.319108][ T15] usb 8-1: 0:2 : does not exist [ 661.330520][ T15] usb 8-1: USB disconnect, device number 118 [ 661.354880][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 05:44:56 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') 05:44:56 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x40000140) 05:44:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) 05:44:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4b49, 0x0) 05:44:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wlan0\x00', 0x6602}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)) [ 662.107409][ T15] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 662.348166][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 662.467127][ T15] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.467147][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.638616][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.638652][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.638673][ T15] usb 8-1: Product: syz [ 662.638688][ T15] usb 8-1: Manufacturer: syz [ 662.638705][ T15] usb 8-1: SerialNumber: syz [ 663.007413][ T40] audit: type=1804 audit(1653803097.826:718): pid=17917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1266/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 663.397358][ T15] usb 8-1: 0:2 : does not exist [ 663.407353][ T15] usb 8-1: USB disconnect, device number 119 [ 663.431840][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:44:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x2, 0xf260499f, 0x5, 0x1}, 0x48) 05:44:58 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:44:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0x1}, 0x48) 05:44:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x0, 0x54}, 0x48) 05:44:58 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0xc4973098cd7f2563) 05:44:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 05:44:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x5, 0xf55, 0x2, 0x2}, 0x48) [ 664.167103][T11858] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 664.427025][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 664.558074][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.558105][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.727596][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.727629][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.727649][T11858] usb 8-1: Product: syz [ 664.727662][T11858] usb 8-1: Manufacturer: syz [ 664.727676][T11858] usb 8-1: SerialNumber: syz [ 665.094591][ T40] audit: type=1804 audit(1653803099.916:719): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1267/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 665.387146][T11858] usb 8-1: 0:2 : does not exist [ 665.395210][T11858] usb 8-1: USB disconnect, device number 120 [ 665.437691][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:00 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x5, 0xf55, 0xff}, 0x48) 05:45:00 executing program 0: socketpair(0x10, 0x0, 0x12, &(0x7f0000000000)) 05:45:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x17) 05:45:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50}]}}, &(0x7f0000000440)=""/149, 0x2a, 0x95, 0x1}, 0x20) 05:45:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x2, 0x4, 0x8}, 0x48) [ 665.848272][ T40] audit: type=1400 audit(1653803100.666:720): avc: denied { create } for pid=17939 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 05:45:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:45:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}, &(0x7f0000000100)='GPL\x00', 0x4, 0xab, &(0x7f0000000140)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 666.167164][ T25] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 666.417910][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 666.548968][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.548988][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.735636][ T25] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.735668][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.735681][ T25] usb 8-1: Product: syz [ 666.735690][ T25] usb 8-1: Manufacturer: syz [ 666.735698][ T25] usb 8-1: SerialNumber: syz [ 667.100861][ T40] audit: type=1804 audit(1653803101.926:721): pid=17955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1268/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 667.394012][ T25] usb 8-1: 0:2 : does not exist [ 667.404412][ T25] usb 8-1: USB disconnect, device number 121 [ 667.428927][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:02 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x17) 05:45:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:45:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@alu={0x7}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0xea, &(0x7f0000000240)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:45:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x0, 0x0, 0x0, 0x840}, 0x48) 05:45:02 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f0000000b00)) 05:45:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:45:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x4, 0xab, &(0x7f0000000140)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 668.187066][T11858] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 668.427211][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 668.547153][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.547182][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 668.707230][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.707265][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.707367][T11858] usb 8-1: Product: syz [ 668.707383][T11858] usb 8-1: Manufacturer: syz [ 668.707417][T11858] usb 8-1: SerialNumber: syz [ 669.060996][ T40] audit: type=1804 audit(1653803103.886:722): pid=17965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1269/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 669.427349][T11858] usb 8-1: 0:2 : does not exist [ 669.437488][T11858] usb 8-1: USB disconnect, device number 122 [ 669.467945][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000100)='GPL\x00', 0x4, 0xab, &(0x7f0000000140)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:45:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x17) 05:45:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:45:04 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x4, 0xab, &(0x7f0000000140)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:45:04 executing program 0: r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 05:45:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), &(0x7f0000000240)=0x90) 05:45:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@authinfo={0x10}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}, @sndinfo={0x1c}], 0x48}, 0x0) 05:45:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 05:45:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 05:45:04 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)="16", 0x1}], 0x1, &(0x7f0000001c80)=ANY=[@ANYBLOB="a80000000000000084000000000000006a81532e13467c2d239ed972a366dd8fd418e0fb2a8c0f784040ac247356d1e75797acfc9ea733a9fa5f23fcc9de11fb56724f0d7696e7b45a249599e8a6bedd7951433781cff3a4f6ff40e86455470ec0886184b0039d459651792cbccb0d6e0e040aef42ffa028c58fcd5cc90fb798f836b6ba1f2e0b6eb7d268ecf99262ffe631a4e6fcca2b401c83b407e6f1a7f3dc7e0000000000005800000000000000ffff00007f00000048bd0b4cb71052d71491350efe26c188af6122a1a4e5682a847993f778d5ddf0c0c89ae2d9b45ddc018c97a57848559256249f30b66e624f845267d43268f94b840d000000000000a8000000000000000000000000000080acb8edb19016c8a8ffb739f0c2e3432799ba3db689743da1fb2ee8a3769214f6a62f0490ad812f90d3a0d996413f801e1e7d41b6c050e6b490b13ffbc170e87b6c65b4867158f3640b164392e10fd2cff45beaeb0ee7ceea2654cf0e6d3103885d27d8785de33146dba1291abaa73d85354201e33b67b621198ecc49d38c038df800fe509e47526b5a626b74cfeb2092920000000000000010"], 0x1b8}, 0x0) [ 670.227097][T11857] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 670.467025][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 670.628443][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.628556][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.797239][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.797266][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.797284][T11857] usb 8-1: Product: syz [ 670.797296][T11857] usb 8-1: Manufacturer: syz [ 670.797309][T11857] usb 8-1: SerialNumber: syz [ 671.153523][ T40] audit: type=1804 audit(1653803105.976:723): pid=17982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1270/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 671.537354][T11857] usb 8-1: 0:2 : does not exist [ 671.548016][T11857] usb 8-1: USB disconnect, device number 123 [ 671.563109][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x327b}, 0x8) 05:45:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000000c0)='K', 0x1, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 05:45:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 05:45:06 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:06 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001640)={&(0x7f0000000000)=@abs={0x8}, 0x8, 0x0}, 0x0) 05:45:06 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@prinfo={0x14}, @authinfo={0x10}], 0x24}, 0x0) 05:45:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0xb) 05:45:06 executing program 2: socket$inet(0x2, 0x3, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 05:45:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 05:45:06 executing program 0: syz_clone(0x2080200, 0x0, 0x0, 0x0, 0x0, 0x0) 05:45:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000004f00)=ANY=[@ANYBLOB="14000000000000000000000001000000000000000000000011000000000000000000000001000000ff000000000000008c000000000000000000000007000000864f00000003060ce88d8eda0e6f5e3fca54050f594777ecfcdf10482d2b9aa5860012f4b6c249ee", @ANYRES32=0x0, @ANYBLOB="640101007f001a0100000000440000000000000000000000070000000100009404000044868bce7ca12171233d44dd3ff9157f7f2ce2f1e000000100000005e000000200000002ac1414bb00000005e00000854e0008"], 0x1b0}, 0x0) [ 672.308482][T13233] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 672.557784][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 672.697762][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.697783][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.867527][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.867615][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.867636][T13233] usb 8-1: Product: syz [ 672.867666][T13233] usb 8-1: Manufacturer: syz [ 672.867681][T13233] usb 8-1: SerialNumber: syz [ 673.267509][ T40] audit: type=1804 audit(1653803108.086:724): pid=18024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1271/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 673.657174][T13233] usb 8-1: 0:2 : does not exist [ 673.665032][T13233] usb 8-1: USB disconnect, device number 124 [ 673.710132][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:08 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004ec0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004d00), 0x0}, 0x48) 05:45:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 05:45:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) 05:45:08 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:08 executing program 0: select(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x5}, &(0x7f0000000080), 0x0) 05:45:08 executing program 2: accept$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0) 05:45:08 executing program 0: r0 = socket(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000001240)={&(0x7f0000001340)=@in6={0x18, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000001380)=[{0x70, 0x0, 0x0, "befea433459af1e8daf6b4fba69ca23b5f2f18ef3eecaba43e4d2baf608a4fa0f9c6ddced8371d6a2bdb6e93222170c333817693c5ee12a33a1976fad38c116e3db5c0ca65276855da1d1104b448ba5e7ebed73e79ceb4a085"}, {0x88, 0x0, 0x0, "0e6ffe26b5a8e5626e59563c42376f39c3c13397c62f363bde6d26f24bd8a0ac500442c5d84437d5d658c592aa86d4bdc685b7f1a822a62bc56d0f1255b79d40795435810268402d4d43a451dd84db7b5e901b4979e53ae8dba1b36641f54f161b5fa76f45bc40f785cc9e06adc1d6058b"}, {0x710, 0x0, 0x0, "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"}], 0x808}, 0x0) 05:45:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8) 05:45:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(r0, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="0bab2c19482a2212682faea072a388ea", 0x10}], 0x1}}], 0x1, 0x0) [ 674.205726][ T40] audit: type=1400 audit(1653803109.026:725): avc: denied { write } for pid=18041 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 05:45:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x89a2, &(0x7f0000001140)=@get={0x1, 0x0}) 05:45:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 674.421522][T13884] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 674.668414][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 674.819002][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.819035][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.007206][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.007236][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.007258][T13884] usb 8-1: Product: syz [ 675.007273][T13884] usb 8-1: Manufacturer: syz [ 675.007286][T13884] usb 8-1: SerialNumber: syz [ 675.377122][ T40] audit: type=1804 audit(1653803110.196:726): pid=18035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1272/cgroup.controllers" dev="sda1" ino=1146 res=1 errno=0 [ 675.698670][T13884] usb 8-1: 0:2 : does not exist [ 675.707442][T13884] usb 8-1: USB disconnect, device number 125 [ 675.733929][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 05:45:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x2161, 0x0) 05:45:10 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/36, 0x24}, {0x0}, {&(0x7f0000000140)=""/86, 0x56}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="1c", 0x37fe0}], 0x1}, 0x8040) 05:45:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x82, 0x0, 0x0) 05:45:11 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 05:45:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006e80)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="8c", 0x1}, {&(0x7f0000000380)="f1", 0x1}], 0x2, &(0x7f0000000500)=[{0x10}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x2, 0x840) 05:45:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup=r3, r5, 0xb78750d559591e17, 0x2, r7}, 0x14) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)={'c', ' *:* ', 'w\x00'}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)=0x1) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x12, &(0x7f0000000040)={@cgroup=r8, r1, 0x29}, 0x10) 05:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) [ 676.461810][T13884] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 676.727205][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 676.847092][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.847115][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.027821][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.027850][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.027869][T13884] usb 8-1: Product: syz [ 677.027884][T13884] usb 8-1: Manufacturer: syz [ 677.027899][T13884] usb 8-1: SerialNumber: syz [ 677.403407][ T40] audit: type=1804 audit(1653803112.226:727): pid=18072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1273/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 677.780688][T13884] usb 8-1: 0:2 : does not exist [ 677.785664][T13884] usb 8-1: USB disconnect, device number 126 [ 677.807079][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:13 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:13 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0xd8}, 0x0) 05:45:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 05:45:13 executing program 1: pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x1f}, 0x0, 0x0, 0x0, 0x0) 05:45:13 executing program 2: r0 = socket(0xa, 0x3, 0x3f) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) 05:45:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x0) 05:45:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000000)=0x8) [ 678.577159][T14020] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 678.817240][T14020] usb 8-1: Using ep0 maxpacket: 8 [ 678.947717][T14020] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.947744][T14020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.119660][T14020] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 679.119694][T14020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.119715][T14020] usb 8-1: Product: syz [ 679.119730][T14020] usb 8-1: Manufacturer: syz [ 679.119745][T14020] usb 8-1: SerialNumber: syz [ 679.516442][ T40] audit: type=1804 audit(1653803114.336:728): pid=18089 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1274/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 679.541819][T18082] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 679.927330][T14020] usb 8-1: 0:2 : does not exist [ 679.957741][T14020] usb 8-1: USB disconnect, device number 127 [ 679.983492][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:15 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x0, 0xd94}) 05:45:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:15 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="019731bf30000000000005"], 0x2c}}, 0x0) 05:45:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x5451, 0x0) 05:45:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0x0, 0x5}]}]}}, &(0x7f0000000280)=""/192, 0x36, 0xc0, 0x1}, 0x20) 05:45:15 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000b40)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:45:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 680.747076][T11857] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 680.997038][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 681.117279][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.117297][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.277224][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.277257][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.277279][T11857] usb 8-1: Product: syz [ 681.277293][T11857] usb 8-1: Manufacturer: syz [ 681.277307][T11857] usb 8-1: SerialNumber: syz [ 681.633213][ T40] audit: type=1804 audit(1653803116.456:729): pid=18103 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1275/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 681.637312][T18103] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 681.977634][T11857] usb 8-1: 0:2 : does not exist [ 681.987384][T11857] usb 8-1: USB disconnect, device number 2 [ 682.006207][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:17 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000080)={'batadv_slave_1\x00'}) 05:45:17 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000002bc0)='ns/time\x00') 05:45:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xffffffff, @loopback}], 0x1c) 05:45:17 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 05:45:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) [ 682.747398][T13884] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 682.997041][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 683.117563][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.117730][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.287579][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.287661][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.287674][T13884] usb 8-1: Product: syz [ 683.287682][T13884] usb 8-1: Manufacturer: syz [ 683.287691][T13884] usb 8-1: SerialNumber: syz [ 683.664279][ T40] audit: type=1804 audit(1653803118.486:730): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1276/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 683.710031][T18116] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.147271][T13884] usb 8-1: 0:2 : does not exist [ 684.156684][T13884] usb 8-1: USB disconnect, device number 3 [ 684.187175][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:19 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000900)=""/149, 0x32, 0x95, 0x1}, 0x20) 05:45:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 05:45:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x76, 0x0, 0x0) 05:45:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) 05:45:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6}]}) 05:45:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 684.937276][ T15] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 685.177071][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 685.300565][ T15] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.300583][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.468248][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.468272][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.468286][ T15] usb 8-1: Product: syz [ 685.468295][ T15] usb 8-1: Manufacturer: syz [ 685.468304][ T15] usb 8-1: SerialNumber: syz [ 685.836401][ T40] audit: type=1804 audit(1653803120.656:731): pid=18140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1277/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 685.844295][T18135] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 685.844316][T18135] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 686.137249][ T15] usb 8-1: 0:2 : does not exist [ 686.155952][ T15] usb 8-1: USB disconnect, device number 4 [ 686.178486][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000004cc0)=@base={0xf}, 0x48) 05:45:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:21 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 05:45:21 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006e80)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x10}], 0x10}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="dcce7eb28736871e8b", 0x9}, {&(0x7f0000003700)="3f5c283cbb22e43be8b8a5eccb0dd4a67d9d06536e85a0fbd65d4bc2e31504ab472d4c2f0b567c6262f34a9063b2de70a1e1fbf4509da9779ddce7e6f2f6e516decdd6715d65d541bb4d341c3536c018cd37cfdf547785d6257f37950d523ebab7a476c9add6094e797e8f28bae4467c4c2b434feecd886fd46368774968054b", 0x80}, {&(0x7f0000003780)="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", 0xe38}], 0x4}}], 0x3, 0x840) 05:45:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000004cc0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 05:45:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000080)={'batadv_slave_1\x00'}) 05:45:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 05:45:21 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @enum]}}, &(0x7f0000000640)=""/185, 0x1000000, 0xb9, 0x1}, 0x20) 05:45:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 686.977137][T14020] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 687.227350][T14020] usb 8-1: Using ep0 maxpacket: 8 [ 687.335871][T14020] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.335918][T14020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.507240][T14020] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.507272][T14020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.507291][T14020] usb 8-1: Product: syz [ 687.507305][T14020] usb 8-1: Manufacturer: syz [ 687.507319][T14020] usb 8-1: SerialNumber: syz [ 687.853775][ T40] audit: type=1804 audit(1653803122.676:732): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1278/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 687.859433][T18158] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 687.859449][T18158] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.097414][T14020] usb 8-1: 0:2 : does not exist [ 688.113517][T14020] usb 8-1: USB disconnect, device number 5 [ 688.131135][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x80108906, 0x0) 05:45:23 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:23 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:45:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001140)=@get={0x1, &(0x7f0000000140)=""/4096, 0x621}) 05:45:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) [ 688.897175][ T15] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 689.128052][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 689.247122][ T15] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.247141][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.453958][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 689.453993][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.454036][ T15] usb 8-1: Product: syz [ 689.454070][ T15] usb 8-1: Manufacturer: syz [ 689.454085][ T15] usb 8-1: SerialNumber: syz [ 689.809554][ T40] audit: type=1804 audit(1653803124.636:733): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1279/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 689.818813][T18177] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 689.818838][T18177] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 690.117489][ T15] usb 8-1: 0:2 : does not exist [ 690.134319][ T15] usb 8-1: USB disconnect, device number 6 [ 690.144395][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:25 executing program 1: r0 = socket(0x2a, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) 05:45:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:25 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 690.573888][ T40] audit: type=1400 audit(1653803125.396:734): avc: denied { bind } for pid=18185 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 05:45:25 executing program 2: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 690.620422][T18196] sctp: [Deprecated]: syz-executor.1 (pid 18196) Use of int in maxseg socket option. [ 690.620422][T18196] Use struct sctp_assoc_value instead 05:45:25 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="019731bf30000000000001"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) 05:45:25 executing program 2: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) [ 690.663149][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 690.887183][T14020] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 691.137056][T14020] usb 8-1: Using ep0 maxpacket: 8 [ 691.267071][T14020] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.267090][T14020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.429535][T14020] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.429557][T14020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.429570][T14020] usb 8-1: Product: syz [ 691.429578][T14020] usb 8-1: Manufacturer: syz [ 691.429587][T14020] usb 8-1: SerialNumber: syz [ 691.681175][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.681258][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.766703][ T40] audit: type=1804 audit(1653803126.586:735): pid=18192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1280/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 691.771890][T18192] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 692.017372][T14020] usb 8-1: 0:2 : does not exist [ 692.028841][T14020] usb 8-1: USB disconnect, device number 7 [ 692.055985][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:27 executing program 2: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000004cc0)=@base={0x12}, 0x48) 05:45:27 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) 05:45:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:27 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5411, &(0x7f00000000c0)) 05:45:27 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:27 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r0, 0x1, 0x0, 0x0, &(0x7f0000001000)=0xfffffff6) 05:45:27 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 692.550317][ T40] audit: type=1400 audit(1653803127.376:736): avc: denied { getopt } for pid=18226 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 692.787119][T14023] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 693.047182][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 693.177454][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.177477][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.357419][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.357455][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.357475][T14023] usb 8-1: Product: syz [ 693.357489][T14023] usb 8-1: Manufacturer: syz [ 693.357503][T14023] usb 8-1: SerialNumber: syz [ 693.733247][ T40] audit: type=1804 audit(1653803128.556:737): pid=18231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1281/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 693.772023][T18220] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.057380][T14023] usb 8-1: 0:2 : does not exist [ 694.077131][T14023] usb 8-1: USB disconnect, device number 8 05:45:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:29 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004100)=@bpf_lsm={0x1d, 0x3, &(0x7f0000003fc0)=@framed, &(0x7f0000004000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000004040), 0x8, 0x10, 0x0}, 0x80) 05:45:29 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:29 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:29 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x0, 0x0, 0x0, 0x101}, 0x48) 05:45:29 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 05:45:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:29 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAF(r0, 0x541e, 0x0) 05:45:29 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 694.549161][ T40] audit: type=1400 audit(1653803129.376:738): avc: denied { ioctl } for pid=18247 comm="syz-executor.1" path="socket:[118770]" dev="sockfs" ino=118770 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 05:45:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}) 05:45:29 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 694.797358][ T172] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 695.047198][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 695.177235][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.177262][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.338338][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.338434][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.338447][ T172] usb 8-1: Product: syz [ 695.338525][ T172] usb 8-1: Manufacturer: syz [ 695.338535][ T172] usb 8-1: SerialNumber: syz [ 695.699712][ T40] audit: type=1804 audit(1653803130.526:739): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1282/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 695.704761][T18245] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 695.997379][ T172] usb 8-1: 0:2 : does not exist [ 696.005242][ T172] usb 8-1: USB disconnect, device number 9 [ 696.030241][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:31 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:31 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000002680)=[{0x0, 0x0, 0x1ff}]) 05:45:31 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:45:31 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 696.460345][T18275] loop1: detected capacity change from 0 to 1 05:45:31 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 05:45:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) [ 696.519341][T18275] Dev loop1: unable to read RDB block 1 05:45:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 696.519425][T18275] loop1: unable to read partition table [ 696.519566][T18275] loop1: partition table beyond EOD, truncated [ 696.519615][T18275] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 05:45:31 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000002680)=[{0x0, 0x0, 0x1ff}]) [ 696.617499][T18291] loop1: detected capacity change from 0 to 1 [ 696.668447][T18291] Dev loop1: unable to read RDB block 1 [ 696.668476][T18291] loop1: unable to read partition table [ 696.668590][T18291] loop1: partition table beyond EOD, truncated [ 696.668600][T18291] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 696.777212][ T172] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 697.017190][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 697.139019][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.139039][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.297166][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.297199][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.297221][ T172] usb 8-1: Product: syz [ 697.297236][ T172] usb 8-1: Manufacturer: syz [ 697.297272][ T172] usb 8-1: SerialNumber: syz [ 697.665157][ T40] audit: type=1804 audit(1653803132.486:740): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1283/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 697.957476][ T172] usb 8-1: 0:2 : does not exist [ 697.971721][ T172] usb 8-1: USB disconnect, device number 10 [ 697.985505][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:33 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:45:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 05:45:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:33 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 05:45:33 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) [ 698.757087][T11857] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 699.016987][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 699.137364][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.137391][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.297583][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.297618][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.297640][T11857] usb 8-1: Product: syz [ 699.297656][T11857] usb 8-1: Manufacturer: syz [ 699.297672][T11857] usb 8-1: SerialNumber: syz [ 699.668058][ T40] audit: type=1804 audit(1653803134.496:741): pid=18311 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1284/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 700.017981][T11857] usb 8-1: 0:2 : does not exist [ 700.031139][T11857] usb 8-1: USB disconnect, device number 11 [ 700.049304][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:35 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:45:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:35 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) 05:45:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) 05:45:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:35 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) [ 700.767259][T13884] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 701.027376][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 701.187174][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.187199][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.377259][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.377280][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.377293][T13884] usb 8-1: Product: syz [ 701.377302][T13884] usb 8-1: Manufacturer: syz [ 701.377311][T13884] usb 8-1: SerialNumber: syz [ 701.744193][ T40] audit: type=1804 audit(1653803136.566:742): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1285/cgroup.controllers" dev="sda1" ino=1146 res=1 errno=0 [ 702.047412][T13884] usb 8-1: 0:2 : does not exist [ 702.062518][T13884] usb 8-1: USB disconnect, device number 12 [ 702.080462][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000000)={0x20f020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:45:37 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:45:37 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:37 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:37 executing program 2: syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 05:45:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 05:45:37 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 702.827018][T11858] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 703.087140][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 703.227403][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.227424][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 703.397247][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 703.397279][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.397300][T11858] usb 8-1: Product: syz [ 703.397314][T11858] usb 8-1: Manufacturer: syz [ 703.397325][T11858] usb 8-1: SerialNumber: syz [ 703.774519][ T40] audit: type=1804 audit(1653803138.596:743): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1286/cgroup.controllers" dev="sda1" ino=1143 res=1 errno=0 [ 704.097599][T11858] usb 8-1: 0:2 : does not exist [ 704.106504][T11858] usb 8-1: USB disconnect, device number 13 [ 704.128926][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:39 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:45:39 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5414, &(0x7f00000000c0)) 05:45:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:39 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:39 executing program 2: syz_clone(0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 05:45:39 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 704.847018][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 705.087119][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 705.207295][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.207314][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.379837][ T25] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.379861][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.379874][ T25] usb 8-1: Product: syz [ 705.379883][ T25] usb 8-1: Manufacturer: syz [ 705.379892][ T25] usb 8-1: SerialNumber: syz [ 705.745962][ T40] audit: type=1804 audit(1653803140.566:744): pid=18370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1287/cgroup.controllers" dev="sda1" ino=1150 res=1 errno=0 [ 706.143679][ T25] usb 8-1: 0:2 : does not exist [ 706.152648][ T25] usb 8-1: USB disconnect, device number 14 [ 706.183941][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:41 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:45:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 05:45:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:41 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x4) ptrace$setregs(0x3, 0x0, 0x0, &(0x7f0000000000)) 05:45:41 executing program 2: syz_read_part_table(0x0, 0x370500, &(0x7f0000002680)=[{&(0x7f0000000100)="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", 0xf7d, 0x9}, {&(0x7f0000001100)="09f476b6f820a2fe2e6f0143", 0xc, 0x1ff}, {0x0}, {&(0x7f00000011c0)="fad202189a9e58495735754c46708aa665200d516f991e38cb725fbbea09aa05d5a46fb3ae43a3a5778c0f23fc93f7ce49de46de7dbcb5bd318beb0d4a83f18d334a98fb754611aa9ecf4b8cb2d2bd29f98a0f042025c5656c91b5865145838582729852f7cafaef767b8b8d4a5fd48432e135040d9d98f821a173090fe33989c2b11aca1e3ff64edf24f2140c8166cfff5a3128d51b6a9783147893f03e6961ea70f246cbe91f88c617f7345e8b9889e0c6febccf74a04d1f90d049ca561762c7f321ab932226067a5f896c0cb268994bf4", 0xd2, 0x4}, {&(0x7f00000013c0)="bb8dd527a4c53ea729c339c77956dda07454bcfad7a53acddb9133c92e06c27224ebef50b1152d9792ad2ea311fba79b9b2f18903f6d220884ff1f07fe2b67ee0bf4c34386fabf87b4b0a8daf98f590ccf2693b0e06868afa06cb0a8df3c70e088e0e170541fc6d30780ed6161ccc9511996dfb9e707e6e71f1c798b25942ffc86bad37126d3604beb44772998ba0c665b2853068dd5c5b126b9155b89b28c98dc4d9d54d170a58563ba15f2aaeac11bea9fe0268e5ee5d1b650d5ab2ab0275e9309756272d781c9", 0xc8, 0x7}, {&(0x7f00000012c0)}, {&(0x7f00000024c0)}, {&(0x7f0000002580)='#[', 0x2, 0x7fffffffffffffff}]) 05:45:41 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x4) ptrace$setregs(0x3, 0x0, 0x0, &(0x7f0000000000)) [ 706.887019][ T3094] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 707.147324][ T3094] usb 8-1: Using ep0 maxpacket: 8 [ 707.297437][ T3094] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.297468][ T3094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.477273][ T3094] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 707.477332][ T3094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.477351][ T3094] usb 8-1: Product: syz [ 707.477366][ T3094] usb 8-1: Manufacturer: syz [ 707.477381][ T3094] usb 8-1: SerialNumber: syz [ 707.885039][ T40] audit: type=1804 audit(1653803142.706:745): pid=18392 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1288/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 708.187342][ T3094] usb 8-1: 0:2 : does not exist [ 708.195037][ T3094] usb 8-1: USB disconnect, device number 15 [ 708.215067][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:43 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:43 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 05:45:43 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x4) ptrace$setregs(0x3, 0x0, 0x0, &(0x7f0000000000)) 05:45:43 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 708.668249][ T40] audit: type=1400 audit(1653803143.486:746): avc: denied { view } for pid=18394 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 05:45:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:43 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) [ 708.987080][T14023] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 709.237271][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 709.367843][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.367870][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.537351][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.537421][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.537443][T14023] usb 8-1: Product: syz [ 709.537458][T14023] usb 8-1: Manufacturer: syz [ 709.537473][T14023] usb 8-1: SerialNumber: syz [ 709.895521][ T40] audit: type=1804 audit(1653803144.716:747): pid=18403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1289/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 710.217190][T14023] usb 8-1: 0:2 : does not exist [ 710.227551][T14023] usb 8-1: USB disconnect, device number 16 [ 710.252592][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:45 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 05:45:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:45 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:45 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:45 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:45 executing program 2: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x10e, 0x29, 0x0, 0x0) 05:45:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:45 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:45 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5412, &(0x7f00000000c0)={0x7f}) [ 711.007065][T14023] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 711.247048][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 711.377139][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.377188][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.549177][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.549261][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.549295][T14023] usb 8-1: Product: syz [ 711.549308][T14023] usb 8-1: Manufacturer: syz [ 711.549322][T14023] usb 8-1: SerialNumber: syz [ 711.941312][ T40] audit: type=1804 audit(1653803146.766:748): pid=18437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1290/cgroup.controllers" dev="sda1" ino=1145 res=1 errno=0 [ 712.298047][T14023] usb 8-1: 0:2 : does not exist [ 712.304934][T14023] usb 8-1: USB disconnect, device number 17 [ 712.328676][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:47 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:47 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:47 executing program 2: clock_adjtime(0x0, &(0x7f0000000100)={0x7fffffff}) 05:45:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x6, 0x0, 0x0) 05:45:47 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:47 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x35040, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000300)='./file0/file0\x00', 0x0) 05:45:47 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) [ 713.077121][T13233] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 713.347273][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 713.487229][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.487263][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.647214][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.647241][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.647253][T13233] usb 8-1: Product: syz [ 713.647262][T13233] usb 8-1: Manufacturer: syz [ 713.647271][T13233] usb 8-1: SerialNumber: syz [ 714.037976][ T40] audit: type=1804 audit(1653803148.864:749): pid=18461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1291/cgroup.controllers" dev="sda1" ino=1143 res=1 errno=0 [ 714.427237][T13233] usb 8-1: 0:2 : does not exist [ 714.439762][T13233] usb 8-1: USB disconnect, device number 18 [ 714.451440][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:49 executing program 2: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x0) 05:45:49 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:49 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x4) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:49 executing program 2: semget(0x2, 0x4d25d76cc4081207, 0x0) 05:45:49 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:49 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 05:45:49 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 715.227051][T11860] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 715.467154][T11860] usb 8-1: Using ep0 maxpacket: 8 [ 715.597557][T11860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.597579][T11860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.777796][T11860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.777817][T11860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.777830][T11860] usb 8-1: Product: syz [ 715.777839][T11860] usb 8-1: Manufacturer: syz [ 715.777848][T11860] usb 8-1: SerialNumber: syz [ 716.135701][ T40] audit: type=1804 audit(1653803150.954:750): pid=18474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1292/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 716.418569][T11860] usb 8-1: 0:2 : does not exist [ 716.436507][T11860] usb 8-1: USB disconnect, device number 19 [ 716.454154][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:51 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:51 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5405, 0x0) 05:45:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:51 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0x3, r0, 0x0, &(0x7f0000000000)) 05:45:51 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000000)) 05:45:51 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5422, 0x0) 05:45:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:51 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000000)) [ 717.187153][T14020] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 717.457015][T14020] usb 8-1: Using ep0 maxpacket: 8 [ 717.577129][T14020] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.577157][T14020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.775619][T14020] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 717.775650][T14020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.775671][T14020] usb 8-1: Product: syz [ 717.775692][T14020] usb 8-1: Manufacturer: syz [ 717.775707][T14020] usb 8-1: SerialNumber: syz [ 718.174552][ T40] audit: type=1804 audit(1653803152.994:751): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1293/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 718.447222][T14020] usb 8-1: 0:2 : does not exist [ 718.453855][T14020] usb 8-1: USB disconnect, device number 20 [ 718.481346][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:53 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:53 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000000)) 05:45:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 05:45:53 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, 0x0, 0x0, &(0x7f0000000000)) 05:45:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 05:45:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 719.208682][ T3094] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 719.457046][ T3094] usb 8-1: Using ep0 maxpacket: 8 [ 719.587526][ T3094] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.587575][ T3094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.790559][ T3094] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 719.790581][ T3094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.790593][ T3094] usb 8-1: Product: syz [ 719.790602][ T3094] usb 8-1: Manufacturer: syz [ 719.790611][ T3094] usb 8-1: SerialNumber: syz [ 720.144767][ T40] audit: type=1804 audit(1653803154.964:752): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1294/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 720.380128][ T3094] usb 8-1: 0:2 : does not exist [ 720.394086][ T3094] usb 8-1: USB disconnect, device number 21 [ 720.413840][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:55 executing program 2: mlockall(0x1) mlockall(0x1) mlockall(0x3) 05:45:55 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, 0x0, 0x0, &(0x7f0000000000)) 05:45:55 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:45:55 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, 0x0, 0x0, &(0x7f0000000000)) 05:45:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 05:45:55 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, 0x0) 05:45:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x20c49a, 0x0, 0x0) [ 721.142610][ T3094] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 721.380124][ T3094] usb 8-1: Using ep0 maxpacket: 8 [ 721.517241][ T3094] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 05:45:56 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5437, 0x0) 05:45:56 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, 0x0) [ 721.517270][ T3094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.717119][ T3094] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.717141][ T3094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.717154][ T3094] usb 8-1: Product: syz [ 721.717163][ T3094] usb 8-1: Manufacturer: syz [ 721.717171][ T3094] usb 8-1: SerialNumber: syz [ 722.084757][ T40] audit: type=1804 audit(1653803156.904:753): pid=18534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1295/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 722.397766][ T3094] usb 8-1: 0:2 : does not exist [ 722.403111][ T3094] usb 8-1: USB disconnect, device number 22 [ 722.429135][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 05:45:57 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$setregs(0x3, r0, 0x0, 0x0) 05:45:57 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x20, @none, 0x0, 0x2}, 0xe) 05:45:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 05:45:57 executing program 2: r0 = socket(0x25, 0x1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4801) [ 722.897646][ T40] audit: type=1400 audit(1653803157.724:754): avc: denied { write } for pid=18559 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 05:45:57 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 05:45:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 05:45:57 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:45:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448ca, 0x0) [ 722.956683][ T40] audit: type=1400 audit(1653803157.774:755): avc: denied { create } for pid=18565 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 722.965905][ T40] audit: type=1400 audit(1653803157.784:756): avc: denied { getopt } for pid=18565 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 723.167838][T11858] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 723.447162][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 723.577306][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.577333][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 723.738611][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 723.738633][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.738645][T11858] usb 8-1: Product: syz [ 723.738654][T11858] usb 8-1: Manufacturer: syz [ 723.738662][T11858] usb 8-1: SerialNumber: syz [ 724.173425][ T40] audit: type=1804 audit(1653803158.994:757): pid=18573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1296/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 724.597224][T11858] usb 8-1: 0:2 : does not exist [ 724.604361][T11858] usb 8-1: USB disconnect, device number 23 [ 724.626513][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:45:59 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:45:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 05:45:59 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:45:59 executing program 2: r0 = io_uring_setup(0x233d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff], 0xa2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0xffffffff, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x7) 05:45:59 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:45:59 executing program 2: openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/block/ram15', 0x54200, 0x0) 05:45:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) 05:45:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) 05:45:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:45:59 executing program 2: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x8040) syz_io_uring_setup(0x387, &(0x7f0000000400)={0x0, 0x266e, 0x8, 0x0, 0x92}, &(0x7f0000fee000/0x11000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 725.407298][ T15] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 725.647119][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 725.777309][ T15] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.777329][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.967169][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.967201][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.967220][ T15] usb 8-1: Product: syz [ 725.967234][ T15] usb 8-1: Manufacturer: syz [ 725.967248][ T15] usb 8-1: SerialNumber: syz [ 726.325923][ T40] audit: type=1804 audit(1653803161.144:758): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1297/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 726.677249][ T15] usb 8-1: 0:2 : does not exist [ 726.689267][ T15] usb 8-1: USB disconnect, device number 24 [ 726.708918][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:01 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) 05:46:01 executing program 2: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 05:46:01 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:01 executing program 1: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:01 executing program 2: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 05:46:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 05:46:02 executing program 1: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 05:46:02 executing program 2: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 05:46:02 executing program 1: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) [ 727.427443][T11858] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 727.667157][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 727.787378][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.787438][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.967271][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.967294][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.967307][T11858] usb 8-1: Product: syz [ 727.967316][T11858] usb 8-1: Manufacturer: syz [ 727.967325][T11858] usb 8-1: SerialNumber: syz [ 728.302858][ T40] audit: type=1804 audit(1653803163.124:759): pid=18603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1298/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 728.600397][T11858] usb 8-1: 0:2 : does not exist [ 728.612492][T11858] usb 8-1: USB disconnect, device number 25 [ 728.618814][ T3797] udevd[3797]: setting mode of /dev/bus/usb/008/025 to 020664 failed: No such file or directory [ 728.618962][ T3797] udevd[3797]: setting owner of /dev/bus/usb/008/025 to uid=0, gid=0 failed: No such file or directory [ 728.632650][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:03 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 05:46:03 executing program 2: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 05:46:03 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e", 0x44, 0x20c49a, 0x0, 0x0) 05:46:03 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:03 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xc59eb4c1c0b18ae0}, 0xc) 05:46:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e", 0x44, 0x20c49a, 0x0, 0x0) [ 729.387052][ T3094] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 729.637054][ T3094] usb 8-1: Using ep0 maxpacket: 8 [ 729.787305][ T3094] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.787346][ T3094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 729.949988][ T3094] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.950022][ T3094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.950043][ T3094] usb 8-1: Product: syz [ 729.950059][ T3094] usb 8-1: Manufacturer: syz [ 729.950074][ T3094] usb 8-1: SerialNumber: syz [ 730.326419][ T40] audit: type=1804 audit(1653803165.144:760): pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1299/cgroup.controllers" dev="sda1" ino=1150 res=1 errno=0 [ 730.667407][ T3094] usb 8-1: 0:2 : does not exist [ 730.673172][ T3094] usb 8-1: USB disconnect, device number 26 [ 730.712721][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:05 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e", 0x44, 0x20c49a, 0x0, 0x0) 05:46:05 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000100)="f0", 0x1, 0x2}], 0x0, 0x0) 05:46:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 05:46:05 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:06 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 05:46:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) [ 731.477192][ T3094] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 731.737101][ T3094] usb 8-1: Using ep0 maxpacket: 8 [ 731.857102][ T3094] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.857122][ T3094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.018577][ T3094] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.018598][ T3094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.018611][ T3094] usb 8-1: Product: syz [ 732.018620][ T3094] usb 8-1: Manufacturer: syz [ 732.018629][ T3094] usb 8-1: SerialNumber: syz [ 732.387278][ T40] audit: type=1804 audit(1653803167.214:761): pid=18647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1300/cgroup.controllers" dev="sda1" ino=1146 res=1 errno=0 [ 732.667267][ T3094] usb 8-1: 0:2 : does not exist [ 732.683991][ T3094] usb 8-1: USB disconnect, device number 27 [ 732.712438][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:07 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:07 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8c0, 0x0) 05:46:07 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 05:46:07 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/17) 05:46:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 05:46:07 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:08 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/17) 05:46:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 05:46:08 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000001140), &(0x7f0000001180)=0x4) [ 733.447341][T11857] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 733.707108][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 733.847439][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.847467][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.017559][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.017593][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.017614][T11857] usb 8-1: Product: syz [ 734.017628][T11857] usb 8-1: Manufacturer: syz [ 734.017643][T11857] usb 8-1: SerialNumber: syz [ 734.723804][ T40] audit: type=1804 audit(1653803169.544:762): pid=18673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1301/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 734.817547][T11857] usb 8-1: 0:2 : does not exist [ 734.824854][T11857] usb 8-1: USB disconnect, device number 28 [ 734.843070][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:10 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:10 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/17) 05:46:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 05:46:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:10 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/17) 05:46:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 05:46:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:46:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) [ 735.647173][ T3094] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 735.907245][ T3094] usb 8-1: Using ep0 maxpacket: 8 [ 736.027894][ T3094] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.027919][ T3094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.197204][ T3094] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.197226][ T3094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.197239][ T3094] usb 8-1: Product: syz [ 736.197248][ T3094] usb 8-1: Manufacturer: syz [ 736.197258][ T3094] usb 8-1: SerialNumber: syz [ 736.845213][ T40] audit: type=1804 audit(1653803171.664:763): pid=18695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1302/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 736.937491][ T3094] usb 8-1: 0:2 : does not exist [ 737.028453][ T3094] usb 8-1: USB disconnect, device number 29 [ 737.051572][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:12 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, 0x0, &(0x7f0000001180)) 05:46:12 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$int_out(r0, 0x2, &(0x7f00000001c0)) 05:46:12 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 05:46:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x30000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x74) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044aba2a6f7ae56d88fecf93e1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 05:46:12 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, 0x0, &(0x7f0000001180)) 05:46:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x0, 0x81, 0x300b0d20, 0x82}, 0x48) 05:46:12 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, 0x0, &(0x7f0000001180)) 05:46:12 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000280)='GPL\x00', 0x3, 0xff, &(0x7f00000002c0)=""/255, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:12 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000001580), 0x4000, 0x0) [ 737.787162][T14023] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 738.027206][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 738.157450][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.157471][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.347299][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.347334][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.347390][T14023] usb 8-1: Product: syz [ 738.347407][T14023] usb 8-1: Manufacturer: syz [ 738.347421][T14023] usb 8-1: SerialNumber: syz [ 738.995559][ T40] audit: type=1804 audit(1653803173.814:764): pid=18717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1303/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 739.097221][T14023] usb 8-1: 0:2 : does not exist [ 739.115447][T14023] usb 8-1: USB disconnect, device number 30 [ 739.130723][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:14 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), 0x0) 05:46:14 executing program 0: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="1f", 0x1, 0xffffffffffffffff) 05:46:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 05:46:14 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 05:46:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), 0x0) 05:46:14 executing program 2: syz_mount_image$v7(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xb20000, &(0x7f0000000500)) 05:46:14 executing program 0: syz_clone(0x2a000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 739.917154][T14023] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 740.177103][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 740.317170][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.317200][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.497188][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 740.497214][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.497227][T14023] usb 8-1: Product: syz [ 740.497256][T14023] usb 8-1: Manufacturer: syz [ 740.497265][T14023] usb 8-1: SerialNumber: syz [ 740.837135][T14023] usb 8-1: 0:2 : does not exist [ 740.845883][T14023] usb 8-1: USB disconnect, device number 31 [ 740.864280][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:16 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:16 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001140), 0x0) 05:46:16 executing program 0: request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) 05:46:16 executing program 2: syz_clone(0x28040000, 0x0, 0x0, 0x0, 0x0, 0x0) 05:46:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x0, 0xfffffffb, 0x4d, 0x24a}, 0x48) 05:46:16 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 05:46:16 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) 05:46:16 executing program 2: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="1f", 0x1, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0) [ 741.557262][T13884] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 741.612109][T14023] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 741.817338][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 741.877271][T14023] usb 5-1: Using ep0 maxpacket: 8 [ 741.947298][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.947326][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.007115][T14023] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 742.007135][T14023] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 742.007146][T14023] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.177234][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.177275][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.177295][T13884] usb 8-1: Product: syz [ 742.177309][T13884] usb 8-1: Manufacturer: syz [ 742.177322][T13884] usb 8-1: SerialNumber: syz [ 742.259028][T14023] usb 5-1: string descriptor 0 read error: -22 [ 742.259116][T14023] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.259137][T14023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.517027][T13884] usb 8-1: 0:2 : does not exist [ 742.523275][T14023] usb 5-1: 0:2 : does not exist [ 742.531793][T13884] usb 8-1: USB disconnect, device number 32 [ 742.561362][T14023] usb 5-1: USB disconnect, device number 26 [ 742.581961][ T4810] udevd[4810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 05:46:17 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:17 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/52, 0x34}], 0x1, 0x80000001, 0x0) lseek(r0, 0x0, 0x1) 05:46:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 05:46:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@union={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000280)=""/163, 0x2b, 0xa3, 0x1}, 0x20) 05:46:17 executing program 2: bpf$MAP_CREATE(0xf, &(0x7f0000000c80), 0x48) 05:46:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x8) read$dsp(r0, &(0x7f00000000c0)=""/146, 0x92) 05:46:17 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002180)={0x6, 0x4, &(0x7f0000001f40)=@framed={{}, [@generic={0xff}]}, &(0x7f0000001f80)='GPL\x00', 0x4, 0xc8, &(0x7f0000001fc0)=""/200, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) listen(r1, 0xfe) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) [ 743.237092][T11857] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 743.497018][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 743.637748][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.637770][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.817354][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.817388][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.817463][T11857] usb 8-1: Product: syz [ 743.817492][T11857] usb 8-1: Manufacturer: syz [ 743.817505][T11857] usb 8-1: SerialNumber: syz [ 744.167552][T11857] usb 8-1: 0:2 : does not exist [ 744.174889][T11857] usb 8-1: USB disconnect, device number 33 [ 744.198866][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:19 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/198, 0xc6) 05:46:19 executing program 0: syz_io_uring_setup(0x48a4, &(0x7f0000000180)={0x0, 0x16b5, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) 05:46:19 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:19 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 05:46:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) close(r0) 05:46:19 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 05:46:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') lseek(r0, 0x3, 0x0) 05:46:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x0, 0xfffffffb, 0x4d, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) [ 744.907042][ T172] usb 8-1: new high-speed USB device number 34 using dummy_hcd 05:46:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "14527a", "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"}}, 0x110) 05:46:19 executing program 2: bpf$MAP_CREATE(0x7, &(0x7f0000000c80), 0x48) [ 745.147015][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 745.267091][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.267127][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.437418][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 745.437471][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.437493][ T172] usb 8-1: Product: syz [ 745.437509][ T172] usb 8-1: Manufacturer: syz [ 745.437542][ T172] usb 8-1: SerialNumber: syz [ 745.777291][ T172] usb 8-1: 0:2 : does not exist [ 745.791327][ T172] usb 8-1: USB disconnect, device number 34 [ 745.812818][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:21 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:21 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:21 executing program 2: bpf$MAP_CREATE(0x14, &(0x7f0000000c80), 0x48) 05:46:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x81}, 0xe) 05:46:21 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:21 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:21 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) [ 746.505463][ T172] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 746.737327][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 746.857145][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.857164][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 747.038219][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 747.038241][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.038254][ T172] usb 8-1: Product: syz [ 747.038263][ T172] usb 8-1: Manufacturer: syz [ 747.038272][ T172] usb 8-1: SerialNumber: syz [ 747.357280][ T172] usb 8-1: 0:2 : does not exist [ 747.367749][ T172] usb 8-1: USB disconnect, device number 35 [ 747.388801][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:22 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:22 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:46:22 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:22 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000140)) 05:46:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @remote}}) 05:46:22 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1) 05:46:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 748.117380][T11857] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 748.367172][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 748.517181][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.517210][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 748.697347][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 748.697393][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.697407][T11857] usb 8-1: Product: syz [ 748.697416][T11857] usb 8-1: Manufacturer: syz [ 748.697426][T11857] usb 8-1: SerialNumber: syz [ 749.017910][T11857] usb 8-1: 0:2 : does not exist [ 749.027219][T11857] usb 8-1: USB disconnect, device number 36 [ 749.058164][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:24 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:24 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) fchown(r0, 0x0, 0xee01) 05:46:24 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:24 executing program 2: syz_clone(0x40248000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 05:46:24 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) [ 749.483162][ T40] audit: type=1400 audit(1653803184.304:765): avc: denied { setattr } for pid=18839 comm="syz-executor.2" name="CAN_J1939" dev="sockfs" ino=120821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 05:46:24 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:24 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7a6, 0x0) 05:46:24 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7a6, 0x0) 05:46:24 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7a6, 0x0) [ 749.807066][T14021] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 750.065983][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 750.197333][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.197469][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 750.399602][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.399630][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.399643][T14021] usb 8-1: Product: syz [ 750.399652][T14021] usb 8-1: Manufacturer: syz [ 750.399661][T14021] usb 8-1: SerialNumber: syz [ 750.817323][T14021] usb 8-1: 0:2 : does not exist [ 750.838799][T14021] usb 8-1: USB disconnect, device number 37 [ 750.853823][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:26 executing program 2: syz_clone(0x40248000, 0x0, 0x0, 0x0, &(0x7f0000002040), 0x0) r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 05:46:26 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:26 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:26 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:26 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:26 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:26 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0) 05:46:26 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:26 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 751.577122][T13884] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 751.827160][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 751.947216][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.947235][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.137178][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.137260][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.137273][T13884] usb 8-1: Product: syz [ 752.137282][T13884] usb 8-1: Manufacturer: syz [ 752.137292][T13884] usb 8-1: SerialNumber: syz [ 752.549960][T13884] usb 8-1: 0:2 : does not exist [ 752.569361][T13884] usb 8-1: USB disconnect, device number 38 [ 752.604097][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:27 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) 05:46:27 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:27 executing program 2: syz_clone(0xa088080, 0x0, 0x0, 0x0, 0x0, 0x0) 05:46:27 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x1e, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "a65876fd58a4d0fee7bdc6085cef64c56ef28cb67497ee3c0cdb1b3d29cd23b5f36f2fb51152803bd4b1996137f4efb97c5bc395307f59135ec6e1baa0dac26f", "eeaf17476553d09169be4f45ea8dc1bdb63607388872ac5d58308f33288b926911c5bc05c066c1e7b7f5274f63017bf70c421e48a0f512a382a9baf446c68a2d", "428b14f0e2260652394d191594ccd49eb2356f849483855c6b502aae12cc5dd8", [0x6]}}) 05:46:27 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) [ 753.120958][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.121009][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.297225][T14021] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 753.547088][T14021] usb 8-1: Using ep0 maxpacket: 8 [ 753.667394][T14021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.667424][T14021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 753.887157][T14021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 753.887180][T14021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.887193][T14021] usb 8-1: Product: syz [ 753.887203][T14021] usb 8-1: Manufacturer: syz [ 753.887212][T14021] usb 8-1: SerialNumber: syz [ 754.287232][T14021] usb 8-1: 0:2 : does not exist [ 754.293195][T14021] usb 8-1: USB disconnect, device number 39 [ 754.314455][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:29 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:29 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:29 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:29 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) [ 754.726121][ T40] audit: type=1400 audit(1653803189.544:766): avc: denied { name_bind } for pid=18918 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 05:46:29 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) [ 754.728266][ T40] audit: type=1400 audit(1653803189.554:767): avc: denied { listen } for pid=18918 comm="syz-executor.2" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 05:46:29 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) [ 754.728897][ T40] audit: type=1400 audit(1653803189.554:768): avc: denied { accept } for pid=18918 comm="syz-executor.2" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 05:46:29 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 754.832494][ T40] audit: type=1400 audit(1653803189.644:769): avc: denied { read } for pid=18918 comm="syz-executor.2" laddr=::1 lport=54626 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 755.017372][ T172] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 755.257270][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 755.407271][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.407300][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.567206][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 755.567257][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.567270][ T172] usb 8-1: Product: syz [ 755.567280][ T172] usb 8-1: Manufacturer: syz [ 755.567289][ T172] usb 8-1: SerialNumber: syz [ 756.259138][ T40] audit: type=1804 audit(1653803191.084:770): pid=18939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1313/cgroup.controllers" dev="sda1" ino=1150 res=1 errno=0 [ 756.357495][ T172] usb 8-1: 0:2 : does not exist [ 756.375656][ T172] usb 8-1: USB disconnect, device number 40 [ 756.397326][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:31 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:31 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:31 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:31 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:31 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:31 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:31 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) [ 757.308726][T13884] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 757.547078][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 757.667058][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.667078][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 757.827261][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 757.827294][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.827314][T13884] usb 8-1: Product: syz [ 757.827328][T13884] usb 8-1: Manufacturer: syz [ 757.827343][T13884] usb 8-1: SerialNumber: syz [ 758.516706][ T40] audit: type=1804 audit(1653803193.334:771): pid=18962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1314/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 758.667287][T13884] usb 8-1: 0:2 : does not exist [ 758.678902][T13884] usb 8-1: USB disconnect, device number 41 [ 758.704131][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:33 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a6, 0x0) 05:46:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:33 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:33 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7a6, 0x0) 05:46:34 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7a6, 0x0) 05:46:34 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:34 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7a6, 0x0) 05:46:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000025c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:34 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000025c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 759.627074][T11858] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 759.867165][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 759.989183][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.989215][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.157299][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 760.157335][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.157348][T11858] usb 8-1: Product: syz [ 760.157357][T11858] usb 8-1: Manufacturer: syz [ 760.157366][T11858] usb 8-1: SerialNumber: syz [ 760.952084][ T40] audit: type=1804 audit(1653803195.774:772): pid=18992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1315/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 761.057502][T11858] usb 8-1: 0:2 : does not exist [ 761.066413][T11858] usb 8-1: USB disconnect, device number 42 [ 761.093556][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000025c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:36 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:36 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:36 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000025c0)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:36 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000025c0)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:36 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:36 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000025c0)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 761.987062][ T172] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 762.253609][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 762.377358][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.377386][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 762.547244][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 762.547290][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.547314][ T172] usb 8-1: Product: syz [ 762.547330][ T172] usb 8-1: Manufacturer: syz [ 762.547346][ T172] usb 8-1: SerialNumber: syz [ 763.361971][ T40] audit: type=1804 audit(1653803198.184:773): pid=19021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1316/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 763.437667][ T172] usb 8-1: 0:2 : does not exist [ 763.457839][ T172] usb 8-1: USB disconnect, device number 43 [ 763.476485][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:38 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:38 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:38 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000025c0)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000025c0)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:38 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000025c0)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 764.387212][T11858] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 764.637476][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 764.757245][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.757274][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 764.951293][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 764.951326][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.951349][T11858] usb 8-1: Product: syz [ 764.951365][T11858] usb 8-1: Manufacturer: syz [ 764.951381][T11858] usb 8-1: SerialNumber: syz [ 765.634616][ T40] audit: type=1804 audit(1653803200.454:774): pid=19043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1317/cgroup.controllers" dev="sda1" ino=1150 res=1 errno=0 [ 765.747142][T11858] usb 8-1: 0:2 : does not exist [ 765.755092][T11858] usb 8-1: USB disconnect, device number 44 [ 765.781819][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:41 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:41 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:41 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 766.717054][ T3094] usb 8-1: new high-speed USB device number 45 using dummy_hcd 05:46:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 766.980938][ T3094] usb 8-1: Using ep0 maxpacket: 8 05:46:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 767.098136][ T3094] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.098202][ T3094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 767.267300][ T3094] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 767.267328][ T3094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.267341][ T3094] usb 8-1: Product: syz [ 767.267351][ T3094] usb 8-1: Manufacturer: syz [ 767.267360][ T3094] usb 8-1: SerialNumber: syz [ 767.966696][ T40] audit: type=1804 audit(1653803202.784:775): pid=19074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1318/cgroup.controllers" dev="sda1" ino=1148 res=1 errno=0 [ 768.047159][ T3094] usb 8-1: 0:2 : does not exist [ 768.057847][ T3094] usb 8-1: USB disconnect, device number 45 [ 768.081563][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:43 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:43 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:43 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:46:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 768.937530][T13884] usb 8-1: new high-speed USB device number 46 using dummy_hcd 05:46:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 769.188983][T13884] usb 8-1: Using ep0 maxpacket: 8 05:46:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 769.317290][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 05:46:44 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 769.317314][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:46:44 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 769.507287][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.507320][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.507339][T13884] usb 8-1: Product: syz [ 769.507388][T13884] usb 8-1: Manufacturer: syz [ 769.507406][T13884] usb 8-1: SerialNumber: syz 05:46:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 769.832592][ T40] audit: type=1804 audit(1653803204.654:776): pid=19087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1319/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 769.937891][T13884] usb 8-1: 0:2 : does not exist [ 769.969202][T13884] usb 8-1: USB disconnect, device number 46 [ 769.995749][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:45 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:46:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:45 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:45 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 770.647849][T11858] usb 8-1: new high-speed USB device number 47 using dummy_hcd 05:46:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 770.907308][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 771.067932][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.067962][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:46:46 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:46 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 771.247251][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 771.247283][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.247363][T11858] usb 8-1: Product: syz [ 771.247380][T11858] usb 8-1: Manufacturer: syz [ 771.247393][T11858] usb 8-1: SerialNumber: syz [ 771.572527][ T40] audit: type=1804 audit(1653803206.394:777): pid=19125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1320/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 771.687459][T11858] usb 8-1: 0:2 : does not exist [ 771.694633][T11858] usb 8-1: USB disconnect, device number 47 [ 771.724530][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:46 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000000) 05:46:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) 05:46:46 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:46 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}]}) [ 772.417461][T11858] usb 8-1: new high-speed USB device number 48 using dummy_hcd 05:46:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) [ 772.687291][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 772.807385][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.807414][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:46:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) 05:46:47 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 772.997317][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.997348][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.997371][T11858] usb 8-1: Product: syz [ 772.997386][T11858] usb 8-1: Manufacturer: syz [ 772.997402][T11858] usb 8-1: SerialNumber: syz [ 773.312789][ T40] audit: type=1804 audit(1653803208.134:778): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1321/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0 [ 773.387459][T11858] usb 8-1: 0:2 : does not exist [ 773.397478][T11858] usb 8-1: USB disconnect, device number 48 [ 773.431571][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:48 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) 05:46:48 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:48 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) [ 774.167233][T13884] usb 8-1: new high-speed USB device number 49 using dummy_hcd 05:46:49 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 774.417162][T13884] usb 8-1: Using ep0 maxpacket: 8 05:46:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000880)=ANY=[], 0xfc30) close_range(r0, 0xffffffffffffffff, 0x0) 05:46:49 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) [ 774.551790][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.551821][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:46:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:49 executing program 0: syz_80211_inject_frame(&(0x7f0000000580)=@device_b, &(0x7f0000000100)=@ctrl_frame=@bar={{}, {0x40}, @broadcast, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x200}}}, 0x14) 05:46:49 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 774.732595][T19203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.737237][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.737270][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.737292][T13884] usb 8-1: Product: syz [ 774.737307][T13884] usb 8-1: Manufacturer: syz [ 774.737322][T13884] usb 8-1: SerialNumber: syz [ 775.064336][ T40] audit: type=1804 audit(1653803209.884:779): pid=19188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1322/cgroup.controllers" dev="sda1" ino=1153 res=1 errno=0 [ 775.167488][T13884] usb 8-1: 0:2 : does not exist [ 775.185831][T13884] usb 8-1: USB disconnect, device number 49 [ 775.206777][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:50 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:50 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x7}]}]}}, &(0x7f0000000300)=""/163, 0x32, 0xa3, 0x1}, 0x20) 05:46:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4000000}]}]}}, &(0x7f0000000600)=""/147, 0x2e, 0x93, 0x1}, 0x20) 05:46:50 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 775.927692][T11858] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 776.167717][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 776.297122][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.297142][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 776.457117][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 776.457167][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.457187][T11858] usb 8-1: Product: syz [ 776.457200][T11858] usb 8-1: Manufacturer: syz [ 776.457213][T11858] usb 8-1: SerialNumber: syz [ 776.777873][ T40] audit: type=1804 audit(1653803211.604:780): pid=19218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1323/cgroup.controllers" dev="sda1" ino=1150 res=1 errno=0 [ 776.867328][T11858] usb 8-1: 0:2 : does not exist [ 776.881063][T11858] usb 8-1: USB disconnect, device number 50 [ 776.899766][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:52 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/ipc\x00') ioctl$TUNGETFEATURES(r0, 0xb703, 0x0) 05:46:52 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:52 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 777.314308][ T40] audit: type=1400 audit(1653803212.134:781): avc: denied { ioctl } for pid=19228 comm="syz-executor.0" path="ipc:[4026532856]" dev="nsfs" ino=4026532856 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 05:46:52 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="94", 0x1}, {&(0x7f0000000300)="98", 0x1}], 0x2, &(0x7f00000006c0)=[{0x10}], 0x10}, 0x0) 05:46:52 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="94", 0x1}, {&(0x7f0000000300)="98", 0x1}], 0x2, &(0x7f00000006c0)=[{0x10}], 0x10}, 0x0) 05:46:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xd}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/155, 0x27, 0x9b, 0x1}, 0x20) 05:46:52 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 777.617071][ T172] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 777.857046][ T172] usb 8-1: Using ep0 maxpacket: 8 [ 777.977642][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.977666][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.137143][ T172] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.137176][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.137195][ T172] usb 8-1: Product: syz [ 778.137210][ T172] usb 8-1: Manufacturer: syz [ 778.137225][ T172] usb 8-1: SerialNumber: syz [ 778.448324][ T40] audit: type=1804 audit(1653803213.274:782): pid=19235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1324/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 778.517401][ T172] usb 8-1: 0:2 : does not exist [ 778.539056][ T172] usb 8-1: USB disconnect, device number 51 05:46:53 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:53 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:53 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xf, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x400}) 05:46:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003340)={&(0x7f0000003280)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) 05:46:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10}, 0x48) [ 779.307026][T11858] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 779.557060][T11858] usb 8-1: Using ep0 maxpacket: 8 [ 779.677368][T11858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.677388][T11858] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.847463][T11858] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 779.847497][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.847519][T11858] usb 8-1: Product: syz [ 779.847535][T11858] usb 8-1: Manufacturer: syz [ 779.847550][T11858] usb 8-1: SerialNumber: syz [ 780.307302][T11858] usb 8-1: 0:2 : does not exist [ 780.311664][T11858] usb 8-1: USB disconnect, device number 52 [ 780.330120][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:55 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:55 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@cgroup, 0xffffffffffffffff, 0x13}, 0x10) 05:46:55 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:55 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000200)='Q', 0x1}], 0x2}, 0x0) 05:46:55 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:55 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 05:46:55 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x68000000}}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:55 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 781.077009][T11857] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 781.338019][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 781.457354][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.457386][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.617240][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.617273][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.617294][T11857] usb 8-1: Product: syz [ 781.617309][T11857] usb 8-1: Manufacturer: syz [ 781.617324][T11857] usb 8-1: SerialNumber: syz [ 782.069243][T11857] usb 8-1: 0:2 : does not exist [ 782.074767][T11857] usb 8-1: USB disconnect, device number 53 [ 782.110408][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:57 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000000) 05:46:57 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3, 0x0) 05:46:57 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:57 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:57 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff000000}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:57 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:57 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xcdfab60c882af267, 0x0) 05:46:57 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 782.828204][ T3739] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 783.067157][ T3739] usb 8-1: Using ep0 maxpacket: 8 [ 783.187316][ T3739] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.187337][ T3739] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 783.357766][ T3739] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 783.357861][ T3739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.357884][ T3739] usb 8-1: Product: syz [ 783.357954][ T3739] usb 8-1: Manufacturer: syz [ 783.357971][ T3739] usb 8-1: SerialNumber: syz [ 783.881457][ T3739] usb 8-1: 0:2 : does not exist [ 783.890689][ T3739] usb 8-1: USB disconnect, device number 54 [ 783.915409][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:46:59 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000000) 05:46:59 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:59 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x73000000}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:59 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:46:59 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x0, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:59 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x0, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:46:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:46:59 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 784.606988][T13884] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 784.867195][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 784.997273][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.997304][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 785.197259][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 785.197293][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.197313][T13884] usb 8-1: Product: syz [ 785.197327][T13884] usb 8-1: Manufacturer: syz [ 785.197340][T13884] usb 8-1: SerialNumber: syz [ 785.600406][ T40] audit: type=1804 audit(1653803220.424:783): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1328/cgroup.controllers" dev="sda1" ino=1150 res=1 errno=0 [ 785.677462][T13884] usb 8-1: 0:2 : does not exist [ 785.687897][T13884] usb 8-1: USB disconnect, device number 55 [ 785.703726][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:00 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x0, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:00 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:00 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000000) 05:47:00 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:00 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x0, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe7, &(0x7f0000000200)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/224, 0x0, 0xe0, 0x1f1}, 0x20) 05:47:01 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:01 executing program 0: syz_io_uring_setup(0x4d15, &(0x7f0000000100), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x1ad6, &(0x7f0000000200), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 05:47:01 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000280)) 05:47:01 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xa, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @alu, @map_fd, @cb_func]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 786.457058][T13884] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 786.728531][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 786.847331][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.847362][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.017317][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 787.017350][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.017369][T13884] usb 8-1: Product: syz [ 787.017385][T13884] usb 8-1: Manufacturer: syz [ 787.017399][T13884] usb 8-1: SerialNumber: syz [ 787.378103][ T40] audit: type=1804 audit(1653803222.204:784): pid=19350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1329/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 787.477435][T13884] usb 8-1: 0:2 : does not exist [ 787.489600][T13884] usb 8-1: USB disconnect, device number 56 [ 787.512783][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:02 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 05:47:02 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:02 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000000) 05:47:02 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) 05:47:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, &(0x7f00000001c0)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 05:47:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000340)) 05:47:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}) 05:47:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 788.227020][T11860] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 788.497839][T11860] usb 8-1: Using ep0 maxpacket: 8 [ 788.647554][T11860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.647589][T11860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:47:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 788.827647][T11860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 788.827680][T11860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.827694][T11860] usb 8-1: Product: syz [ 788.827703][T11860] usb 8-1: Manufacturer: syz [ 788.827713][T11860] usb 8-1: SerialNumber: syz [ 789.208327][ T40] audit: type=1804 audit(1653803224.034:785): pid=19387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1330/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0 [ 789.277167][T11860] usb 8-1: 0:2 : does not exist [ 789.293171][T11860] usb 8-1: USB disconnect, device number 57 [ 789.311744][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:04 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000000) 05:47:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000340)={0x16, 0x0, 0x0}) 05:47:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x0, 0x0, 0x0, 0x2f}, 0x48) 05:47:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) 05:47:04 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 05:47:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000340)={0x0, 0x1, &(0x7f0000000240)="da"}) [ 790.047043][T13884] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 790.317133][T13884] usb 8-1: Using ep0 maxpacket: 8 [ 790.447187][T13884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.447227][T13884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.637360][T13884] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.637395][T13884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.637458][T13884] usb 8-1: Product: syz [ 790.637475][T13884] usb 8-1: Manufacturer: syz [ 790.637491][T13884] usb 8-1: SerialNumber: syz [ 791.021306][ T40] audit: type=1804 audit(1653803225.844:786): pid=19395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1331/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 791.060335][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.097157][T13884] usb 8-1: 0:2 : does not exist [ 791.111804][T13884] usb 8-1: USB disconnect, device number 58 [ 791.131583][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:06 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000000) 05:47:06 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 05:47:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:06 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:06 executing program 0: msgget(0x3, 0x292) 05:47:06 executing program 0: memfd_create(&(0x7f0000000080)='(--%\\}(\x00', 0x2) 05:47:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) 05:47:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, 0x0, 0x0) [ 791.685588][ T40] audit: type=1400 audit(1653803226.504:787): avc: denied { mac_admin } for pid=19423 comm="syz-executor.0" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 791.834907][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.847357][ T15] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 792.088821][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 792.228044][ T15] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.228071][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.387304][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 792.387324][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.387354][ T15] usb 8-1: Product: syz [ 792.387363][ T15] usb 8-1: Manufacturer: syz [ 792.387372][ T15] usb 8-1: SerialNumber: syz [ 792.746122][ T40] audit: type=1804 audit(1653803227.564:788): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1332/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 792.785967][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.827297][ T15] usb 8-1: 0:2 : does not exist [ 792.834855][ T15] usb 8-1: USB disconnect, device number 59 [ 792.858002][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:08 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000000) 05:47:08 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 05:47:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:08 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000002c00ffff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f3ff0000080001006270660020000200080003000000000006000400010000000c00050006"], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 793.353949][T19435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 05:47:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="11", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x800, @private2}, 0x1c) [ 793.606982][T13233] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 793.847021][T13233] usb 8-1: Using ep0 maxpacket: 8 [ 793.967231][T13233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.967262][T13233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:47:08 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 794.137375][T13233] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 794.137434][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.137457][T13233] usb 8-1: Product: syz [ 794.137474][T13233] usb 8-1: Manufacturer: syz [ 794.137489][T13233] usb 8-1: SerialNumber: syz [ 794.494668][ T40] audit: type=1804 audit(1653803229.314:789): pid=19433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1333/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 794.587319][T13233] usb 8-1: 0:2 : does not exist [ 794.603992][T13233] usb 8-1: USB disconnect, device number 60 [ 794.620771][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="11", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x800, @private2}, 0x1c) 05:47:09 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:09 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x0) [ 795.337323][T11857] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 795.607283][T11857] usb 8-1: Using ep0 maxpacket: 8 [ 795.717580][T11857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.717614][T11857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:47:10 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:10 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 795.878141][T11857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 05:47:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0xff, 0x0, 0x200}, 0x20) 05:47:10 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 795.878164][T11857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.878177][T11857] usb 8-1: Product: syz 05:47:10 executing program 0: syz_io_uring_setup(0x4ccb, &(0x7f0000000100), &(0x7f0000e8a000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 795.878186][T11857] usb 8-1: Manufacturer: syz 05:47:10 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 795.878195][T11857] usb 8-1: SerialNumber: syz 05:47:10 executing program 0: mlockall(0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='numa_maps\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/180, 0xb4}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000340)=""/117, 0x75}], 0x4, 0x0, 0x0) [ 796.257400][ T40] audit: type=1804 audit(1653803231.084:790): pid=19472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1334/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0 [ 796.357587][T11857] usb 8-1: 0:2 : does not exist [ 796.389744][T11857] usb 8-1: USB disconnect, device number 61 [ 796.412072][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:11 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:11 executing program 0: mlockall(0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='numa_maps\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/180, 0xb4}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000340)=""/117, 0x75}], 0x4, 0x0, 0x0) 05:47:11 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x0) 05:47:11 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 797.107025][T14023] usb 8-1: new high-speed USB device number 62 using dummy_hcd 05:47:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1}}], 0x1, 0x0) [ 797.377031][T14023] usb 8-1: Using ep0 maxpacket: 8 [ 797.498392][T14023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.498415][T14023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 05:47:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:12 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:12 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 797.677476][T14023] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 05:47:12 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 797.677508][T14023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.677527][T14023] usb 8-1: Product: syz [ 797.677540][T14023] usb 8-1: Manufacturer: syz [ 797.677554][T14023] usb 8-1: SerialNumber: syz 05:47:12 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 798.055212][ T40] audit: type=1804 audit(1653803232.874:791): pid=19499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1335/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 798.187259][T14023] usb 8-1: 0:2 : does not exist [ 798.210081][T14023] usb 8-1: USB disconnect, device number 62 [ 798.223785][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:13 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x7ff}]) 05:47:13 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:13 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433004000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x0) 05:47:13 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:13 executing program 0: add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 05:47:13 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002900000000000029000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f45", 0x5b, 0x8800}, {&(0x7f0000011100)="88", 0x1, 0xe000}], 0x0, &(0x7f0000012200)) 05:47:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000080)="17", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) [ 798.927194][ T15] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 799.166961][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 799.287291][ T15] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.287312][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 799.447331][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 05:47:14 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 799.447365][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 05:47:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 799.447387][ T15] usb 8-1: Product: syz [ 799.447401][ T15] usb 8-1: Manufacturer: syz 05:47:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) [ 799.447416][ T15] usb 8-1: SerialNumber: syz [ 799.826044][ T40] audit: type=1804 audit(1653803234.644:792): pid=19523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir844390296/syzkaller.TdE93D/1336/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 [ 799.907320][ T15] usb 8-1: 0:2 : does not exist [ 799.918119][ T15] usb 8-1: USB disconnect, device number 63 [ 799.946019][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:47:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:15 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 05:47:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:16 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 05:47:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x4, 0x0, 0x0, 0x6800}]}, &(0x7f0000000500)='GPL\x00', 0x7, 0x9f, &(0x7f0000000540)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:16 executing program 0: syz_clone(0x40184000, 0x0, 0x0, 0x0, 0x0, 0x0) 05:47:16 executing program 3: syz_clone(0x140000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 05:47:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000001c0)="b7", 0x1}, {0x0}, {&(0x7f0000000280)="c3", 0x1}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1c00000000000000003fc9fe00000000", @ANYRES32=0x0, @ANYBLOB="e000000264010101000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e0000002e0000001000000000801"], 0x148}, 0x0) 05:47:16 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:16 executing program 3: syz_clone(0x4000a200, 0x0, 0x0, 0x0, 0x0, 0x0) 05:47:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETS(r0, 0x5435, 0x0) 05:47:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETS(r0, 0x5435, 0x0) 05:47:17 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:17 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, r0, 0x4}, 0x10) 05:47:17 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x8}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0}) 05:47:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, r0, 0x4}, 0x10) 05:47:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)={[{@dax}]}) 05:47:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, r0, 0x4}, 0x10) 05:47:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) [ 803.199534][T19596] XFS (loop3): Invalid superblock magic number 05:47:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 05:47:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)={[{@dax}]}) 05:47:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) [ 803.985743][T19608] XFS (loop3): Invalid superblock magic number 05:47:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:19 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000001140)) 05:47:19 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) 05:47:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) 05:47:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:20 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:20 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) 05:47:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) 05:47:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000479752"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:22 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000479752"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000479752"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:22 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:22 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a61895"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:23 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:23 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a61895"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:23 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a61895"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:23 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:24 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:24 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff0"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:25 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff0"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff0"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) 05:47:26 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:26 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) 05:47:26 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:26 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) 05:47:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:26 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) 05:47:27 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 05:47:27 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 05:47:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) [ 812.691809][T19824] ALSA: seq fatal error: cannot create timer (-22) [ 812.722902][T19832] ALSA: seq fatal error: cannot create timer (-22) 05:47:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) [ 812.782197][T19837] ALSA: seq fatal error: cannot create timer (-22) 05:47:28 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x2000000000000600}], 0x0, &(0x7f0000000480)={[{@fat=@nfs}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:47:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:28 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 813.576919][T19842] loop3: detected capacity change from 0 to 264192 05:47:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x2000000000000600}], 0x0, &(0x7f0000000480)={[{@fat=@nfs}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:47:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:29 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:29 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x2000000000000600}], 0x0, &(0x7f0000000480)={[{@fat=@nfs}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:47:29 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 814.455990][T19862] loop3: detected capacity change from 0 to 264192 05:47:29 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001600), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000001640)=""/89) 05:47:29 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:29 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) [ 814.570786][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.570843][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 05:47:30 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xf372, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "0c82a682"}]}}, 0x0}, 0x0) 05:47:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) [ 815.627286][T14023] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 816.017126][T14023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.017161][T14023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.017193][T14023] usb 8-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40 [ 816.017209][T14023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.020576][T14023] usb 8-1: config 0 descriptor?? 05:47:31 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 816.483656][T14023] hid-led 0003:04D8:F372.000D: item fetching failed at offset 0/1 [ 816.484088][T14023] hid-led: probe of 0003:04D8:F372.000D failed with error -22 [ 816.680483][T14023] usb 8-1: USB disconnect, device number 64 05:47:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x44}}, 0x0) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:47:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:32 executing program 3: openat$ttynull(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 3: socketpair(0x23, 0x0, 0x2, &(0x7f0000000040)) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000002c0)=""/86, &(0x7f0000000340)=0x56) 05:47:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, 0x0, 0x0) 05:47:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r1, 0x0) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 3: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) 05:47:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, 0x0, 0x0) 05:47:32 executing program 3: syz_open_dev$evdev(&(0x7f0000001600), 0x3f, 0x0) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, 0x0, 0x0) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:32 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000240), 0x6) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) [ 817.615156][ T40] audit: type=1400 audit(1653803252.434:793): avc: denied { bind } for pid=19953 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 05:47:32 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@grpquota}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'hfs\x00'}}]}) 05:47:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 817.664392][T19959] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=hfs" 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 1: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@norecovery}, {@rtdev={'rtdev', 0x3d, './file0'}}]}) [ 817.725012][T19967] XFS (loop1): no-recovery mounts must be read-only. 05:47:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = dup2(r0, 0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) r3 = syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x2b50, 0x2, {}, {0xee01}, 0x2}) pidfd_getfd(r1, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r5 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x18}) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 1: r0 = socket(0x29, 0x2, 0x0) getsockname$netrom(r0, 0x0, 0x0) 05:47:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:32 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000080)) 05:47:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x4}, 0x10) 05:47:32 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = dup2(r0, 0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) r3 = syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x2b50, 0x2, {}, {0xee01}, 0x2}) pidfd_getfd(r1, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r5 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x18}) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 05:47:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 05:47:32 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x1, 0x9d, &(0x7f00000004c0)=""/157, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:32 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f00}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 05:47:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 05:47:32 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x44) 05:47:33 executing program 1: socketpair(0x2, 0x2, 0x88, &(0x7f0000001240)) 05:47:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:47:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, r0, 0x4}, 0x10) 05:47:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x16, 0x0, 0x3db, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 05:47:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, r0, 0x4}, 0x10) 05:47:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x15}, 0x48) 05:47:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x800, [{0x0, 0x3, 0x38}, {0x0, 0x3}]}]}}, &(0x7f0000000080)=""/154, 0x3e, 0x9a, 0x1}, 0x20) 05:47:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, r0, 0x4}, 0x10) 05:47:33 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r1) 05:47:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, 0x0, 0x0) 05:47:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x87, &(0x7f0000000700)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000040)=@framed={{}, [@kfunc, @generic={0x9c}, @map_idx]}, &(0x7f0000000480)='syzkaller\x00', 0x1, 0x9d, &(0x7f00000004c0)=""/157, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 05:47:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/216, 0x32, 0xd8, 0x1}, 0x20) 05:47:33 executing program 1: socketpair(0x2, 0x2, 0x2e1, &(0x7f0000000100)) 05:47:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 05:47:33 executing program 1: socketpair(0x10, 0x0, 0x401, &(0x7f0000000100)) 05:47:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, 0x0, 0x0) 05:47:33 executing program 3: socketpair(0xc, 0x0, 0x0, &(0x7f0000000100)) 05:47:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, 0x0) [ 818.429213][ T40] audit: type=1400 audit(1653803253.254:794): avc: denied { create } for pid=20038 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 05:47:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 05:47:33 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000400)=@raw=[@alu={0x7}], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x9d, &(0x7f00000004c0)=""/157, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{}]}]}}, &(0x7f00000001c0)=""/154, 0x32, 0x9a, 0x1}, 0x20) 05:47:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0}, 0x10) 05:47:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x0, 0x0, 0x7fff}, 0x48) 05:47:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000005) accept(r0, &(0x7f0000000000)=@sco, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, 0x0, 0x0) 05:47:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0}, 0x10) 05:47:33 executing program 3: bpf$BPF_PROG_QUERY(0x21, &(0x7f0000000ac0)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, 0x20) 05:47:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x0, 0x4, 0x1}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000950000000000000047975262d13748af9b831f6420d1200f79a6189522ff0f00000000000028e39d3c3ff01db5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0}, 0x10) 05:47:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:47:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x1a, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 05:47:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000001c0)=""/154, 0x26, 0x9a, 0x1}, 0x20) 05:47:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/154, 0x2c, 0x9a, 0x1}, 0x20) 05:47:33 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='sys_enter\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) 05:47:33 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x16}, 0x10) 05:47:33 executing program 2: socketpair(0x10, 0x2, 0x41, &(0x7f0000000100)) 05:47:33 executing program 0: socketpair(0x10, 0x3, 0x5, &(0x7f0000000040)) 05:47:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x10, 0x4, 0x0, 0x1}, 0x48) 05:47:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:47:33 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 818.762764][ T40] audit: type=1400 audit(1653803253.584:795): avc: denied { create } for pid=20082 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 05:47:33 executing program 2: socketpair(0x2, 0x5, 0x6, &(0x7f0000001240)) 05:47:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) 05:47:33 executing program 3: r0 = socket(0x18, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000080)="d3", 0x1}, {0x0}], 0x3, &(0x7f0000000240)=[@cred], 0x20}, 0x0) 05:47:33 executing program 0: socketpair(0xa, 0x1, 0x0, &(0x7f0000001240)) 05:47:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x1, &(0x7f0000000400)=@raw=[@exit], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="02", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x80}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1}, 0x101c0) 05:47:33 executing program 1: bpf$BPF_PROG_QUERY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:47:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x0, 0x0, 0x7}, 0x48) 05:47:33 executing program 1: bpf$BPF_PROG_QUERY(0x23, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x53dca3e03241b2fe, 0x0, 0x0}, 0x20) 05:47:33 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="02", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x80}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1}, 0x101c0) 05:47:33 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001700)={&(0x7f0000000140)=@id, 0x10, &(0x7f0000001300)=[{&(0x7f0000000180)="7ad3ac427194eb0da1aeff0ead367107c1023da36d62681b7d17cdedb476b3bf9902dcac94b76048c8947494f72dd2215819d0042a913223e54f16316af4644176f9407038724e4e14e6d15f6f4b57e18c4d24d2e1a4c4216cfd3ef5518f3c4215c07039f5b3c6526f4e848107a0eddc8651a99ff70f9661360935c11d058c56c531742f638241a7d0b816bf780d955307fafa56", 0x94}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="4ae60bab900e376ea74b837e3679d667", 0x10}, {&(0x7f0000001280)="1c4abc73b53b9e09c6cd8276a12aa357082e9084ea09183f3d54fa594350de4bec904348f6087ad8ff67c254c588356d5ff0dfe53bcac7b5133b582fa8102290266d2fa39d0bc5535b20b4fb73b983fe1a7073282db6b9b3e04e35ee8e45e985cc5adc1593d96d", 0x67}, {&(0x7f0000001440)="6a2a3110e844c6763bab5f122358ad4f8605df8f2e22e46ae332cd15700992eb418817c5334cd3bda4cd9a0ab67241b541e689f66d8cd26f4f2ef747e74c7832ca887e568bca4867ef1604759e7dfd1f4aed232eb863aec2612f2d3b5f5107dfd45304d4f23760565c475db28b7f10a09ab31bc265bdca41056e8afef3c5292e373213829b322943cd19e6380af949957557b9c63bee4389514e554e9da9d0", 0x9f}, {&(0x7f0000001500)="9e55a1449fbe709b391f2e317495a1a392c00325d897e7f6fa3b91b11ca4b2d6b77cce9418aefc94b8e4f5fe246d37bc1fce5d298a8115a41d49c34f76e7e3bc3a2fabb611bd45663ac39da98d13969b6efb64e1caf89988088be5a467532a78007520468bb09379befd1c67f00eb80c57c84e69d95ac2a325d2575d16fa3cbc3ffc1bded46a98530eea123605ec89028260dbae39aab20bba373cf95b07", 0x9e}, {&(0x7f00000015c0)="60f412f103a0eb512afff811942c26e8a8cc2467e468595f169b9fbc21fec5f5bf257cc5ea1b8e51217373c704e65dbdd84e92920c5faaddc0cbc49122f34ed7eae8c2435c9bfcd64bb94b315c50411f0c0fb161e84e8a9d24047ddf5e5243d24973b14b2102fd02ac9d26e825f9ba64e33e8e77df74633e99a7042a7afc84a3af7d3bb1f316f08488025dc6b66f70f44b6731b3782d0d0e7265ec15580a480705d909ba98b9834b69cc4285f0be4a805a96c800ce30faa2d9cc63760f8938c511536c105b7d849120cb22f961ad6dc9dfc00d", 0xd3}, {&(0x7f0000001900)="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", 0xa86}], 0x8}, 0x0) 05:47:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001cc0)=""/139, 0x27, 0x8b, 0x1}, 0x20) 05:47:33 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="02", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x80}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1}, 0x101c0) 05:47:33 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x3}, 0x10) 05:47:33 executing program 1: socketpair(0x10, 0x2, 0x10, &(0x7f0000000100)) 05:47:33 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="02", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x80}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1}, 0x101c0) 05:47:33 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001d80)=""/80, 0x50}], 0x300}, 0x0) close(r1) 05:47:33 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x6440, 0x0) 05:47:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x1000000, [{}]}]}}, &(0x7f00000001c0)=""/154, 0x32, 0x9a, 0x1}, 0x20) 05:47:33 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r1) 05:47:33 executing program 2: socketpair(0xa, 0x6, 0x0, &(0x7f0000001240)) 05:47:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/154, 0x1a, 0x9a, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x3ff, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=r0, 0x4) 05:47:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x1, 0x9d, &(0x7f00000004c0)=""/157, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:33 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="02", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x80}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/85, 0x55}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffffffff000}], 0x9}, 0x0) 05:47:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net\x00') getdents(r0, 0x0, 0x0) 05:47:33 executing program 0: chown(&(0x7f0000030880)='./file0\x00', 0x0, 0x0) 05:47:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/181, 0x0, 0xb5, 0x7f}, 0x20) 05:47:33 executing program 3: socketpair(0x11, 0x2, 0x228a, &(0x7f0000000100)) 05:47:33 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 05:47:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net\x00') getdents(r0, 0x0, 0x0) 05:47:34 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net\x00') getdents(r0, 0x0, 0x0) 05:47:34 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @initdev}}) 05:47:34 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000900)={[{@errors_continue}]}) 05:47:34 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) 05:47:34 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008e9bdf404608004366390000000109021b00010000000009040000010202ff00090581", @ANYRES32], 0x0) 05:47:34 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:47:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0xfffffd6d) r1 = dup(r0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/230, 0xe6}], 0x1) 05:47:34 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net\x00') getdents(r0, 0x0, 0x0) [ 819.229940][ T40] audit: type=1400 audit(1653803254.054:796): avc: denied { ioctl } for pid=20164 comm="syz-executor.2" path="socket:[129057]" dev="sockfs" ino=129057 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 05:47:34 executing program 1: getdents(0xffffffffffffffff, 0x0, 0x0) 05:47:34 executing program 0: r0 = socket(0x11, 0x3, 0x0) close(r0) [ 819.278566][T20171] input: syz0 as /devices/virtual/input/input9 05:47:34 executing program 1: getdents(0xffffffffffffffff, 0x0, 0x0) 05:47:34 executing program 0: syz_mount_image$squashfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) [ 819.547129][T14020] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 819.937252][T14020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 819.937294][T14020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 819.937336][T14020] usb 8-1: New USB device found, idVendor=0846, idProduct=4300, bcdDevice=39.66 [ 819.937336][T14020] usb 8-1: New USB device found, idVendor=0846, idProduct=4300, bcdDevice=39.66 [ 819.937362][T14020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.940390][T14020] usb 8-1: config 0 descriptor?? [ 819.957646][T20173] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 819.983823][T14020] ------------[ cut here ]------------ [ 819.983839][T14020] usb 8-1: BOGUS urb xfer, pipe 3 != type 1