d interface number: 143 but max is 4 [ 343.418964][ T45] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 343.427488][ T45] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 5 [ 343.436770][ T45] usb 4-1: config 0 has no interface number 0 [ 343.443167][ T45] usb 4-1: config 0 has no interface number 1 [ 343.449263][ T45] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 343.460701][ T45] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 343.473943][ T45] usb 4-1: config 0 interface 143 has no altsetting 0 [ 343.481122][ T45] usb 4-1: config 0 interface 89 has no altsetting 0 [ 343.650834][ T45] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=f1.f1 [ 343.659997][ T45] usb 4-1: New USB device strings: Mfr=12, Product=74, SerialNumber=147 [ 343.668836][ T45] usb 4-1: Product: syz [ 343.673386][ T45] usb 4-1: Manufacturer: syz [ 343.678047][ T45] usb 4-1: SerialNumber: syz [ 343.687819][ T45] usb 4-1: config 0 descriptor?? [ 344.020841][ T45] usb 4-1: USB disconnect, device number 102 [ 344.700743][ T2709] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 344.940754][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 345.060872][ T2709] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 345.069104][ T2709] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 345.079350][ T2709] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 5 [ 345.089136][ T2709] usb 4-1: config 0 has no interface number 0 [ 345.095941][ T2709] usb 4-1: config 0 has no interface number 1 [ 345.102953][ T2709] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 345.114691][ T2709] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 345.128663][ T2709] usb 4-1: config 0 interface 143 has no altsetting 0 [ 345.136395][ T2709] usb 4-1: config 0 interface 89 has no altsetting 0 [ 345.301123][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=f1.f1 [ 345.310184][ T2709] usb 4-1: New USB device strings: Mfr=12, Product=74, SerialNumber=147 [ 345.319555][ T2709] usb 4-1: Product: syz [ 345.324419][ T2709] usb 4-1: Manufacturer: syz [ 345.329010][ T2709] usb 4-1: SerialNumber: syz [ 345.336182][ T2709] usb 4-1: config 0 descriptor?? 02:12:39 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045003, 0x0) 02:12:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x2000000}], 0xa0) 02:12:39 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x19000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x5016, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000000)) bind$netrom(r2, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 02:12:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:12:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x8, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x300000000}}, {@mode={'mode', 0x3d, 0x4}}], [{@fsname={'fsname', 0x3d, 'mountinfo\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt={'fowner>', r7}}, {@smackfsroot={'smackfsroot'}}]}) semctl$GETPID(r4, 0x0, 0xb, 0x0) semctl$GETZCNT(r4, 0x0, 0xf, &(0x7f00000011c0)=""/4096) 02:12:39 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac3636c74bf7688ed32979cc7ac4ce6d7eda706fe1"], 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x30582, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x480a2) [ 345.543079][ T2709] usb 4-1: USB disconnect, device number 103 02:12:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f00000000c0)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x100000000000000}], 0xa0) [ 345.638264][ T27] audit: type=1804 audit(1591063959.433:105): pid=13933 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/135/cgroup.controllers" dev="sda1" ino=16372 res=1 02:12:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x6f48) 02:12:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:12:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x200000000000000}], 0xa0) 02:12:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$vcsu(&(0x7f0000000600)='/dev/vcsu#\x00', 0x4, 0x10042) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000640)) vmsplice(r3, &(0x7f0000000580)=[{&(0x7f0000000200)="7e49afb79f1c81466bb0e7fb15926bd0361068a2c24eaead24eec9feb5e8a9f6a4487195a2143f67fb78026ee950c3b88e1530c4c06084aff237ac34cc555a2d6c4e7adf3989", 0x46}, {&(0x7f0000000280)="1ed337fd0def96d3d5764a611f465d107845b3e7bde1b6ea1e9570c71d379a80c6e4af8fa95a5379cac7c1063a5aa9ad7e9e6c1f306c0fb03b70ecbbb15e470a6df4761ab668353fb74a2cbbde9f2e84f79725ec91c6bbe16c139133f37e45c4ae39c5bd81eed42d7042e1cf7f485541aeadf09056b721b19d72391c", 0x7c}, {&(0x7f0000000000)="0229ea0acdcace6e3cebcf4503e525247114", 0x12}, {&(0x7f0000000300)="284cd29234e39bc63ad9cd276b260bdfba627091bc20d8e3d260bbfee5068ae76380a2c9677b58a6f3b0cc4c8231e284d610a91928ed27f61c065fafba297b87eed317ef0dc99e910c4f2913005440511944b2c93e087dcea8f44d09a68ed40adf775779be88243d3351ac53d9e8b43b76422a7afb0d01e0509bc721d530c089f63df09181e6ddf3ba3c4a405d4a02e13a259dc8f0162b498cfe03239a2bd670096e43f00bf5e009da6b078696554e7cd5a6fdd48d42deea250ac444b32f3542e3e11d5f7a7762db99bd3150d0896cb988df76be9b2ae1d682f2b0ec3435f8b84505da6acb578000", 0xe8}, {&(0x7f0000000400)="5e1aaf92e91d2b4cdc2a33a9b4fc77914826253bb8b827268beb4551802b97fc69cdb11989d0f9c75e69c9ae0fbb", 0x2e}, {&(0x7f0000000440)="51a9d72f997ae769e206872b10ba6afa3471ed2226f22e887b405a92a0b5412a7a28054327c58a6a8b02e195dec6c78eb7dcd68c3a7b37fecd50a70395a596ff87f07ce9449c5acbd33eb6dc4d", 0x4d}, {&(0x7f00000004c0)="8fb098b13aa138bc4e0604d51e2058637272309eabbcc0742ab2ad1e6197077808d14652f4c67400f923a82ba1686039095cffeb8b30c9e63985b94089f4fa7b2508152733c1fc5921d0b5418e8a5d3e33cb22a3d702124c4f6d7c676bb486e218eb2d433179b4f3d6c4d98221f6cda99583702a9a3eca95540bf1ff0e1d7277d0e3c5a113987fa4318d5ebb5b4c12adfc87cfc2552ddc884c16ef5b134482fe3c", 0xa1}], 0x7, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x0, 0x80000001, 0x1, 'queue0\x00', 0xfffffffb}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000680)={0x7, 0x33, 0x2}, 0x7) 02:12:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5016, 0x0) syz_mount_image$cifs(&(0x7f0000000000)='cifs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x9, &(0x7f0000001600)=[{&(0x7f00000000c0)="2473a20f590ab2f42bd668dfbcb2c00007ca", 0x12, 0x1}, {&(0x7f0000000100)="81136ebb1d8d386555e2811435455f8102d3fd6b993923ba7d3cd7e02e74ea83a48ef761f0f3400fa28371358dc6360ea1712d4bd5a83e977c8b0ab987767aed975c0743fb2a6c18ae8afd2cab762fbfe102674bb537297c89481c69b9db5b121b5104a7a953d95a1c64f497314d44c6014e63cf9989527eef34f0a102232c36895d6dc573e02d6916c1aeb2b5a00626b0a51a309c8e3baf2e7fdaa5c1be5cc825737f0bc7f87bd57cfd3b8a2cef230474133a741b3d1993396eeae8db61f689fd5182f675ddc9ec98247bf594a027be527e7a6251d425c200928cf901fd9ac3283fa2abec114bb16cef1001c7c6", 0xee, 0x1}, {&(0x7f0000000200)="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", 0x1000, 0x6}, {&(0x7f0000001200)="478f1991c1bd3b4de93a19a455a3823de3c959f65cae47936824aedd072b28f5fbe8881dd8ba41a891e2f7b1f44dde47a42583501bae1ba48a8947382ef4de95a10f047bead79135ef09ec27eb3482e1a80e2d8b65420fa582b20270b8ac95c9ac5967a8abf8708dda20e97de198c7e32b86968e0738317a91a8ea7fc008178b4411a9e4cd3ba8d05756b7e696497763863f3f8f5a777afca707e89c058638b409f197ebd88dd2042690bee9e9ffe712ea2bbfde8a31dd8fa18d242f5144c428208dfd6cc18d", 0xc6, 0x6}, {&(0x7f0000001300)="06fd6318bafa61445798400a4ed5a68d824257e552a5d08e03d846bbc99852c19de2c0fc6f7ec8d37b5919e488cef18ddae6049f9f472297f03c3e3dc0ea398acbb2c56c3f", 0x45, 0x2}, {&(0x7f0000001380)="0a27cba29cab3ef49e37dfe4368b2a2f6cb1f746dec58bc31f622befb5efa100a0c4b1822bedfce8b93dcf3a9e759cd39846458d418ff61d0c7da64be7616ac4733a7adfe445b90d46a30cff60b5332d9fe193b57cf7176b6f5108dd177c32bc1661e683f20614f1de79882ad6be7b454fa2401a983b0de6611cb15e6fa730488178a49a8493b12b9385d56ef7ae23dd6482df45a593", 0x96, 0x100000000}, {&(0x7f0000001440)="9d449bfa728584c810e7605a6485bda8c4752309a1d42c32edd6390fd986b2321d045e3a76dabc4b6bd6248a23398cd773e41ca3c5f48095835ec12decda2b5a53ddcf56061656cbdad30e684516d605f2e5bb5ec7dd0b43cbd93252b2292ec5fb319cf5093530d880b3c5a05663f822146644dee9028f7f7e04d0477c2478e84e2a8a888312d0c164412cdf6359557534528ac27969f4bbf44e6c823c0a681302ff49ff41ce08d785369e3e638634", 0xaf, 0x5}, {&(0x7f0000001500)="212883663c00bb47f41d57db7ce9bfde71f300f38c29c21ebf0d14b3c75633613aab39742e9437457b48058c88d135f92edc1cebdc0689efa4963a35a964d91d653cbf581eeb187d9d31d6dfd43a8bda6e3f9cd508b57236cfffd087c27d923969", 0x61, 0x80000001}, {&(0x7f0000001580)="50aff5e412b860704396bb064a82560988d4eaf483ee3d438bab667f029e3633df5c812229fea88a861b4a99bbbede52ea11c7b956ee2841f69ab1999a22a5779317150ca28b062bd0c946f4e009", 0x4e, 0x8}], 0x1, &(0x7f0000001700)='/dev/dsp\x00') 02:12:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x401, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={[], 0x2}, 0xd, 'macvlan1\x00'}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0xffffffff00000000}], 0xa0) [ 345.901887][ T27] audit: type=1804 audit(1591063959.703:106): pid=13949 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/136/cgroup.controllers" dev="sda1" ino=16380 res=1 02:12:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x2}], 0xa0) [ 345.948584][T13958] CIFS: Attempting to mount /dev/loop4 [ 345.954286][T13958] CIFS VFS: Malformed UNC in devname. [ 346.031883][T13964] CIFS: Attempting to mount /dev/loop4 [ 346.041175][ T2709] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 346.066057][T13964] CIFS VFS: Malformed UNC in devname. [ 346.281021][ T2709] usb 4-1: Using ep0 maxpacket: 8 02:12:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x8, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x300000000}}, {@mode={'mode', 0x3d, 0x4}}], [{@fsname={'fsname', 0x3d, 'mountinfo\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt={'fowner>', r7}}, {@smackfsroot={'smackfsroot'}}]}) semctl$GETPID(r4, 0x0, 0xb, 0x0) [ 346.400855][ T2709] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 346.409041][ T2709] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 346.429535][ T2709] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 346.448534][ T2709] usb 4-1: config 0 has no interface number 0 [ 346.456027][ T2709] usb 4-1: config 0 has no interface number 1 [ 346.470810][ T2709] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 346.494468][ T2709] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 346.540849][ T2709] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 346.561109][ T2709] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 346.591115][ T2709] usb 4-1: config 0 interface 143 has no altsetting 0 [ 346.598064][ T2709] usb 4-1: config 0 interface 89 has no altsetting 0 [ 346.607518][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 346.630857][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.653425][ T2709] usb 4-1: config 0 descriptor?? [ 346.940788][ T2709] usb 4-1: string descriptor 0 read error: -71 [ 346.976864][ T2709] usb 4-1: Could not set interface, error -71 [ 346.987132][ T2709] usb 4-1: USB disconnect, device number 104 [ 347.690720][ T45] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 347.940732][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 348.061171][ T45] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 348.069350][ T45] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 348.090702][ T45] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 348.099773][ T45] usb 4-1: config 0 has no interface number 0 [ 348.130703][ T45] usb 4-1: config 0 has no interface number 1 [ 348.136809][ T45] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 348.149944][ T45] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 348.164155][ T45] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 348.176353][ T45] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 348.191008][ T45] usb 4-1: config 0 interface 143 has no altsetting 0 [ 348.197773][ T45] usb 4-1: config 0 interface 89 has no altsetting 0 [ 348.206718][ T45] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 348.216870][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.231401][ T45] usb 4-1: config 0 descriptor?? 02:12:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:12:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0xffff, 0xfff, 0x40, 0x1}) 02:12:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x1000000}], 0xa0) 02:12:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:12:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') lsetxattr$trusted_overlay_nlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='trusted.overlay.nlink\x00', &(0x7f0000000640)={'U-', 0x2}, 0x16, 0x1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="465575ee9554bc8041a49d", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250500000008000100000000000c0004000163ffffffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x16) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x330, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa16c}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004080}, 0x810) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000680)=0x3, r1, &(0x7f00000006c0)=0x6, 0x20, 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=@ipv6_getaddr={0x84, 0x16, 0x800, 0x70bd29, 0x25dfdbff, {0xa, 0x1, 0x0, 0xc8, r4}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0xc2b, 0x3, 0x800, 0x7ff}}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0xffffffff, 0x6, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4880}, 0x4040010) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r6, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fedbdf250200000008000200020000000800020002000000080002000008000200020000000800020002000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0x5016, 0x0) 02:12:42 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3377}, {0xa, 0x0, 0x0, @dev}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x3ff}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x8001}, 0x8) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r8, 0xd}}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100080307670899111890f1e2000000010902574f2f907aa9f15f5f05db618d1898dd158488240081000000000008000022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd627b8ce4ab"], 0x0) ioctl$KDDISABIO(r0, 0x4b37) [ 348.520835][ T45] usb 4-1: string descriptor 0 read error: -71 [ 348.547887][ T45] usb 4-1: Could not set interface, error -71 02:12:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x2000000}], 0xa0) [ 348.605601][ T45] usb 4-1: USB disconnect, device number 105 02:12:42 executing program 4: setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}}, &(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x5016, 0x0) [ 348.642870][ T27] audit: type=1804 audit(1591063962.443:107): pid=14029 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/137/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 348.688090][T14032] device bridge7 entered promiscuous mode 02:12:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x200) select(0x40, &(0x7f0000000000)={0xf87, 0x1, 0x8, 0x7, 0x8, 0x400000000000000, 0x40, 0x8}, &(0x7f0000000040)={0x40000059b94225, 0x1000, 0xb5f8, 0x100, 0x4, 0x8000000000, 0x4, 0xfffffffffffff061}, &(0x7f00000000c0)={0x4, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffa, 0xcf65}, &(0x7f0000000100)={0x0, 0x2710}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 02:12:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x100000000000000}], 0xa0) 02:12:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x200000000000000}], 0xa0) 02:12:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) syncfs(r0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5016, 0x0) 02:12:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:12:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0xffffffff00000000}], 0xa0) 02:12:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4141, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 349.065251][ T27] audit: type=1804 audit(1591063962.863:108): pid=14067 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/138/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 349.101417][ T45] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 349.340834][ T45] usb 4-1: Using ep0 maxpacket: 8 02:12:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:12:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x1ff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x5016, 0x0) [ 349.510660][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.590984][ T45] usb 4-1: config index 0 descriptor too short (expected 20311, got 36) [ 349.599589][ T45] usb 4-1: config 144 has too many interfaces: 47, using maximum allowed: 32 [ 349.623499][ T45] usb 4-1: config 144 has an invalid descriptor of length 95, skipping remainder of the config [ 349.635157][ T45] usb 4-1: config 144 has 0 interfaces, different from the descriptor's value: 47 [ 349.645468][ T45] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 349.655450][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.940851][ T45] usb 4-1: string descriptor 0 read error: -71 [ 349.948716][ T45] usb 4-1: USB disconnect, device number 106 [ 350.410954][T14100] device bridge8 entered promiscuous mode 02:12:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x82, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0x2c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x54, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @mcast1, 0x558}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast2}, 0x3}, @in6={0xa, 0x4e22, 0xffffffff, @private2, 0xda4}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r4, 0x9, 0xce8, 0x7}, 0x10) 02:12:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:12:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:12:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x3) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000040)={0x9, {0x2, 0x8, 0x2, 0x8}}) syncfs(r1) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5016, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40a00, 0x0) fcntl$getflags(r3, 0x3) 02:12:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:12:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'veth1_to_batadv\x00', {0x2, 0x4e20, @private=0xa010100}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r9, 0x80044dfb, &(0x7f0000000080)) 02:12:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x440001, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5016, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000240)={0xe, &(0x7f0000000140)="14610d3be625428f127bce162b17"}) r5 = socket(0x10, 0x803, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000280)=""/102) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$rds(r5, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 02:12:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {0x2}}], 0xa0) 02:12:44 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) [ 350.635560][ T27] audit: type=1804 audit(1591063964.433:109): pid=14127 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/139/cgroup.controllers" dev="sda1" ino=16368 res=1 02:12:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5016, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0x100) 02:12:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:12:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_delrule={0x24, 0x21, 0x20, 0x70bd29, 0x25dfdbfd, {0xa, 0x10, 0x20, 0x8, 0x6, 0x0, 0x0, 0x5, 0x10001}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) ioctl$FIONCLEX(r5, 0x5450) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000140)={r2, r4, 0x3f, 0x4d, &(0x7f00000000c0)="306291dde1f679e575744bb31bcc25f135cee38ea94438ee2358144df7c7a9e9ed324920a882b96d354fa51f803291439df0ff1857a3a905bba342c8869fa19af56a738413f79e019105710e8f", 0x3, 0x6, 0x68c, 0xcec3, 0x1, 0x1, 0x1, 'syz1\x00'}) sendfile(r1, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {0x0, 0x2}}], 0xa0) 02:12:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:12:44 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r10, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @xdp={0x2c, 0xc, r10, 0x38}, @can, @rc={0x1f, @none, 0xc0}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='veth1\x00', 0x2, 0x7, 0x3ff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8886}, 0x30040050) [ 350.917500][T14146] device bridge6 entered promiscuous mode [ 350.970818][ T8708] usb 4-1: new high-speed USB device number 107 using dummy_hcd 02:12:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 351.071411][ T27] audit: type=1804 audit(1591063964.873:110): pid=14155 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/140/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 351.250918][ T8708] usb 4-1: device descriptor read/64, error 18 02:12:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) semctl$GETPID(r4, 0x0, 0xb, 0x0) [ 351.321345][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 351.595098][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 351.655166][ T8708] usb 4-1: device descriptor read/64, error 18 [ 351.720949][ T17] usb 5-1: config 0 has an invalid interface number: 143 but max is 4 [ 351.729113][ T17] usb 5-1: config 0 has an invalid interface number: 89 but max is 4 [ 351.737369][ T17] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 351.746530][ T17] usb 5-1: config 0 has no interface number 0 [ 351.753308][ T17] usb 5-1: config 0 has no interface number 1 [ 351.759522][ T17] usb 5-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 351.771991][ T17] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 351.786276][ T17] usb 5-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 351.798230][ T17] usb 5-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 351.813049][ T17] usb 5-1: config 0 interface 143 has no altsetting 0 [ 351.819792][ T17] usb 5-1: config 0 interface 89 has no altsetting 0 [ 351.827978][ T17] usb 5-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 351.837605][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.847464][ T17] usb 5-1: config 0 descriptor?? [ 351.930826][ T8708] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 352.102596][T14157] device bridge11 entered promiscuous mode [ 352.117990][T14157] bridge11: port 1(bridge_slave_0) entered blocking state [ 352.126442][T14157] bridge11: port 1(bridge_slave_0) entered disabled state [ 352.135411][T14157] device bridge_slave_0 entered promiscuous mode [ 352.143252][T14157] bridge11: port 1(bridge_slave_0) entered blocking state [ 352.150375][T14157] bridge11: port 1(bridge_slave_0) entered forwarding state [ 352.200879][ T17] usb 5-1: string descriptor 0 read error: -71 [ 352.210936][ T8708] usb 4-1: device descriptor read/64, error 18 [ 352.221632][ T17] usb 5-1: Could not set interface, error -71 [ 352.234739][ T17] usb 5-1: USB disconnect, device number 3 [ 352.611024][ T8708] usb 4-1: device descriptor read/64, error 18 [ 352.732383][ T8708] usb usb4-port1: attempt power cycle [ 353.450904][ T8708] usb 4-1: new high-speed USB device number 109 using dummy_hcd 02:12:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xffff, 0x74dfc2) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/97, 0x61}, {&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000440)=""/40, 0x28}], 0x7, 0x9) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000500)={0x10000, 0x4, 0x0, 'queue0\x00', 0x5}) 02:12:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {0x0, 0x0, 0x2}}], 0xa0) 02:12:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:12:47 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:12:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 353.580980][ T8708] usb 4-1: device descriptor read/8, error -71 02:12:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:12:47 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x4, 0x8000df06, 0x3ff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980911, 0x3, [], @p_u8=&(0x7f0000000180)=0x4}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f00000001c0)) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 353.683545][ T27] audit: type=1804 audit(1591063967.483:111): pid=14209 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/141/cgroup.controllers" dev="sda1" ino=16097 res=1 02:12:47 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_read_part_table(0xf, 0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x4}) [ 353.771075][ T27] audit: type=1804 audit(1591063967.483:112): pid=14205 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir024890230/syzkaller.42XUY0/223/cgroup.controllers" dev="sda1" ino=16081 res=1 [ 353.810854][ T8708] usb 4-1: device descriptor read/8, error -71 02:12:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}], 0xa0) 02:12:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:12:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 354.051776][ T27] audit: type=1804 audit(1591063967.853:113): pid=14231 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/142/cgroup.controllers" dev="sda1" ino=16097 res=1 [ 354.320904][ T8708] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 354.410983][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 354.540988][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 354.549234][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 354.558680][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 354.568399][ T8708] usb 4-1: config 0 has no interface number 0 [ 354.575164][ T8708] usb 4-1: config 0 has no interface number 1 [ 354.582926][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 354.594660][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 354.608908][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 354.620635][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 354.635023][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 354.642796][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 354.649484][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 354.659583][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.668973][ T8708] usb 4-1: config 0 descriptor?? [ 354.951078][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 354.971032][ T8708] usb 4-1: Could not set interface, error -71 [ 354.980397][ T8708] usb 4-1: USB disconnect, device number 110 [ 355.690859][ T8708] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 355.930833][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 356.051722][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 356.060260][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 356.068473][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 356.077506][ T8708] usb 4-1: config 0 has no interface number 0 [ 356.083647][ T8708] usb 4-1: config 0 has no interface number 1 [ 356.089763][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 356.100539][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 356.113681][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 356.124780][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 356.138108][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 356.145001][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 356.151884][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 356.160991][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.169796][ T8708] usb 4-1: config 0 descriptor?? 02:12:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x7f) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:12:50 executing program 0: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) 02:12:50 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {}, {0x2}}], 0xa0) 02:12:50 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:12:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:12:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) [ 356.454233][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 356.481271][ T8708] usb 4-1: Could not set interface, error -71 02:12:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="121900000000000000000000000000000000000000000000000000000000000000000000000000850000000000af161b3bcc4486e213902bfb99fba76cfadeddd0ae162e31d35e59a2c086950889609c7564156dd330b3957571d5cd2600a2edb925a6d0574de79ce81c1383f41294653fe74b8939becf8079ae56a04d785fb8193c17abf09c7a654ddf1c9037ad1f4caab0483ab1f312768c2e82aff61130f4f504"]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045003, 0x0) [ 356.519126][ T8708] usb 4-1: USB disconnect, device number 111 02:12:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:12:50 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 356.557608][ T27] audit: type=1804 audit(1591063970.353:114): pid=14282 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/143/cgroup.controllers" dev="sda1" ino=16274 res=1 02:12:50 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {}, {0x0, 0x2}}], 0xa0) 02:12:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x1}}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xff5f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x80}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x80}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x20}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x7f}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfc}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xab}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 02:12:50 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 356.781870][ T27] audit: type=1804 audit(1591063970.583:115): pid=14296 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir024890230/syzkaller.42XUY0/225/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 356.960921][ T8708] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 357.218098][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 357.341061][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 357.349218][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 357.362112][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 357.374004][ T8708] usb 4-1: config 0 has no interface number 0 [ 357.380057][ T8708] usb 4-1: config 0 has no interface number 1 [ 357.388276][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 357.403730][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 357.418446][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 357.433685][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 357.448260][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 357.458447][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 357.466334][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 357.478622][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.488905][ T8708] usb 4-1: config 0 descriptor?? [ 357.770924][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 357.791074][ T8708] usb 4-1: Could not set interface, error -71 [ 357.802417][ T8708] usb 4-1: USB disconnect, device number 112 [ 358.510864][ T17] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 358.761014][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 358.881010][ T17] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 358.889203][ T17] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 358.897969][ T17] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 358.907116][ T17] usb 4-1: config 0 has no interface number 0 [ 358.913400][ T17] usb 4-1: config 0 has no interface number 1 [ 358.919481][ T17] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 358.930447][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 358.943639][ T17] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 358.954685][ T17] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 358.967957][ T17] usb 4-1: config 0 interface 143 has no altsetting 0 [ 358.974837][ T17] usb 4-1: config 0 interface 89 has no altsetting 0 [ 358.981620][ T17] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 358.990631][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.004117][ T17] usb 4-1: config 0 descriptor?? 02:12:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) exit_group(0x100000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', r3}) syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x0) 02:12:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:12:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:53 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {}, {0x0, 0x0, 0x2}}], 0xa0) 02:12:53 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:12:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) [ 359.288008][ T17] usb 4-1: string descriptor 0 read error: -71 [ 359.320962][ T17] usb 4-1: Could not set interface, error -71 02:12:53 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 359.356802][ T17] usb 4-1: USB disconnect, device number 113 [ 359.374093][T14355] FAULT_INJECTION: forcing a failure. [ 359.374093][T14355] name failslab, interval 1, probability 0, space 0, times 0 [ 359.430358][ T27] audit: type=1804 audit(1591063973.223:116): pid=14350 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/144/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 359.440221][T14355] CPU: 1 PID: 14355 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 359.462034][T14355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.472083][T14355] Call Trace: [ 359.475375][T14355] dump_stack+0x1e9/0x30e 02:12:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x2, 'nq\x00', 0x2, 0x8, 0x22}, 0x2c) sendfile(r1, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 359.479721][T14355] should_fail+0x433/0x5b0 [ 359.484155][T14355] ? tomoyo_realpath_from_path+0xd8/0x630 [ 359.489889][T14355] should_failslab+0x5/0x20 [ 359.494383][T14355] __kmalloc+0x74/0x330 [ 359.498537][T14355] ? tomoyo_realpath_from_path+0xcb/0x630 [ 359.504279][T14355] tomoyo_realpath_from_path+0xd8/0x630 [ 359.509832][T14355] tomoyo_path_number_perm+0x18f/0x690 [ 359.515331][T14355] security_file_ioctl+0x55/0xb0 [ 359.520295][T14355] __se_sys_ioctl+0x48/0x160 [ 359.524942][T14355] do_syscall_64+0xf3/0x1b0 02:12:53 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2}}], 0xa0) [ 359.529447][T14355] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 359.535441][T14355] RIP: 0033:0x45ca69 [ 359.539388][T14355] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.559015][T14355] RSP: 002b:00007febda71dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.567445][T14355] RAX: ffffffffffffffda RBX: 00000000004ec100 RCX: 000000000045ca69 02:12:53 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0xcdb47f86a6e60e6f}, 0x40) [ 359.575843][T14355] RDX: 0000000000000000 RSI: 00000000c0045007 RDI: 0000000000000003 [ 359.583813][T14355] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 359.591776][T14355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 359.599740][T14355] R13: 00000000000004ca R14: 00000000004c7c37 R15: 00007febda71e6d4 02:12:53 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 359.632993][T14350] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 359.665769][T14350] File: /root/syzkaller-testdir875291760/syzkaller.dEqCal/144/cgroup.controllers PID: 14350 Comm: syz-executor.2 02:12:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0x0, 0x5a9, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x4, 0x3, 0x15, "ee81b0b7"}, 0x6, 0x4, @planes=&(0x7f0000000000)={0x7, 0x1, @mem_offset, 0xf1a9}, 0x4485, 0x0, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f0000000140)=@ll={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="32d6ae3211229bb594b9b4ceaf53eb4500024b30c0be702dae900c264cc10d8e789a9dc63d6136ad0f586bf02d7725647186da823049d6b2af966a60b21f715d46cb29b3598299f12e6090d93f4797c634244d59ce04b545eb54b56e4f9374cf96b7dc722cfaaf174700a495850ca683b993de7b7b93548ca1be5405039665ffff3b2465afb655c48f", 0x89}, {&(0x7f0000000280)="8e53d226ade1a2ddbf72487dec3c3d084b86be3e047d2e8eb591d7cb8dc7712b28e9ca8de38302f40315d9126bfb0ce667087266c6ad95f57b1eb905764865119a2a905796804d26897b31f09ebfc231561e090628406752ddc0976756487ed204fb096e61a18073a68584fbd9a2b5f2da6cbd3b8aef790b775d5c5a680c3b24e547cd6926fa3e14e539fd65c04b3424a50f785a0b41412cbdf74f5eaca98733e04f737a1867155acff023b46ed040fa9a95e33e0308cdaa490d55ed07cfd197b67632198831b1a538d70bd32a917a88d60637830f76091bbbe692a1e2437e", 0xdf}], 0x2, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x71c000}}], 0x18}, 0x20004011) 02:12:53 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {}, {}, 0x2}], 0xa0) [ 359.891461][T14355] ERROR: Out of memory at tomoyo_realpath_from_path. 02:12:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:12:53 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:12:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x278040, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x272002, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@mcast1}}}, &(0x7f0000000040)=0xfffffffffffffe07) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:53 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 360.042127][T14396] FAULT_INJECTION: forcing a failure. [ 360.042127][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 360.068214][ T27] audit: type=1804 audit(1591063973.863:117): pid=14395 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/145/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 360.107561][ T17] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 360.138234][T14396] CPU: 0 PID: 14396 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 360.146594][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.156644][T14396] Call Trace: [ 360.159944][T14396] dump_stack+0x1e9/0x30e [ 360.164277][T14396] should_fail+0x433/0x5b0 [ 360.168702][T14396] ? tomoyo_encode2+0x25a/0x560 [ 360.173551][T14396] should_failslab+0x5/0x20 [ 360.178051][T14396] __kmalloc+0x74/0x330 [ 360.182211][T14396] tomoyo_encode2+0x25a/0x560 [ 360.186895][T14396] tomoyo_realpath_from_path+0x5d6/0x630 [ 360.192535][T14396] tomoyo_path_number_perm+0x18f/0x690 [ 360.198045][T14396] security_file_ioctl+0x55/0xb0 [ 360.202984][T14396] __se_sys_ioctl+0x48/0x160 [ 360.207574][T14396] do_syscall_64+0xf3/0x1b0 [ 360.212079][T14396] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 360.217964][T14396] RIP: 0033:0x45ca69 [ 360.221854][T14396] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.241459][T14396] RSP: 002b:00007febda71dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.249864][T14396] RAX: ffffffffffffffda RBX: 00000000004ec100 RCX: 000000000045ca69 02:12:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:12:54 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {}, {}, 0x0, 0x2}], 0xa0) [ 360.257915][T14396] RDX: 0000000000000000 RSI: 00000000c0045007 RDI: 0000000000000003 [ 360.265881][T14396] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 360.273845][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 360.281812][T14396] R13: 00000000000004ca R14: 00000000004c7c37 R15: 00007febda71e6d4 02:12:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x84080, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x100) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f00000000c0)) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r2) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000001c0)=0x1f, 0x4) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r3, 0x6d, 0x62}, &(0x7f0000000140)=ANY=[@ANYBLOB="656e733d706b6373312068952c683d7f70351c276d6600000000000000000000000000000400"/67], &(0x7f0000000240)="04cbb5a9b7860ddde8b0ff76004932e81d65203014fef3c57c403d537b11ca8e52874b7a2609e3db375e146b1cdfe25fc0820deb48b709d30cc47f032ac40c22f5277f6395e3546b2d7081f05e6bc330f06bfd81f3a883075a21b115dcca79102fedb46f8bc48d17e8e6912142", &(0x7f00000002c0)="db95dc93f0abd4df2249e75f8b4102ec43e4bb63f72e661d909467e445705125f456f9642d3431313368dd9a1d7fa9e1fa8cea27b2698da67c6855f7156d38a825f82bb0f9f9950b8558de2b12dc42b7e7ffd97ee8daa0d0d5721fb0c8dd9b88f499") ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$setperm(0x5, r5, 0x4042008) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000380)) 02:12:54 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x4000) [ 360.522081][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 360.596286][T14396] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.661030][ T17] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 360.669314][ T17] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 360.708436][ T17] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 360.718679][ T17] usb 4-1: config 0 has no interface number 0 [ 360.726285][ T17] usb 4-1: config 0 has no interface number 1 [ 360.733270][ T17] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 360.745016][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 360.759147][ T17] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 360.789211][ T17] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 360.815770][ T17] usb 4-1: config 0 interface 143 has no altsetting 0 [ 360.823893][ T17] usb 4-1: config 0 interface 89 has no altsetting 0 [ 360.830590][ T17] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 360.841612][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.857886][ T17] usb 4-1: config 0 descriptor?? [ 361.150974][ T17] usb 4-1: string descriptor 0 read error: -71 [ 361.171157][ T17] usb 4-1: Could not set interface, error -71 [ 361.191048][ T17] usb 4-1: USB disconnect, device number 114 [ 361.881071][ T2709] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 362.150907][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 362.271079][ T2709] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 362.279364][ T2709] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 362.287909][ T2709] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 362.296959][ T2709] usb 4-1: config 0 has no interface number 0 [ 362.303192][ T2709] usb 4-1: config 0 has no interface number 1 [ 362.309319][ T2709] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 362.320116][ T2709] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 362.333203][ T2709] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 362.344245][ T2709] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 362.357552][ T2709] usb 4-1: config 0 interface 143 has no altsetting 0 [ 362.364472][ T2709] usb 4-1: config 0 interface 89 has no altsetting 0 [ 362.371284][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 362.380587][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.397111][ T2709] usb 4-1: config 0 descriptor?? 02:12:56 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 02:12:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:12:56 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x200007e0) 02:12:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc083, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000000c140800000000000000022508000300020000000800030000000000080003000300000008003d000100000008003d00040000003d00050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff60}}, 0xc0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4810) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x8, 0x7, 0x2}, 0x10) 02:12:56 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:12:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) semctl$GETPID(r4, 0x0, 0xb, 0x0) [ 362.681152][ T2709] usb 4-1: string descriptor 0 read error: -71 [ 362.701001][ T2709] usb 4-1: Could not set interface, error -71 [ 362.728713][ T2709] usb 4-1: USB disconnect, device number 115 [ 362.759090][T14462] FAULT_INJECTION: forcing a failure. [ 362.759090][T14462] name failslab, interval 1, probability 0, space 0, times 0 02:12:56 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)=0x1) [ 362.829952][ T27] audit: type=1804 audit(1591063976.623:118): pid=14461 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/146/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 362.846015][T14462] CPU: 0 PID: 14462 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 362.861609][T14462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.871659][T14462] Call Trace: [ 362.874947][T14462] dump_stack+0x1e9/0x30e [ 362.879281][T14462] should_fail+0x433/0x5b0 [ 362.883738][T14462] ? tomoyo_encode2+0x25a/0x560 [ 362.888588][T14462] should_failslab+0x5/0x20 [ 362.893087][T14462] __kmalloc+0x74/0x330 [ 362.897248][T14462] tomoyo_encode2+0x25a/0x560 [ 362.901932][T14462] tomoyo_realpath_from_path+0x5d6/0x630 [ 362.907573][T14462] tomoyo_path_number_perm+0x18f/0x690 [ 362.913065][T14462] security_file_ioctl+0x55/0xb0 [ 362.918004][T14462] __se_sys_ioctl+0x48/0x160 [ 362.922597][T14462] do_syscall_64+0xf3/0x1b0 [ 362.927101][T14462] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 362.932991][T14462] RIP: 0033:0x45ca69 [ 362.936887][T14462] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.956484][T14462] RSP: 002b:00007febda71dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.964898][T14462] RAX: ffffffffffffffda RBX: 00000000004ec100 RCX: 000000000045ca69 [ 362.972864][T14462] RDX: 0000000000000000 RSI: 00000000c0045007 RDI: 0000000000000003 [ 362.980829][T14462] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 362.988794][T14462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 362.996758][T14462] R13: 00000000000004ca R14: 00000000004c7c37 R15: 00007febda71e6d4 02:12:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\bx<', @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf250200000006000b000800000008000c0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x48000) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:12:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040), 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xda}, &(0x7f0000000300)=0x8) sendfile(r2, r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000240)={0x9d0000, 0x10000, 0x80000000, r4, 0x0, &(0x7f0000000200)={0x990a63, 0x1, [], @p_u16=&(0x7f0000000140)=0xc167}}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ff3aaad3b5580af4034332697dca39378373160f33fe7df4191ef429f0451d4e722e9ded5302f3062a0807961a45dc8f71", 0x31) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:56 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 363.049987][T14462] ERROR: Out of memory at tomoyo_realpath_from_path. 02:12:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:12:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200200, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)={0x2, 'x*'}, 0x3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 363.261144][ T2709] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 363.279353][ T27] audit: type=1804 audit(1591063977.073:119): pid=14491 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/147/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 363.391012][ T3835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 363.510962][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 363.631115][ T2709] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 363.639281][ T2709] usb 4-1: config 0 has an invalid interface number: 172 but max is 4 [ 363.658656][ T2709] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 363.668794][ T2709] usb 4-1: config 0 has no interface number 0 [ 363.676612][ T2709] usb 4-1: config 0 has no interface number 1 [ 363.691455][ T2709] usb 4-1: too many endpoints for config 0 interface 2 altsetting 16: 34, using maximum allowed: 30 [ 363.703543][ T2709] usb 4-1: config 0 interface 2 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 363.718312][ T2709] usb 4-1: too many endpoints for config 0 interface 172 altsetting 29: 124, using maximum allowed: 30 [ 363.730515][ T2709] usb 4-1: config 0 interface 172 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 124 [ 363.745708][ T2709] usb 4-1: config 0 interface 2 has no altsetting 0 [ 363.753713][ T2709] usb 4-1: config 0 interface 143 has no altsetting 0 [ 363.760497][ T2709] usb 4-1: config 0 interface 172 has no altsetting 0 [ 363.767857][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 363.777033][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.789073][ T2709] usb 4-1: config 0 descriptor?? [ 363.941041][ T3835] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.950211][ T3835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.959391][ T3835] usb 2-1: Product: syz [ 363.964343][ T3835] usb 2-1: Manufacturer: syz [ 363.968927][ T3835] usb 2-1: SerialNumber: syz [ 364.070996][ T2709] usb 4-1: string descriptor 0 read error: -71 [ 364.078423][ T2709] usb 4-1: selecting invalid altsetting 0 [ 364.098059][ T2709] usb 4-1: Could not set interface, error -22 [ 364.108522][ T2709] usb 4-1: USB disconnect, device number 116 [ 364.801007][ T3834] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 365.050993][ T3834] usb 4-1: Using ep0 maxpacket: 8 [ 365.170963][ T3834] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 365.179188][ T3834] usb 4-1: config 0 has an invalid interface number: 172 but max is 4 [ 365.187473][ T3834] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 365.196592][ T3834] usb 4-1: config 0 has no interface number 0 [ 365.202803][ T3834] usb 4-1: config 0 has no interface number 1 [ 365.208934][ T3834] usb 4-1: too many endpoints for config 0 interface 2 altsetting 16: 34, using maximum allowed: 30 [ 365.219894][ T3834] usb 4-1: config 0 interface 2 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 365.233123][ T3834] usb 4-1: too many endpoints for config 0 interface 172 altsetting 29: 124, using maximum allowed: 30 [ 365.244366][ T3834] usb 4-1: config 0 interface 172 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 124 [ 365.257848][ T3834] usb 4-1: config 0 interface 2 has no altsetting 0 [ 365.265176][ T3834] usb 4-1: config 0 interface 143 has no altsetting 0 [ 365.272937][ T3834] usb 4-1: config 0 interface 172 has no altsetting 0 [ 365.279795][ T3834] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 365.289927][ T3834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.300839][ T3834] usb 4-1: config 0 descriptor?? 02:12:59 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x3, 0xfffffc01, r2, 0x0, &(0x7f0000000080)={0x9b0942, 0x80, [], @ptr=0xfffffffffffffffe}}) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000100)={0x2, "0462ddb64a27682f72481f8e467f5e7c7a4b6597448bc5e436d150578f01ac71", 0x1}) 02:12:59 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:12:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:12:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in6=@private0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:12:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) [ 365.581038][ T3834] usb 4-1: string descriptor 0 read error: -71 [ 365.589407][ T3834] usb 4-1: selecting invalid altsetting 0 [ 365.619789][ T3834] usb 4-1: Could not set interface, error -22 02:12:59 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x2, 0x0) 02:12:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x24340, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 365.666064][ T3834] usb 4-1: USB disconnect, device number 117 [ 365.730278][ T27] audit: type=1804 audit(1591063979.523:120): pid=14538 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/148/cgroup.controllers" dev="sda1" ino=16371 res=1 02:12:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001380)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000001480)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff4823, 0x4, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000, 0x8}, {&(0x7f00000010c0)="3038f95ac648754910fe381c2fb777f2d49b593d0e130fd75f7ce8c302c333aa3637c2297dea67de41d0628ec63cf47e6dbb63c5dea748b0902da6b7db96148c0c7a1501e2d1a9b6a695dd69c6e97dd73e7ca1003152a5b126c1114c9a94e4a802c766bfe1addf07f905d6ad8b948d520f237a1e73089042241d0b232b1a197fb18777d71e24ca22a15a3fda780ac8f2cde9011add534090718f073a45f38cf6c8a67c454077d0fe1382950172de7d7751821eed9c0480", 0xb7, 0x2c8}, {&(0x7f0000001180)="c4a514e5817a7e0611986801f5523ea7957914ca9cbde39f121fadb2877dacdff08da9eb0c97e54366bd4d60a400a4609ff788c37eb8825aee936c8b4f538850b8aee20b0e9659eb89e50b0180a4f3f62006dee2089e74bd939ff07868ae86", 0x5f, 0xff}, {&(0x7f0000001200)="5f0ecaa3724cff17a1a09cbc57ef5864346f7e9fda393e638985997675c93ac5d99dfc502cbf161e915c08e7a38196783444198463746d19883980a20672c523f19544945de2156b8a147444d47abaa3aeed102ea2ce15385e45b24cd52ae9ed3fe8c80dc494afbd6621df697291542e2dc986a2394daf91014cf40f0497e790606df5ceb47777a805ba922a0c275553acfbe14fe21a91fcee7e2f6951ae7ceefc201601e7b881523089706164b8a5c87020678cf3760cb0c47156c2218ff5ec65a2423f8beb7508db383b60b8aaa4", 0xcf, 0x4}], 0x1880818, &(0x7f00000014c0)={[{@dots='dots'}, {@nodots='nodots'}, {@fat=@discard='discard'}], [{@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp\x00'}}, {@seclabel='seclabel'}, {@smackfsroot={'smackfsroot', 0x3d, '\xf2,vboxnet0mime_type'}}, {@audit='audit'}, {@fowner_lt={'fowner<', r2}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dsp\x00'}}, {@hash='hash'}, {@audit='audit'}]}) 02:12:59 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x10, 0x0) 02:12:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) [ 366.051005][ T3834] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 366.087454][ T2709] usb 2-1: USB disconnect, device number 2 02:13:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x22a000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x1, [], "058a6f76b81018773b9d452eeae28ce5"}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:00 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x227d, 0x0) [ 366.216574][ T27] audit: type=1804 audit(1591063980.013:121): pid=14575 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/149/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 366.311055][ T3834] usb 4-1: Using ep0 maxpacket: 8 [ 366.431198][ T3834] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 366.439381][ T3834] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 366.472289][ T3834] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 366.501118][ T3834] usb 4-1: config 0 has no interface number 0 [ 366.507192][ T3834] usb 4-1: config 0 has no interface number 1 [ 366.540972][ T3834] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 366.580654][ T3834] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 366.620980][ T3834] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 366.664373][ T3834] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 366.699643][ T3834] usb 4-1: config 0 interface 143 has no altsetting 0 [ 366.717019][ T3834] usb 4-1: config 0 interface 89 has no altsetting 0 [ 366.725839][ T3834] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 366.744846][ T3834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.762681][ T3834] usb 4-1: config 0 descriptor?? [ 367.041048][ T3834] usb 4-1: string descriptor 0 read error: -71 [ 367.061069][ T3834] usb 4-1: Could not set interface, error -71 [ 367.078145][ T3834] usb 4-1: USB disconnect, device number 118 [ 367.781044][ T17] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 368.021028][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 368.141191][ T17] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 368.149658][ T17] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 368.159137][ T17] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 368.168834][ T17] usb 4-1: config 0 has no interface number 0 [ 368.175599][ T17] usb 4-1: config 0 has no interface number 1 [ 368.182727][ T17] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 368.194235][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 368.208181][ T17] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 368.219882][ T17] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 368.233779][ T17] usb 4-1: config 0 interface 143 has no altsetting 0 [ 368.240524][ T17] usb 4-1: config 0 interface 89 has no altsetting 0 [ 368.248408][ T17] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 368.258186][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.268179][ T17] usb 4-1: config 0 descriptor?? 02:13:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:13:02 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x4b47, 0x0) 02:13:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x9, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = msgget(0x1, 0x500) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000180)=""/247) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000240)=""/123) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 02:13:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 02:13:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="01012cbd7000fedbdf2502000000080005000a01010108000500000000002600070073797374656d5f753a6f626a6563745f723a6b736d5f6465766963655f743a73300000001f00070073797374656d5f753a6f626a6563745f723a7661725f743a733000000a000500e000000214000200ff010000000000000000000000000001"], 0x88}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc1085}, 0x4000000) [ 368.541050][ T17] usb 4-1: string descriptor 0 read error: -71 02:13:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000000000091901419122f818eda9bdda24dcb78d0d717376fbb7493b115b6cf94f3d7ca641e538e0627ec436612272cd2e5d98c3db12f9b64219cbb9977e0006c0b805e3369be3aee78d7fee44ef03ba6a0985dc62b53e7e4603a25c8df311af5835d6bb073ea9a4d59a2ede3c542dad39cd7665eed6dd6a04379e038ec5b8bac3af345b8988a4aa93c4ed4ad3fdfa0c37eb2b134602caaae601663b9f33a86c7bd2d199113eab088430f8b89b5a6d12ff9092063f7db1c3b82f54029d4d877aace", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x8c, r9, 0x11, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crontab_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r10, @ANYBLOB="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"], 0x34}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES16=r6], 0x0) [ 368.601872][ T17] usb 4-1: Could not set interface, error -71 [ 368.650829][ T17] usb 4-1: USB disconnect, device number 119 02:13:02 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x4b6a, 0x0) 02:13:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000200)="14d6951f49a9d42e58475a4f45ec65a269629da3feb93a200e8f3c70c76fd2d4872c69fbc9493f17bcb11529ffcd28390482b0d5d01939ee3fb07837e366d5a669601a1f012fecb78f0da9acfd81c75f56d4d6aa953aa954aa75e22e3b732251435458f3f7b765beacd8d5302f3c5ea1e69be9cc3abb5f971b521e7e846f88078e5e95610fe0da4574cbe4e6f83995c406a81ed49d3b76f5647eecb6190bb82b0636f562ad0a8bfce89ce01f8cae1c021638853f93964fd760926b79cd9be9d948f022e8f8a53d5ae9dfaf8e003efb") ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045003, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000300)={0x7, 0x7b, 0x2}, 0x7) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x68, 0x280000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7813, 0x8ee6, 0x10001, 0x0, 0x5, 0x9, 0x7], 0x7, 0x80800, 0x0, r1}) [ 368.698204][T14635] device bridge9 entered promiscuous mode [ 368.710526][ T27] audit: type=1804 audit(1591063982.503:122): pid=14626 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/150/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 368.732258][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:13:02 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {}, 0x0, 0x1}, {}, {0x0, 0x0, {}, {}, 0x2}, {}, {}], 0xa0) [ 368.806951][T14635] device bridge10 entered promiscuous mode 02:13:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x440600, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:02 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x4c00, 0x0) 02:13:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0xfffffffffffffffd}, {}, {0x0, 0x1}, {0x0, 0x0, {0x0, 0x0, 0x3}}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) [ 369.207121][ T17] usb 4-1: new high-speed USB device number 120 using dummy_hcd 02:13:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:13:03 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x4c01, 0x0) 02:13:03 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {0x40000000}], 0xa0) 02:13:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\bx<', @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf250200000006000b000800000008000c0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x48000) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:03 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb010018000000000000000c000000ef16f57a0c000e00020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x70) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005cc0)=r6, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r10, @ANYBLOB="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"], 0x34}}, 0x0) sendmmsg$unix(r2, &(0x7f0000005d40)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0xffffff06, &(0x7f00000013c0)=[{&(0x7f0000000000)="8bc2608041da6b868c347b0c70478cb4640e6305821891667ebef8f693ecc3a5662f4508a1df964bd5397ed3ef26413dc4a7eb58c6d05202263d", 0x3a}, {&(0x7f0000000200)="328f7b75120dc885923cd47698001c85e6767855fae43231bb4a7eb70b5539a68b0adaf9cbf467ff44e82434e51bd59bfc76536801fc2979c19dbfda24e41dfa358deace429f5b043649d51822bc02f38c3f7ea4f9c538c7d65f1b546f7076d66bc4d08605c819382dfdb8db5638978140b273df710f02fa6d825ff665cc1949e9a645b0a45b2bf6ae86f6412e2504", 0x8f}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0xfd}], 0x4, &(0x7f0000001480)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}}], 0x38, 0x20000000}, {&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="fe8858c182819bc93327cf2f055c2404c4dc471306ade6f1776c377457ea96ada8a28c1272f3ae1fa75ad57f59ea841d81f7336a3599bbc9919363dd2e5de9fd38957b871d80295821988d6f62ed6f8c06f2bdb44bff0d9081e6bcad65379ed374b1725a9c6684627436390581fbdd22e6276cc99e7cb5ceac23d559a5bad5141c553ee38c62f6c35ce39b0c119c04beeb85b05462543495ffcd8bd3ada9d4f451c93d1e4e47415928dcf1e14a9fb9575a55dc2518716b832384e673153dde63e84e6d49ab44d8833a30be7c24c30ba8368874fa", 0xd4}, {&(0x7f0000002640)="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", 0x1000}], 0x3, &(0x7f0000003680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}], 0xd0, 0x4044}, {&(0x7f0000003ac0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000003b40)="c333f14f3d6be987", 0x8}, {&(0x7f0000003b80)="a3ce70107368cc4cf34c3a6ac22615831d60f07aa52ea529eb99ef0decc262f80ded88a36df699926af2f58c8ee665a16e9dc8f78fcb4ac630d32f457714faa33eec0a20a8ffc7b4375da1282c20a413adcdfab5bc5276b9622661cbe48e3af60c5682fef98c93ca8943446c0639c316a677f1fbe647359cbfadbb234dbdfb7e41de4f7f92e06159c800701a66439aeb58281a50b7a1b2ac05489cb9c0ce8dd1899cea3bd322be7b68b89cbb1122969df3a634f86dc2d7ab696992d2c0afe9083e5e12b6b44483effac0b175de9fc7e069af9a3347f9bfb5523e7ee793060479d627e468a125b05e436bc19596aef9de7a0224531eb4c951052487af8a66e3cb53bb012c9bf8b97804628548d1db0a46ac4822fa1eb94f06ce364759387f7086e1481311ee1b2174088c84a59c37eb4be6abfb5fdc11264ee09405ab95be4f4d0d6f0d81b9281ca34608ab67f27bce692b89a1f2733e013534c18688d8aafb56efa890c50fc30e60ee930a676f130d61cf542c8ddb4129a998d1217f43f2f99197c31d3e1a4512deef07aec4d82d1cc427aeed2f2f44b572aba696da060a6f507c50321f2287dea0ea15f0e9f1df6d72f710a5f5bb607cd55045f39d4a7e0059afa2d733b7382ed54c0b0d4aad7ebe654d761044ccd085146c03af9cafbbce029d18b3ee37e585d1f6fc3db75be45434474ad2592b785b2530b1d9ec5b066a1450e6ee3e09223fc6ed79dc69de09f8d3e687950076f4f2682f1219a745285543f61936b1a02764f444b428f9f4af2c475cd747cadf97e153fd8f8ec1d090fee68de587385d76efb5c7a5bfb3cbd151a32b5d731545ed196be1b2f233e6df0672379b99155a408bf5826e2c49afee2e18b7df2336f3b4ecf9f9dea0f629d10c1a4e57f79a8374d3939c8e5eb066a894672f60bbad0a640c42b11f4d26d8d2d05bb031ce952ff6f9eccf4dcfc2faab1e1c1d7706ee71994040c64ce1d5782cd579c8790f9f814f2b051894b2f9d70e95a6d1a19ebe7aedd5ee82082e5b08a9fc00449df6a2242d2a4e14dc1e16e049a6262bb7696a90ea928b1992b5fe86e9b5ded13285a57be9f4c4ddcc6dea0ef1a35dbb84de5c01e1cda9307f4c9c19c8113632f93d4a45f9e4ed28e188f7460d09bef3904d7eaa60dcb732c39cbcfff929026e403fe9ef8ff624bfbf252470c96f79e9b138a6ec26c8f4da4f55491aaf9da45f2c8a0e0efe651dce66fbc30ff125b3ba5a95b8ceaa46592bc9c764c81f751061cbf112521429f4857e833c2e151df3c64ab7d3abaac3b328a139f46fb5f6a1d73ce174d52708524b5d8740a2a73cfce4512442d4302c2dae56d5a86df6020dc4ae3c15b280f92fd4d0b351e9858da5cef507eae1aaf9c3d73a14f5ecd0a02c6aeedfb8038dccc5f631cc0688246d24ae31cc25e7da9fd6f4abb625214f9923775ed68bf16e8a7da10a7ca7ddf35badef77284006f8be450ad16ab8690f4b530093b8969530b61ab43ec9f91ad72d5fad423d091bcb0d50f0d87d37b2140fa7d7a67e85643032d3b4707bf8a0532d704c41996b624bb426d698ab812adadebf5fd7f042c82cedb56eb6b833521283842bf52d000200679530e70d40ec64341bccf10b36df339e8b0e54c2bc14f467d1e7a895d1a933682683134054cd2dfcabd84d82144a9a608b58e75505c6c05922ff4b522762ee93e9053d916d1fa81973977e677f825f25ae9cdb9f85969b0eb9ede8e530ca9e79f30d74c7dd23f5a0dbfcc58f8b5fb43e955135ea7a9e8038cf8c259bea1c0fd07ee44457a4d8597f1d567dc7fc1ce0c76f23c46eb1d03f6bb79a7d4d482432af50c983dff5d3b36d2427fe17a98f32fdd7dabcca41c6feb61cf49e5132836a1e3922e399d1a317d871fda3e562374519222d0eee5d81593b3b5e40110f6ff6bb4c65696f01e15631fea3d1e71555571092f34382ba73ce3899443e34f12396d61e34ba53d1fb6449b57d693f73fae7ee9076b9df544df62227ac1a6fb696bcead14eab10c1b53df7d51226928560a05827e6a938b01d3da6e55d11f46f3b138f3adaae316fb46365b84f89596025c80c61500001a05f455cd4ce2c363529c9b95177634067a50bab7084defa3745f392fe7291b1f5f340e96625b4993a35236866368b2a592f9422100b6e9a701125621bdb6c84f94c1455636f7abf9c2c490e76c5f96cdba7d24d3065d792ffc81e6183207dd4c97b60583b1a2fe8f85489f5d411eeb1b711662a200ad45655c0502f146aeee922f6103b86a3cac9cc3cd71b0ecde3330fac1b7cb29935cc027ef9735c56e2114df53d042076cb12ee0d139c1a635efbebc9be22382dfcd4c921d9b08b5cfeb46ea929c4f6f7ba735a3e0837de69f3f192695d9dfacd2b9fd3e6c98f9e42c9a3b115e3ae4317ac92f4d115c72ebf912a638bfcfc06bd4d53bc9b28c8fef193e1848238e791ae7c8a5c618d5d3c485d40ee04936129c6da621568c854c8a53a20545c0cdd92181aafa46aad1a1612b2e57f22efebc2b4a8c8e4d595aec14d8c90f01a89b7215b5d95fc5fa40e67596ddaa3a26688ece1d7f942fb52f7aa51657e0377b68c3a184a085c9e41126ef8e75bf7be1b3c5501a9ba48ad931e470afb684f374a35b745a6be736590ce1459c193c27c752e91046bc6e6ad04473fd33c95044f17d2172fe77df0352d493ddf36d7e40062612c1f8d74a2200bea76d62e9fc2e97fda17d67f2f58344013d36ef6d05785819bc19add1caaa0582a64ed575172eba498fc3adf3a0ec9a215f508b2cb840847e25115fec1e74be1a8bb72424c9d32c3954044f13f76537247fdb94565dde9cbed65faeef084434f1ed4f628b28de527ba0d433590f9d2539aa373b5fbd69153e2efb9aa9f1044c2d500c04b6303bcc8d448d3a81704f765d0886f7ffc44547f4206abb4bdbbc56b055e685a0d39e8fe3a5619180c230bb5a36f0e92cc230f2326111912824d5030408400aadd4e37a88162099be4ef6b15f955d2355598e4595a4125df16cf98c7abaa80ddbadfd7d1d99e0cc407f32fbb7a0d383f183cd79c4738efc2e6450f96b16abbb4ff5245599e7b5b0785c92b16e0fc6587e5b129149fe5eb2cd4efa964557dc15818c668c0083f8c64aa5982bc66f8482167fe8d6756323106e2b8083dff6cd719ffc0c10d68581c27eccffbe8fb0c196e2e155b54fbc33c19bb615004fda3fb6eb30f07adc1e51f6e492e8c7b2e87c7e7ba1bea82218839e30977c261f2dc6c166711b94097f99b4c9f70260bf19592eaaeeeffb9cf91962765b32dc063c21c51037e7d3c10f08335111f4922a84ebca84912cc492700317c2d75eb607d49a92ee6292fecb53f2bc9b6edfb6b475237e529ff3d236a360ad27fb98519d747e163256f219b7bb59ebbdc7574a72f04175a815c4660beba75050602452766cc72b7438ff363d66083f71f84872105aa5216abbe6e81aea0251550325c495debf8ced61dfb5fcbe58baaa0397f7778ae3f551a943c96520daa524a575dc9fb3935dd25b616607f8619aff717e6517adea2affeff23233987e591c90ddae65fd13ab9301895366bd2426c72efa164d76c99ccc53891a36f5cc23c18e986b7e01cdf1959a5c0837f5c6874f2d319d857fa8f389b6f589c91acf85d33ea52cec663d7de87e0b295f91482d69eb92574be1c07812fec496aa10bde73ba556e67f69e766f362e3a87576b36c175ffc98503f1ffa504787c12dc6feacbd9fbb0d06c079d9ae8e6c8126c3dde21d6771f55a247c6dea87aef63a1266a5c76a1e07905985f24946a5b80b6d7d2822812b8e997745e3eda52b21a75f07305456fb5c7a605542f65e366f0e3b83b0905bb48569e30204d66bb7756a0f0c5a17a38012b21f98bfa34f26615355ed1b1457a13d8d633794d1afc535e996e4800f507ad97bb3593a2024358c29f948f6b5bf423bae2c459206b592c351b57fe175b1b53f7e198c4b2922ef99ae2fbc06d959aa5edb0283d4617e70d17b5b1634a2dfa1018442f148ef95d7cc0f5add3e52c2ed34ddadfd105f4e335ae58362d3e37efbd2217b98aba9037990b50c17927a147d09defbe85308a21b15b10914e3f393861bb62700866b6beb8130b78bb893c0006a165fff24c89e89f97a3026544d404388218be99ca5c25b70054245c7c7bbfc489c8c240a83660b48281e85300f81473363241a245670a3f6859a0b929f340dafd1adeeb7e2ea306d026ed8abbc38ad5209e809346bd8856f20c3faba117eedf312f38540d567b5224d0aa63d8b48ba17aa448eabcdd0d602abe1c6667847c29b3420d4c3e6070c50762c4aadf9eb83e81a6da922f3e67b8f71aa6019f50db93cca521eedf47cec44ba78d4d0ac5f264a027e50663fd2d488c9dcf605a61134c8bf7e7de138d1d81b647da3f9cf20715321e1599021d8919a1809ba3a02dd953948fb18650f321da096812fd921028ffb1b9ced8dfd64aa430b8780541135310b9b5f1a9a3d60f5a4abf03d5ef748ececd053ddd792d3c7d99ab26d904fdfa78f69e1f40c9b6a68f590b329717d1ea27bb273e3177d770e80bedb8a9c900c199772731e6a7bee41c1bd8436c9325a3114604b879d464f6b5730e050f6133e2e07767655e3bc1adecf718769b2242f868e5c98f5de877b1fb09fca32d8ceb6c7439ee0387c50e8f28d51a3122abd73a44cfb8963cb122c761a9bf9dceaf9ae60edcb1c628f9ebb5bd59e8df487bd85206b4c5311b23d1aee4f9aa783e9385d8ca3ad4a0322160508be1fbe6cf55610fab07c08b89e157e6df204bd6469a9115c2f7f77836045c4abe34f97fb2febc80d0352d5364187eecbbbd042880922db615afd9f715efc7e4625ae11bc3323b246c54e8ca7fa20153d04ff793e9021e47dca9add743d25d63ead5d0d96410f3ba1d90b029dad00050b2df1a8559395ea288167aac6fbb9888ccf99c3bf7e301627cfce72f989d6676f8289494cda9932b447745f60502bc048e59767449e4656b64f836012fbb6078ad401c75f217e2078130a70a3894492b347df150a425a05ea3a77a9148efd04ef88176d35b15ecb2375fada3146b54299787964958913a6f07ad5d450ce68141a7c99894815f6ab78436ed193e729e24d3b4a40e51f31e26526f82bf5d0f2fc07b4afe614e54d28ac2ed150cc9e9521ced41e5f5b6e452d09668d289a7746b1542d9dbfa1e03d94f4d76561b32ace74338634a5233458591563d95e05a131d0f70ff2a4276254688af633bc7dd0dbf8209172a3730db0a337afbbf46d9615c76046a71737a92ea474fac423679cdf2db591af218186a625e5342e4528c46063db98572a27d0b36121b32ee90d36fadc1c1b82c6a83423862f94ab52370323e399d39804f7846dedd62031876cae562f0d1b972b48cc40209c2a86fd8810f05323721359b19a4e73ad5cad9613906d3ed69d1c5e36680b9fef83c1827777962099ca68ca6ab8c741be76f12bb80cd936e39c04034b7c358d29d4ec54a02b624992dcf57d19a3c60936041720a846c9f5796957b210c258e165a7b8452beebb1b3c5acdfb3a550ca61ad482efb82932a286e2ab92376f656df0412a8713e045bcc3de2dc89e6b81d50cb2bdec701bb63a9f16ce6f997d734f19070eec4a834f39fa354ee71d1c2f1cc2a7173f54a36ab1aabfdea23723613bb7c7cffa64ff8b9ae985e4272ab4520780e2d39fa42532a69989ba036d4b92fa26703fc6e33d5c27d10b94b156ca189140ba621f8f6cd95290f6e13e4", 0x1000}, {&(0x7f0000004b80)="fc", 0x1}, {&(0x7f0000004bc0)="f247ca3514d0ec3fcceeeb668b203c55de941998d22bd45d2d7e1b076337bdfa71fe9f7dcc15fd65928cfaacfe", 0x2d}, {&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000005c00)="da0048664663fb60432f524b4fba93b8f3b8492a830a81136ae7979f3444451bf39eed73be024c80f3c04771af209d4853d5e4fb30261e57040d5af226", 0x3d}], 0x6, &(0x7f0000005d00)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r7, r0, r0, r8]}}], 0x28, 0x4000000}], 0x3, 0x1) sendfile(r1, r2, 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 369.501082][ T17] usb 4-1: device descriptor read/64, error 18 [ 369.583649][T14692] device bridge7 entered promiscuous mode [ 369.821082][ T2479] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 369.891055][ T17] usb 4-1: device descriptor read/64, error 18 [ 370.161382][ T17] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 370.341137][ T2479] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.350257][ T2479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.359419][ T2479] usb 3-1: Product: syz [ 370.364711][ T2479] usb 3-1: Manufacturer: syz [ 370.369308][ T2479] usb 3-1: SerialNumber: syz [ 370.431050][ T17] usb 4-1: device descriptor read/64, error 18 [ 370.831045][ T17] usb 4-1: device descriptor read/64, error 18 [ 370.951869][ T17] usb usb4-port1: attempt power cycle 02:13:05 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x4c80, 0x0) 02:13:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x0, {}, {0x0, 0x1}, 0xff}, {0x0, 0x0, {0x0, 0x0, 0x1}}, {0x2, 0x2}, {0x0, 0x0, {}, {}, 0xfd}], 0xa0) 02:13:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x6) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) semctl$GETPID(r4, 0x0, 0xb, 0x0) 02:13:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0) [ 371.661167][ T17] usb 4-1: new high-speed USB device number 122 using dummy_hcd 02:13:05 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5000, 0x0) 02:13:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x2}}, {}, {}, {}, {}], 0xa0) [ 371.743427][T14717] device bridge11 entered promiscuous mode 02:13:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10b401, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:05 executing program 0: lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x8b, 0x1, 0x20, "aee7296729d36fd2e0fecaaecba41468", "dab19b64529263b23a9d1248edffc92579e50a73af4c88b5caba81a9afa33b2f465ccedf5cba3556d51ad5d4164b49b8091d44ab82448e04e6fff4468c07b48c97fc253f9548c2b37df6bd401589f8837b038c10d10aa3f3574f7774eb6a43c969f971a953b43fdce793b31f6adb8b4734ddcf995142"}, 0x8b, 0x3) recvfrom(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x2042, &(0x7f0000001340)=@rc={0x1f, @none, 0x5}, 0x80) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@dev, @in6=@empty}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="79bbd8148014991cf2be8e0d331c7d217edbe484d71b6bc6708b6fc9388c9502ae988fa1d1cfa0616fda730441a26eac5ed1d6c6a8f181bb269e2fed3e6e07b53dff44c928b4a4dd540ad2e50863f6ce7e281e7a8966ea2774cab8f507d2f178e5cfbc1d8b35037a55fa97a7e865e66ca9cd4abe363ebf503b7521c98406627251944fd1ca8868f5a3a7199dcb9c38d475470c30f0656960e5b221cc16511cc0a91a15721791407267493947fdfc1a06ab7a055b47548f9c7ced0f3c", 0xbc}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="1137eeedc4444f3dc091a59669839014d80ef7bdb4c8af42a3ee27e3832be0104b813ea1a62c9ec9da2dbb8a393c6206ab76b2c9d8bcdc8b46441278c73fd9260aac6b6dbfdb17329e6ff25e322f2a1458ce59ee557e664d300b6e6a14811b666874994bf7f6417d6784ddb4772771e8d8a364e2006ab047a3c19e9cfb", 0x7d}, {&(0x7f0000000180)="e2111d89a06fd2ef956181b0c00f6663d0bb41d402bad6f7f67e2e076a20fa0479a3d1ba1a2b9287fd9d44cf7ee7ee89233ae03696", 0x35}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000001c0)="62e7d1d493abf5237491c5d6b501aaacb8b0fefd77c2cb", 0x17}], 0x6, 0x4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 372.161250][ T17] usb 4-1: device not accepting address 122, error -71 02:13:06 executing program 2 (fault-call:7 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:06 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5001, 0x0) 02:13:06 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x1}, 0x0, 0x2}, {0x0, 0x2, {}, {}, 0xfe}, {}, {0x0, 0x0, {}, {}, 0x0, 0x2}, {0x0, 0x0, {}, {0x2}}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000000)) 02:13:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6gretap0\x00'}}, 0x1e) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045003, 0x0) [ 372.474008][ T8708] usb 3-1: USB disconnect, device number 2 02:13:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) semctl$GETPID(r4, 0x0, 0xb, 0x0) [ 372.541159][ T17] usb 4-1: new full-speed USB device number 123 using dummy_hcd 02:13:06 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000000)=r4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 372.650547][ T27] audit: type=1804 audit(1591063986.442:123): pid=14761 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/152/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 372.678768][T14761] FAULT_INJECTION: forcing a failure. [ 372.678768][T14761] name failslab, interval 1, probability 0, space 0, times 0 [ 372.709893][T14761] CPU: 1 PID: 14761 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 372.718225][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.728274][T14761] Call Trace: [ 372.731565][T14761] dump_stack+0x1e9/0x30e [ 372.735894][T14761] should_fail+0x433/0x5b0 [ 372.740308][T14761] ? alloc_pipe_info+0xe4/0x470 [ 372.745156][T14761] should_failslab+0x5/0x20 [ 372.749656][T14761] kmem_cache_alloc_trace+0x57/0x300 [ 372.754942][T14761] alloc_pipe_info+0xe4/0x470 [ 372.759681][T14761] splice_direct_to_actor+0x95b/0xb40 [ 372.765077][T14761] ? rcu_lock_release+0x9/0x20 [ 372.769908][T14761] ? do_splice_direct+0x340/0x340 [ 372.775055][T14761] ? fsnotify_perm+0x64/0x390 [ 372.779734][T14761] do_splice_direct+0x201/0x340 [ 372.784590][T14761] ? security_file_permission+0x40/0xc0 [ 372.790163][T14761] do_sendfile+0x809/0xfe0 [ 372.794619][T14761] __x64_sys_sendfile64+0x164/0x1a0 [ 372.799810][T14761] ? do_syscall_64+0x19/0x1b0 [ 372.804492][T14761] do_syscall_64+0xf3/0x1b0 [ 372.809024][T14761] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 372.814910][T14761] RIP: 0033:0x45ca69 [ 372.818823][T14761] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.838419][T14761] RSP: 002b:00007fb0c0d0ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 372.846825][T14761] RAX: ffffffffffffffda RBX: 00000000004fc580 RCX: 000000000045ca69 [ 372.854789][T14761] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 372.862757][T14761] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 372.870724][T14761] R10: 0000100100000000 R11: 0000000000000246 R12: 0000000000000006 [ 372.878693][T14761] R13: 00000000000008dc R14: 00000000004cba56 R15: 00007fb0c0d0b6d4 [ 372.901224][ T17] usb 4-1: device descriptor read/8, error -61 [ 373.171183][ T17] usb 4-1: device descriptor read/8, error -61 [ 373.292192][ T17] usb usb4-port1: unable to enumerate USB device 02:13:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa68a02, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:08 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5008, 0x0) 02:13:08 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/210) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {}, 0xff}, {}, {0x0, 0x0, {0x0, 0x0, 0x4}}, {}, {}], 0xa0) 02:13:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x80105014, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:08 executing program 2 (fault-call:7 fault-nth:1): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x4, 0x4a0, [0x20000340, 0x0, 0x0, 0x20000370, 0x200005f4], 0x0, &(0x7f0000000040), &(0x7f0000000340)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x52, 0x6007, 'erspan0\x00', 'batadv_slave_1\x00', 'ipvlan0\x00', 'netdevsim0\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff], @random="a6ee1ba49500", [0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x8, {0x3}}}}}, {0x9, 0x0, 0x1a, 'macvlan0\x00', 'veth1_to_bond\x00', 'veth1_virt_wifi\x00', 'veth0_to_team\x00', @random="3fe47f6f9ba6", [0xff, 0x0, 0x0, 0xff], @dev={[], 0x29}, [0xff, 0xff, 0x0, 0x0, 0xff], 0x126, 0x15e, 0x196, [@limit={{'limit\x00', 0x0, 0x20}, {{0x401, 0xbb, 0x5, 0x8, 0x4}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'sit0\x00', {}, 'xfrm0\x00', {0xff}, 0x4}}}], [@common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x1, 0x8906, 'geneve1\x00', 'bond_slave_1\x00', 'ip6gre0\x00', 'veth1_to_bridge\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @link_local, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xae, 0xae, 0xe6, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0xd836, 0x1f, 0xb3, {0x9}}}}], [], @arpreply={'arpreply\x00', 0x10, {{@random="f082ed9b7b6f", 0xffffffffffffffff}}}}, {0x5, 0x20, 0x6006, 'gretap0\x00', 'team_slave_0\x00', 'veth0_macvtap\x00', 'macvlan0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xd6, [], [@snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x518) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000140)=[{{}, 0x12, 0xfbff}, {{r4, r5/1000+60000}, 0x1f, 0xb6, 0xffff}], 0x30) 02:13:08 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x500e, 0x0) 02:13:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 02:13:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000100)={0x7, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 374.856956][ T27] audit: type=1804 audit(1591063988.652:124): pid=14786 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/153/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 374.894928][T14786] FAULT_INJECTION: forcing a failure. [ 374.894928][T14786] name failslab, interval 1, probability 0, space 0, times 0 [ 374.932094][T14786] CPU: 0 PID: 14786 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 374.940420][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.950480][T14786] Call Trace: [ 374.953776][T14786] dump_stack+0x1e9/0x30e [ 374.958109][T14786] should_fail+0x433/0x5b0 [ 374.962533][T14786] ? kcalloc+0x32/0x60 [ 374.966600][T14786] should_failslab+0x5/0x20 [ 374.971100][T14786] __kmalloc+0x74/0x330 [ 374.975253][T14786] ? kmem_cache_alloc_trace+0x24c/0x300 02:13:08 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5015, 0x0) [ 374.980798][T14786] kcalloc+0x32/0x60 [ 374.984690][T14786] alloc_pipe_info+0x1fc/0x470 [ 374.989461][T14786] splice_direct_to_actor+0x95b/0xb40 [ 374.994854][T14786] ? rcu_lock_release+0x9/0x20 [ 374.999643][T14786] ? do_splice_direct+0x340/0x340 [ 375.004670][T14786] ? fsnotify_perm+0x64/0x390 [ 375.009353][T14786] do_splice_direct+0x201/0x340 [ 375.014297][T14786] ? security_file_permission+0x40/0xc0 [ 375.019853][T14786] do_sendfile+0x809/0xfe0 [ 375.024391][T14786] __x64_sys_sendfile64+0x164/0x1a0 [ 375.029589][T14786] ? do_syscall_64+0x19/0x1b0 [ 375.034270][T14786] do_syscall_64+0xf3/0x1b0 [ 375.038778][T14786] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 375.044676][T14786] RIP: 0033:0x45ca69 [ 375.048563][T14786] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.068164][T14786] RSP: 002b:00007fb0c0d0ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:13:08 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5016, 0x0) [ 375.076589][T14786] RAX: ffffffffffffffda RBX: 00000000004fc580 RCX: 000000000045ca69 [ 375.084551][T14786] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 375.092518][T14786] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 375.100486][T14786] R10: 0000100100000000 R11: 0000000000000246 R12: 0000000000000006 [ 375.108455][T14786] R13: 00000000000008dc R14: 00000000004cba56 R15: 00007fb0c0d0b6d4 02:13:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {}, 0x2}, {}, {}, {}, {0x0, 0x0, {}, {0x7d13ac1fe98eb6b0}}], 0xa0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000080)=0x2) 02:13:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) syz_open_pts(r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x410040) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x4, 0x4, 0x5}}, 0x14) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@random="f19edf18765a"]}) 02:13:09 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x541b, 0x0) [ 375.271346][ T3836] usb 4-1: new high-speed USB device number 124 using dummy_hcd 02:13:09 executing program 2 (fault-call:7 fault-nth:2): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 375.541131][ T3836] usb 4-1: device descriptor read/64, error 18 [ 375.593062][ T27] audit: type=1804 audit(1591063989.392:125): pid=14832 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/154/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 375.595884][T14832] FAULT_INJECTION: forcing a failure. [ 375.595884][T14832] name failslab, interval 1, probability 0, space 0, times 0 [ 375.630324][T14832] CPU: 0 PID: 14832 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 375.638694][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.648729][T14832] Call Trace: [ 375.652017][T14832] dump_stack+0x1e9/0x30e [ 375.656359][T14832] should_fail+0x433/0x5b0 [ 375.662074][T14832] ? iomap_dio_rw+0x1dc/0xf20 [ 375.666759][T14832] should_failslab+0x5/0x20 [ 375.671260][T14832] kmem_cache_alloc_trace+0x57/0x300 [ 375.676530][T14832] ? do_splice_direct+0x201/0x340 [ 375.681541][T14832] iomap_dio_rw+0x1dc/0xf20 [ 375.686069][T14832] ? lock_acquire+0x169/0x480 [ 375.690818][T14832] ? ext4_file_read_iter+0x267/0x6e0 [ 375.696141][T14832] ? __down_read+0x152/0x360 [ 375.700701][T14832] ? ext4_inode_journal_mode+0x185/0x460 [ 375.706309][T14832] ext4_file_read_iter+0x54e/0x6e0 [ 375.711409][T14832] generic_file_splice_read+0x452/0x700 [ 375.716980][T14832] ? splice_shrink_spd+0xb0/0xb0 [ 375.721903][T14832] splice_direct_to_actor+0x3c1/0xb40 [ 375.727437][T14832] ? do_splice_direct+0x340/0x340 [ 375.732453][T14832] do_splice_direct+0x201/0x340 [ 375.737303][T14832] ? security_file_permission+0x40/0xc0 [ 375.742851][T14832] do_sendfile+0x809/0xfe0 [ 375.747259][T14832] __x64_sys_sendfile64+0x164/0x1a0 [ 375.752441][T14832] ? do_syscall_64+0x19/0x1b0 [ 375.757102][T14832] do_syscall_64+0xf3/0x1b0 [ 375.761608][T14832] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 375.767481][T14832] RIP: 0033:0x45ca69 [ 375.771354][T14832] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.790946][T14832] RSP: 002b:00007fb0c0d0ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 375.799328][T14832] RAX: ffffffffffffffda RBX: 00000000004fc580 RCX: 000000000045ca69 [ 375.807292][T14832] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 375.815243][T14832] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 375.823195][T14832] R10: 0000100100000000 R11: 0000000000000246 R12: 0000000000000006 [ 375.831167][T14832] R13: 00000000000008dc R14: 00000000004cba56 R15: 00007fb0c0d0b6d4 [ 376.131251][ T3836] usb 4-1: device descriptor read/64, error 18 [ 376.401131][ T3836] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 376.681196][ T3836] usb 4-1: device descriptor read/64, error 18 [ 377.071148][ T3836] usb 4-1: device descriptor read/64, error 18 [ 377.191227][ T3836] usb usb4-port1: attempt power cycle 02:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x148002) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000500000000010200000000006734e9dc6d23c6d1682f19e743676498ede94fa6aee1afcc6df9c2ad3df4a5263f3d2063e9febdf349845bbff2cbce0a7716f0959b4ba5dfb397dbb23c212738ff88ede518db0988a14eaeb695474f2872c7ef29ac07dc59c8f6cedfdd4d548c637d377eeb25195862db6c1f7f5429272c65b0455bff5ecc9917f7a317c5d148de68f0b328a73ee512b3f3b68dc0c8daedd5b6bfdba4a5f1828b479546"], 0x12) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r2, &(0x7f0000000080)=0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000140)={'macvtap0\x00', 0x7fffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r6}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB='a'], 0x12) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x7, 0xc00}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x200, 0x3, 0x3f, r3}, 0x10) 02:13:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe2aaef0bfefe4359, &(0x7f00000000c0)=0x47d, 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x9}) 02:13:11 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x5, 0x6, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:11 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5421, 0x0) 02:13:11 executing program 2 (fault-call:7 fault-nth:3): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:11 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12fe5bd9290100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf56f9d4f06c2d758bc2203b6c904ae1e6666b0f2a4776bde38d71acbfef5ddbbba"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e21, 0x5, @empty, 0xffffffff}, @in6={0xa, 0x4e22, 0x3f, @private1={0xfc, 0x1, [], 0x1}, 0x7}, @in={0x2, 0x4e22, @multicast1}], 0x58) 02:13:11 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5423, 0x0) 02:13:11 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) semctl$GETPID(0x0, 0x0, 0xb, 0x0) [ 377.927384][ T27] audit: type=1804 audit(1591063991.722:126): pid=14849 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/155/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 377.930146][T14849] FAULT_INJECTION: forcing a failure. [ 377.930146][T14849] name failslab, interval 1, probability 0, space 0, times 0 02:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r3}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r3, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e24, 0x8, @empty}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r4, 0x92}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 378.085693][T14849] CPU: 1 PID: 14849 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 378.094039][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.104086][T14849] Call Trace: [ 378.107374][T14849] dump_stack+0x1e9/0x30e [ 378.111705][T14849] should_fail+0x433/0x5b0 [ 378.116189][T14849] ? ext4_init_io_end+0x25/0x130 [ 378.121127][T14849] should_failslab+0x5/0x20 [ 378.125627][T14849] kmem_cache_alloc+0x53/0x2d0 [ 378.130409][T14849] ext4_init_io_end+0x25/0x130 [ 378.135172][T14849] ext4_writepages+0x9d4/0x3590 [ 378.140040][T14849] ? __lock_acquire+0x116c/0x2c30 [ 378.145073][T14849] ? splice_direct_to_actor+0x3c1/0xb40 [ 378.150613][T14849] ? do_sendfile+0x809/0xfe0 [ 378.155215][T14849] ? __x64_sys_sendfile64+0x164/0x1a0 [ 378.160605][T14849] ? do_syscall_64+0xf3/0x1b0 [ 378.165294][T14849] ? ext4_readpage+0x190/0x190 [ 378.170108][T14849] do_writepages+0xda/0x1f0 [ 378.174654][T14849] __filemap_fdatawrite_range+0x2a5/0x350 [ 378.180384][T14849] filemap_write_and_wait_range+0xca/0x160 [ 378.186187][T14849] iomap_dio_rw+0x606/0xf20 [ 378.190713][T14849] ? __down_read+0x152/0x360 [ 378.195300][T14849] ? ext4_inode_journal_mode+0x185/0x460 [ 378.200961][T14849] ext4_file_read_iter+0x54e/0x6e0 [ 378.206097][T14849] generic_file_splice_read+0x452/0x700 [ 378.211653][T14849] ? splice_shrink_spd+0xb0/0xb0 [ 378.216586][T14849] splice_direct_to_actor+0x3c1/0xb40 [ 378.221964][T14849] ? do_splice_direct+0x340/0x340 [ 378.227014][T14849] do_splice_direct+0x201/0x340 02:13:12 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xffffffffffffff4d) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000380)=0x10001, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000400)={0x101, 0x7, 0x5, 0xf25, 0x13, "b04c249369c0ad6dfcf60394b0d9ca8a8da44b"}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x8000, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1}, 0x0) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000440)={0x2e}) accept$unix(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) [ 378.232136][T14849] ? security_file_permission+0x40/0xc0 [ 378.237698][T14849] do_sendfile+0x809/0xfe0 [ 378.242130][T14849] __x64_sys_sendfile64+0x164/0x1a0 [ 378.247324][T14849] ? do_syscall_64+0x19/0x1b0 [ 378.252262][T14849] do_syscall_64+0xf3/0x1b0 [ 378.256763][T14849] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 378.262651][T14849] RIP: 0033:0x45ca69 [ 378.266537][T14849] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.286143][T14849] RSP: 002b:00007fb0c0d0ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 378.294544][T14849] RAX: ffffffffffffffda RBX: 00000000004fc580 RCX: 000000000045ca69 [ 378.302535][T14849] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 378.310507][T14849] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 378.318472][T14849] R10: 0000100100000000 R11: 0000000000000246 R12: 0000000000000006 [ 378.326440][T14849] R13: 00000000000008dc R14: 00000000004cba56 R15: 00007fb0c0d0b6d4 02:13:12 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5450, 0x0) 02:13:12 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x74003, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x9c9, &(0x7f0000000040)="60618a07f119d922afdb009a1ab478e3014a610374493216a7df730444034647c0a62b7dbf2c", &(0x7f0000000080)="6a31917ea59736d6eed61b0e8efc239e5e1f4825b128f187227f1ddf604c34ac15567416dc8592125a787ca9d9df7dfa7e787ff5f07c271e3101f22038f954f3e2903292318bc4f722dfb355659d1d328d72d43af941608a313b5262e190b5f0551d4f738f6ecc2b3cde11af5c118ed03823e076343aff99ef3abc38d6d41ca3ad51fa209dbb51163d47e12c5fbff4e9a644f4c3f635ae92327552b638e7c0ee5a581c6b0a59cd0abb21d5aab130231ebddf03360205", 0x26, 0xb6}) [ 378.341268][ T3836] usb 4-1: new high-speed USB device number 126 using dummy_hcd 02:13:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = dup(r4) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)={0x1, 0x10000, [{0xae5, 0x0, 0x4}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r6, 0x0, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:12 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5451, 0x0) 02:13:12 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x7e8, 0x2, 0x4, 0x10000, 0xcf1, {r2, r3/1000+10000}, {0x3, 0x8, 0xff, 0x92, 0x68, 0x1, "767d64b5"}, 0x200, 0x2, @planes=&(0x7f0000000100)={0x1fe00000, 0x1, @userptr=0x2, 0x3ff}, 0x5, 0x0, 0xffffffffffffffff}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {}, 0xff}, {0x0, 0x0, {}, {0x2}}, {}, {}, {}], 0xa0) [ 378.531483][ T3836] usb 4-1: device descriptor read/8, error -61 02:13:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 378.801413][ T3836] usb 4-1: device descriptor read/8, error -61 [ 378.892093][ T27] audit: type=1804 audit(1591063992.692:127): pid=14896 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/156/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 379.071249][ T3836] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 379.241896][ T3836] usb 4-1: device descriptor read/8, error -61 [ 379.511291][ T3836] usb 4-1: device descriptor read/8, error -61 [ 379.631436][ T3836] usb usb4-port1: unable to enumerate USB device 02:13:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0xfffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02bea978eb0009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:13:14 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5452, 0x0) 02:13:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x14002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$nfc_llcp(r1, 0x0, &(0x7f0000000000), 0x80000) 02:13:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) 02:13:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:14 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5460, 0x0) [ 380.985292][ T27] audit: type=1804 audit(1591063994.782:128): pid=14912 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/157/cgroup.controllers" dev="sda1" ino=16372 res=1 02:13:14 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, @default, @bpq0='bpq0\x00', 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000100)=0x28) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x440a00) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x480500) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045003, 0x0) 02:13:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x54a2, 0x0) 02:13:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) [ 381.291229][ T17] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 381.561246][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 381.691312][ T17] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 381.699506][ T17] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 381.709352][ T17] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 381.719001][ T17] usb 4-1: config 0 has no interface number 0 [ 381.726140][ T17] usb 4-1: config 0 has no interface number 1 [ 381.733138][ T17] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 381.744595][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 381.758276][ T17] usb 4-1: too many endpoints for config 0 interface 143 altsetting 2: 190, using maximum allowed: 30 [ 381.770241][ T17] usb 4-1: config 0 interface 143 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 190 [ 381.784199][ T17] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 381.796203][ T17] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 381.810183][ T17] usb 4-1: config 0 interface 143 has no altsetting 0 [ 381.817809][ T17] usb 4-1: config 0 interface 89 has no altsetting 0 [ 381.825283][ T17] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 381.835209][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.847892][ T17] usb 4-1: config 0 descriptor?? [ 382.131239][ T17] usb 4-1: string descriptor 0 read error: -71 [ 382.151474][ T17] usb 4-1: Could not set interface, error -71 [ 382.164848][ T17] usb 4-1: USB disconnect, device number 2 [ 382.871200][ T3836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 383.131233][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 383.251355][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 383.259559][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 383.268947][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 383.278553][ T3836] usb 4-1: config 0 has no interface number 0 [ 383.285548][ T3836] usb 4-1: config 0 has no interface number 1 [ 383.292317][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 383.304620][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 383.318254][ T3836] usb 4-1: too many endpoints for config 0 interface 143 altsetting 2: 190, using maximum allowed: 30 [ 383.330208][ T3836] usb 4-1: config 0 interface 143 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 190 [ 383.343558][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 383.354703][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 383.367967][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 383.374798][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 383.381579][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 383.390601][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.401358][ T3836] usb 4-1: config 0 descriptor?? 02:13:17 executing program 0: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045003, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) 02:13:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000000)) 02:13:17 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x6364, 0x0) 02:13:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="060c020920e97711ad6dc473d5892fac0706f7aca3c4d74501a0bb2d265deda687529ae869b68860aa975848c984d905e4e5e7248bd648"], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vlan0\x00', r9}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="049a8e96e79526f538e9313116ccc32630387d33c07cd11995bad717ed7cac5cb68a0b283643571c684af31598d0fc40e6ca90069bc1a5a205778d0e82b4389637b814ed56fcd1e1013493ecbf388d08c567dd3293c5e06c338791d488c0a49dadc522fe77532e8fb429528eb0309096b5367c30f3909997a6470d334e788d234478e54a6fe6109172a07d74fb50785247181ad901c34dc0d6256e15797be3caff8711767a07001929f7f89a324b63a8b0b4c5baa1e38a1cbbf6ae84f60d3c6e11"], 0x0) [ 383.688325][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 383.711324][ T3836] usb 4-1: Could not set interface, error -71 02:13:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x6611, 0x0) [ 383.745703][ T3836] usb 4-1: USB disconnect, device number 3 02:13:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {0x0, 0x0, 0x4}}, {0x0, 0x2000000000000}, {}, {}, {}, {0x3, 0x3, {}, {0x0, 0xff}, 0xfe}, {0x3, 0x0, {}, {0x2, 0xff, 0x2}, 0x1, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x1}, {0x1, 0x1, 0x3}, 0xff, 0x2}, {0x1, 0x1, {0x1, 0x1, 0x1}, {0x2, 0x1, 0x3}, 0xfe, 0xfd}], 0x120) 02:13:17 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x717f8a9eb073e761, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 383.819999][T14986] device bridge12 entered promiscuous mode [ 383.846373][ T27] audit: type=1804 audit(1591063997.642:129): pid=14993 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/158/cgroup.controllers" dev="sda1" ino=15970 res=1 02:13:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8910, 0x0) [ 383.897492][T15000] bridge12: port 1(bridge_slave_0) entered blocking state [ 383.908754][T15000] bridge12: port 1(bridge_slave_0) entered disabled state 02:13:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xd16d34d95caa6a9, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:17 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:17 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x0, 0x0, 0x1}}, {0xfffffffffffffffd, 0x0, {}, {0x1, 0x1, 0x4}}, {}, {0x0, 0x0, {0x2}, {}, 0x0, 0xfe}, {0x3, 0x0, {}, {0x0, 0x0, 0x3}}], 0xa0) [ 383.956895][T15000] device bridge_slave_0 entered promiscuous mode [ 383.973515][T15000] bridge12: port 1(bridge_slave_0) entered blocking state [ 383.980699][T15000] bridge12: port 1(bridge_slave_0) entered forwarding state 02:13:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8912, 0x0) [ 384.044657][T14986] device bridge13 entered promiscuous mode 02:13:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 384.371185][ T3836] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 384.417179][ T27] audit: type=1804 audit(1591063998.212:130): pid=15036 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/159/cgroup.controllers" dev="sda1" ino=15777 res=1 [ 384.641259][ T3836] usb 4-1: device descriptor read/64, error 18 [ 385.031283][ T3836] usb 4-1: device descriptor read/64, error 18 [ 385.301222][ T3836] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 385.571348][ T3836] usb 4-1: device descriptor read/64, error 18 [ 385.961254][ T3836] usb 4-1: device descriptor read/64, error 18 [ 386.082085][ T3836] usb usb4-port1: attempt power cycle 02:13:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x20, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:13:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x15, 0xa, 0x800000) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="34009dbdbbf414f4f44200000000000000000000f5928ca75f453eaae5c3c62dacaab0d6310f0b8eec8bb181", @ANYRES32=r11, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="b58d8fc2e56a3f5cc0677ef435388df6abc44f7c8a0b19c897381265bf210ebd53c4355fd44d2423eabb2827e74b71865c0bff23b956b7a885dd1c071ea14b", 0x3f}, {&(0x7f00000000c0)="88fc3b74", 0x4}, {&(0x7f0000000100)="b9c71d1245d345d12100c333cd26ce96e5964c376eee604929c3300e20b2eb4339e6e50a72cb03ef1ab780a29055edba387f55ce538bb5043be77e919bf9cc877eb75c9fd8057ef15442bdd428d1a1c4abc85591642f25ca9d96f57e7e5a2cf68d0f8cebe960b672f88b50bfefc70751b9c2ca26b97af761c4b63fe69d246789d1ec99e58b2cf68be6cbeaf73ee5fb055a3145ae74dbaeb8c5", 0x46}, {&(0x7f00000001c0)='\bE', 0x2}], 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000000000001000000ff0000000000000038000000000000000000000007000000821055480ff2ea64ab4183ade1c981b09404000000890f71ac141403ac1414aaffffffff940401001100000000000000000000000100000007000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac1414aaac1414aa000000001400000000000000000000000200000004000000000000001400000000000000000000000200000000010000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYRES32=r11, @ANYBLOB="640101010a01010120000000"], 0xf0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="1867f6b39bb747d9469dc5f2a7ff54b74bffe5a37e86732b9af82e86921e3100b1c3ee37e697dc05be8ba5b5f96cbb21d3611b1b632a08e5aa3c16a3ff49be9d8d06ada68da2d94d9ee3cddfcf0fc8ee05eb8e2d32e1403e", 0x58}, {&(0x7f00000003c0)="7b9e7b4bea6d865d2e7815d2007be6d2d4ec0d7adc34d50f53864d5bc789c3b3c193ad18e9c96c52362a224aa7e9fc739a6ae6dfdd2f99fb81a510927e4e5a39918217b78ec8a0db5d33a69992276f1daaea3dd0b800b2d5b9e4e59f153109d94b26ed5c189a420cc0600fb860a150bdbb8850f48214023b700fc0a5a148d2f50ad872cbebfa8872180cc1df1fdfaf3728279fe7b9db448dedd68156b2cec38ffbb4a783b1703c", 0xa7}, {&(0x7f0000000480)="29df674df20570a651b456650c37364a92910227f6a2961a", 0x18}, {&(0x7f00000004c0)="b476dc74", 0x4}, {&(0x7f0000000500)="fb0d0af531a022b4d42b582951ab50a3050a995acf385f1954b02fc8b8b7f15886a2829eaf04e64ffd0503a5fa5b651766ebc8915776c06f3ad1e528fb66f44502bc95d6bd46668dd065e6f26bb038170920f980a94e504bc96aeb3748584e971e62bf67ad9862656f99ea9ab77e2b05f9155e831ce0e3a7aaac5769b18c44310c8b44da6bdaa1c5c8d8e288f32d05bb9ae88ed7ca5a03f901ab68b7492bb724a861b16b20605e4252ff1191195a98baabe3b7cfb6124225223334ff5d8405c40a21e0d7a0291a8742fc00327e5d6166b741", 0xd2}, {&(0x7f0000000600)="612c1d383e2570eeaabae7371c9df9f23d40bc45ce4f", 0x16}, {&(0x7f0000000640)="ef05276498c4ca42e3ab4991b5e3181aaa4e23553c0901339af57d13ade87ac38f84567640de61b6eb0e6f82fb7d399c22a8da3ffd3fb7fbb17818c90dc0ac5f9be349d6dafe01791b3e6764fcb740b1a23e5d03b0ba3956cb77ba39b788a681da20e0faeb1c69db78663e94531ed8028d3dd695c5af791509721f2a86069a726133425a786267f657fff276469128595879a4dde23d522ba9d2ad953a849b92cd831e5232bf78e6268b324f35100108ff053680ba63c3d7d4e02ed7babb3e97867eae6c1473ffce79470bbf5248bc3ca43fa4a757523a9cf11f54bc2fb6a46e", 0xe0}], 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000110000000000000000000001010000000300000000000000c000000000000000000000000700000044142623ac1e01010000000664010100ffffffff86240000000305114a47e273ff85f00585c6f53ca2af63050de9b310e854baf2d4779dce01071b84e0000001ac1e0101ac1e010164010102e0000001e0000001861200000001070c97bda4c929a692486ff089235c7f000001ac1e00010a010100ac1414aa00000000e0000001640101010a0101000713400a010101e0000002ac14143300040000000fc6e0000001e0000001ffffffff94040000003c0000000000000000000000070000008913a3ac1e0101ac1414bb7f0000017f00000144100a90000030940000000400000003940401009404000000000000009f9e5a6f14beb0c2faa2828daeb902ad5cf18fcccec21527a7907f8a561c5a1b65b8c4b0b9ca2bd092cc7e45b38a44371aa34e78f59eebde7a79bb8742c8d120a87675c070005ad03cb86361265f278783631e60e57c37407d9fdceff231062fc073116cbe764217b7ad7386aff9b7426dd48a70161295"], 0x130}}], 0x2, 0x8000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8914, 0x0) 02:13:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x1, 0x0, {}, {0x0, 0xf0}}, {0x0, 0x0, {}, {0x0, 0xf0}}, {0x0, 0x0, {}, {}, 0xff}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7fffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000280)={@loopback}, &(0x7f00000002c0)=0x14) ioctl$TIOCCONS(r4, 0x541d) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x9, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x24}}, 0x0) 02:13:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 386.791321][ T3836] usb 4-1: new high-speed USB device number 6 using dummy_hcd 02:13:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8916, 0x0) [ 386.884139][T15060] device bridge8 entered promiscuous mode [ 386.912005][ T27] audit: type=1804 audit(1591064000.712:131): pid=15065 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/160/cgroup.controllers" dev="sda1" ino=16194 res=1 [ 386.925262][T15067] device bridge_slave_0 left promiscuous mode 02:13:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8933, 0x0) [ 386.975728][T15067] bridge4: port 1(bridge_slave_0) entered disabled state 02:13:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x410400, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 387.295298][ T3836] usb 4-1: device not accepting address 6, error -71 [ 387.671349][ T3836] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 387.773434][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 387.894244][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 387.902521][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 387.910706][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 387.921496][ T3836] usb 4-1: config 0 has no interface number 0 [ 387.927776][ T3836] usb 4-1: config 0 has no interface number 1 [ 387.935719][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 387.947195][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 387.961032][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 387.973089][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 387.987029][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 387.994711][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 388.002188][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 388.012038][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.026506][ T3836] usb 4-1: config 0 descriptor?? [ 388.311333][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 388.331357][ T3836] usb 4-1: Could not set interface, error -71 [ 388.340613][ T3836] usb 4-1: USB disconnect, device number 7 [ 389.051356][ T3835] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 389.291289][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 389.411413][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 389.419577][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 389.429473][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 389.439119][ T3835] usb 4-1: config 0 has no interface number 0 [ 389.445830][ T3835] usb 4-1: config 0 has no interface number 1 [ 389.452872][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 389.464290][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 389.478000][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 389.489671][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 389.503692][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 389.510453][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 389.518468][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 389.528474][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.539883][ T3835] usb 4-1: config 0 descriptor?? 02:13:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = accept4$ax25(r0, &(0x7f0000000240)={{0x3, @netrom}, [@null, @default, @netrom, @rose, @bcast, @remote, @netrom, @rose]}, &(0x7f00000000c0)=0x48, 0x80800) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x8) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201e82ca26760d37900000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f020000ed000009045915806ac04106000000c3a792bd62697bd0828ce4ab0ba82ef00d060078faf558"], 0x0) 02:13:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x89ec, 0x0) 02:13:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x400, 0xfff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010007000000000002000000", @ANYRES32, @ANYBLOB="0200", @ANYBLOB, @ANYRES32, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r1, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="0088", @ANYRES32, @ANYRESDEC=r1], 0x14, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$rds(0x15, 0x5, 0x0) r7 = dup2(r6, 0xffffffffffffffff) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r7, &(0x7f00000002c0)='./file0\x00', 0x400, 0xfff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010007000000000002000000", @ANYRES32=r9, @ANYBLOB="0200", @ANYBLOB, @ANYRES32=r10, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="0088", @ANYRES32, @ANYBLOB="10000400000000002000030000000000"], 0x14, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000200)={0x408, 0x0, 0x5, [{{0x4, 0x2, 0x20, 0x3, 0x14d, 0x4, {0x1, 0x4, 0x2703, 0x2, 0x1, 0x7, 0x9, 0x6, 0x7, 0xf642, 0x5, 0x0, 0x0, 0x800000, 0x1}}, {0x5, 0x7, 0x8, 0x7, '^trusted'}}, {{0x5, 0x3, 0xff, 0x3, 0xa2a9, 0xfff, {0x5, 0xffffffff, 0x9, 0x10001, 0x3, 0xdf4, 0x2, 0x6, 0x6, 0xd7db, 0x6, 0xee00, 0x0, 0x8}}, {0x6, 0x9, 0xd, 0x0, '.selflo,^em1,'}}, {{0x4, 0x2, 0xca93, 0x800, 0x9, 0xffffffff, {0x6, 0x3, 0x4, 0x0, 0x2, 0x170f, 0x0, 0x1, 0x4, 0x0, 0x5, 0x0, 0x0, 0x8001, 0xf312}}, {0x3, 0x3, 0x1a, 0x8, 'eth1keyringvboxnet1.:%\'lo('}}, {{0x100000000, 0x3, 0x8, 0xe30, 0x80000001, 0x6, {0x6, 0x8000, 0x0, 0xa00, 0x6, 0x3, 0xfffffbff, 0x20, 0x101, 0x0, 0x2, 0xee01, 0x0, 0x9, 0xfffffff9}}, {0x4, 0x0, 0x1, 0x80000000, '/'}}, {{0x6, 0x2, 0xd000000000000000, 0x0, 0x2, 0xa018, {0x3, 0x1ff, 0x9, 0x52, 0x38d5, 0x9, 0x401, 0xfffff000, 0x1ff, 0xb13, 0x10000, r4, 0xffffffffffffffff, 0x7}}, {0x1, 0x1, 0x19, 0xff, ']procGPLnodevvboxnet0:-\'&'}}, {{0x4, 0x2, 0x81, 0x9, 0x9, 0x10001, {0x5, 0x3, 0x0, 0x3, 0x9, 0x2, 0xf25, 0x5, 0x3, 0x3a, 0x7fffffff, r5, r12, 0x80000001, 0xfffffff7}}, {0x4, 0x8001, 0x1, 0x7fffc1be, '&'}}]}, 0x408) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:23 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)=0x9) sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000005000000090000000000000020000000000000000100000000006600ffff0000000000000002000000000000ff0f0000000000000700000000000000060000000000000005000000000000000500000000000000010000000000000001000080000000004d5d57c840a1d0dbcffc24c897a0418c23eb171e6f6ceec7a35525504f09448910a852a4297c6da7f5cd365ce843fbbc"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000280)={0x9, 0x3ff, [0x1c0, 0x73, 0x1, 0x4, 0x8], 0x4d}) connect$unix(r4, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) [ 389.821401][ T3835] usb 4-1: string descriptor 0 read error: -71 02:13:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xae01, 0x0) [ 389.863290][ T3835] usb 4-1: Could not set interface, error -71 [ 389.915882][ T3835] usb 4-1: USB disconnect, device number 8 [ 389.921939][ T27] audit: type=1804 audit(1591064003.712:132): pid=15123 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/161/cgroup.controllers" dev="sda1" ino=16337 res=1 02:13:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xb704, 0x0) 02:13:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0x5) 02:13:23 executing program 0: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045003, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000240)=0x4) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = dup2(r0, r2) ioctl$HIDIOCSUSAGE(r8, 0x4018480c, &(0x7f0000000040)={0x3, 0x2, 0x7fffffff, 0x7ff, 0x6, 0x140}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2201, 0x0) 02:13:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) [ 390.208924][T15152] device bridge9 entered promiscuous mode [ 390.225773][T15160] bridge9: port 1(bridge_slave_0) entered blocking state [ 390.233933][T15160] bridge9: port 1(bridge_slave_0) entered disabled state [ 390.253141][T15160] device bridge_slave_0 entered promiscuous mode [ 390.299966][T15163] device bridge_slave_0 left promiscuous mode [ 390.317883][T15163] bridge9: port 1(bridge_slave_0) entered disabled state [ 390.401536][ T3835] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 390.681767][ T3835] usb 4-1: device descriptor read/64, error 18 [ 391.071332][ T3835] usb 4-1: device descriptor read/64, error 18 [ 391.341390][ T3835] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 391.611311][ T3835] usb 4-1: device descriptor read/64, error 18 [ 392.001357][ T3835] usb 4-1: device descriptor read/64, error 18 [ 392.121557][ T3835] usb usb4-port1: attempt power cycle [ 392.831297][ T3835] usb 4-1: new high-speed USB device number 11 using dummy_hcd 02:13:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) 02:13:26 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@broadcast, @rand_addr=0x64010101, 0x0, 0x4, [@private=0xa010102, @loopback, @private=0xa010100, @multicast2]}, 0x20) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9d0000, 0x9, 0xaa, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0907, 0x1, [], @p_u32=&(0x7f0000000000)=0x1}}) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f00000000c0)=0x5) 02:13:26 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, 0x0) 02:13:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 02:13:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000080)=0x3, 0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 392.961611][ T3835] usb 4-1: device descriptor read/8, error -71 02:13:26 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = dup(r4) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)={0x1, 0x10000, [{0xae5, 0x0, 0x4}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r6, 0x0, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:26 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045017, 0x0) 02:13:26 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x801, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$ax25(r0, &(0x7f0000000180)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) dup(r1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045003, 0x0) [ 393.089952][ T27] audit: type=1804 audit(1591064006.882:133): pid=15186 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/162/cgroup.controllers" dev="sda1" ino=16366 res=1 02:13:27 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045431, 0x0) [ 393.181530][ T3835] usb 4-1: device descriptor read/8, error -71 02:13:27 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = dup(r4) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)={0x1, 0x10000, [{0xae5, 0x0, 0x4}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r6, 0x0, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 393.671339][ T3835] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 393.841492][ T3835] usb 4-1: device descriptor read/8, error -61 [ 394.121535][ T3835] usb 4-1: device descriptor read/8, error -61 [ 394.241484][ T3835] usb usb4-port1: unable to enumerate USB device 02:13:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x78) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000300)={'veth0_to_bond\x00', {0x2, 0x4e20, @multicast1}}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9d0902, 0x9, [], @value64=0x7}}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_raw(r7, &(0x7f0000006a00)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1, &(0x7f0000000400)=""/195, 0xfffffffffffffe09}, 0x40010000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'vcan0\x00', r6}) sendmmsg(r8, &(0x7f0000006840)=[{{&(0x7f0000000540)=@rc={0x1f, @fixed={[], 0x11}, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="15872683838a78c288e4b397cf61868a0f5b4e47a5d8b152b1014f2da9127c0a2df3a5ffe409a9499aea5d96ab43797ba5aebaf25e38cfa13b93f801d286e7e2faa6a6b0c2d1328a6408d3b7dce9d006a89ff57ad881d2dca353ca9e522a087141fafc2a4e55abd1b26dd89e9034db45cbb7581d582c771b1133da0bc29010a48a5aa4a1bb952e4ad917c03d9fd5ba008232623f8b5af5bddaf9150e1214e81be2f61da4c6c5abe0798e2b7c8a12d3a7c42feadf32c746fdad5714b94c836a3cb7317bb65f1c063fcde22c06b587eeb1dcc6bd9cdd18284f7263dbe8cab50e1139c56bb0d20afad4667dae03b8ea3c2296", 0xf1}, {&(0x7f00000006c0)="80dd307cb87e920686947c6511c977be74140faa347e10334ee6a20e3332b7e0556a2c30247d8c206446115edec6581d3edd331a48f91943151dbb90c668d503a62449b65199f4c5216ab52795ba7eb311aec3c25087330abe4f7de3bc2dd1e0f5d7645bda6202f5d0d31a5d55a9b188cd173ca9085a7551a2d17f516820a59c9c9d2799345ea845ad3820bdd959276b13ff622b45352d0acad50e0660f845e8d803ef562481cff0e87c9ff14570225687c453a7789b1bfd203d5923db840d3535cd51830725e6212324ab34e5", 0xcd}], 0x2}}, {{&(0x7f0000000800)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000880)="185f31c65a13d537a8bf85d81a26f5bb37d4ec7334b1e572d7ba46c444988a0d20538a397eff91922c4f36c9d7e57e4e28299edf4fe4cbb5a640dbbee0057671c3a83d8c0629cb8f681d62a2a9fe114e5c62df99e02e55e2c0cc96b62fab5e6943a30eda9290c836b30ef605a03cfc5a187b417bd43c71ae51e525a2997e77170cd635f7fbd489f6df1dc47c74ee38699b40926ae3b1546a6e9aed408ef9d257565d29b8a4f156607e69edaa57871f631edcad440e1f8aa546e7c18392f4548927b3c66b", 0xc4}, {&(0x7f0000000980)="a4e2a19ebf3e36ff91b1b708ad06a908ba0a8e535ef838abdab88347903bebfad859a1f6fb433a6d2729af9a1dd7af5c8ae09e03f1e0c37756ff6a77eb3dcc7e80abf90ede6f09da41d4bde98c6afccf6a66f2989c9858c6ca7637561ed6743d4068959540da53ab9ff53b36815723c6563e0dc9c5f454709121d0edcdca2e1692fba3ed32d2", 0x86}, {&(0x7f0000000a40)="dcff606f07bc88e896a8eb44ceb0b3983d0e3fa5567d0b6d0a0f3ff9921875147854dcd3454263d330877473b3a3f5e6963a12e552a1bc4fdfce9ea4359f050b9472e8fe6eba489e058952428da73c1e0caa74c422c406bf969ebe6accae5e1869b43cef10c12f349398b2e7c49b9d3c1fafa2161a11c6afeffc385b785715be3e4e4881e9485e3567a5f225f349f44f0e9574367ee79edf1e6668b660ee097ef415d8f142c3b8121503aa517095dc3fa77a17bac3744bf9b17ad3629a2671af77bc43d113a8df7ee3d73e430b7ad3af4fdb1ee2d152d4d35abc17196c8940426a677dc7402dfb02930f0e305bd773e8f81816ba8e8c5893a7", 0xf9}, {&(0x7f0000000b40)="ab1678953c56b59cf41d63f390a638eb4a835e6b580ec6ba82ddf430a71c80056bc36bea6d298174573cefe32850d484921c259667038e5bd3d7d48f2267504b5931f21d10341961c91e56628fbb8d7eaaab11c9b4d1feef27394ab1bb672bfb409ef69981eb4354f377a6c78b2d55ed152b18a1bb778ece80d9f7e3428a9d5223c0f5b5b8602a76528bc01894149fd1daf06f229574464455723e3d522b2166142bb2908fa10058e8d2510d790ca6f6af32455fdc1ece7ce29923367b02ae01d990f9fb1b55bf25da4e1a91e173fe6656eeaf98623d28d81d9a4cc12081967d7a0b0b85675888248bda0cde61ae", 0xee}, {&(0x7f0000000c40)="1863f9c5b2f8b9b33b0555a38a0a516bc9ff9c979236ee69eb163931abb4f5b2226c77ffb442f269739e0fed9e84a8f425c43228429a30b652485a233fb9195d328ee122c44757e8947c5778bd90aed73dbb", 0x52}], 0x5}}, {{&(0x7f0000000d40)=@nl=@unspec, 0x80, &(0x7f0000001380)=[{&(0x7f0000000dc0)="eb2c45a0c9c314edfe02e490e0b152067dee6018fca4edc9144005acb022e059a7acfaabf33734a7c0919ad2ffe4b0d6cb26e7058b3f90f6984ad410e4ac286ab6fe50f618a78cefcb467d180eda9fe732b9d470dffc03947e72b4ff9e1044c7a46dae0e504abe3b0466221cef91e8ab387773a40d4bae14190ddf3e12cdb7ce2dea729d77cd18aabd6bd937a0fd098e19ce76be6cadede7abbe11207c", 0x9d}, {&(0x7f0000000e80)="12a789c66f5a1a1adb8f060b2aba2b44c9647bfd5b97570e9ea33b7c6b4d1a584ddb7be74708a617af4cfa62b5e5c8b3050d4e1b24d1e3344385559a48f181e62be18f22c7d5140d46246c838a25a3173b5925a29e75f9499f8b8884e496106786eeec864b25b4", 0x67}, {&(0x7f0000000f00)="1271d72cd5d5b2dad85c185fff6ba39af602f4d441f83f6839e37667fdfc8fcfc3e3a0e0c9fcdaac18bd17dda55d2834e9d7c1e20c01aa4fb9042b21a79484f31eabe573cf90bb025782e836b8c1092c109c6f716a5b74b1", 0x58}, {&(0x7f0000000f80)="a8b1d4926d9aee494fccabf3a0ad4d05e9cbaa7e585999c2b61d1601258d9ebdaf0725a3e78eb836f50f416c7f0d33932c8579d534be65f7b8911e2deaa8672d8f42622def13845eb922de8879bbb579ffeabc1a3377d95d373437ebc014ae43bb7475dc1a86d4a0a1c91d074fb50be04223fcd6d426487d47c63bb16b643dcabc", 0x81}, {&(0x7f0000001040)="1ba2efe70a12027da95c9b2e4c3c6c966baf4690698752324bab3e06973aab42583fc38a393a9a71d859b585e7bd466ad7c2fe88105e8089a78cfac8905eb4ad95046aa003c1df7de75c5ea7a9903f96bf86162bfb0409b5f30a4b4c", 0x5c}, {&(0x7f00000010c0)="a5801d7d54195bc9915926f6c047f345186a71b8d9f811babc00a22145fd24b6c3eebdf04dc278e749d4ca5f256f71c61598194a1029a87358ed4ca08539908b3b192a587e738ce83ce82b18de4ea69f7078f872655e60c63fbc7526db1f1c50bf534ccc40979fc4d7", 0x69}, {&(0x7f0000001140)="633024c0d4e2eeb194a280c74b37870bff383bee223d50666b46e36cae5e6422faf1d08d83bb5898a15770f60779ed2cd8f8ede168af0cc74586d5df09282ad1eab8a4dfdf6e3b1ebf9a7224a90770cbf5496718fc9c77da01bbae50b7ae4907d65da5d84e7dd5aa11a5928876ecbfa0bd2cfe6c93653a78e350c3648dd7c2b0ccacc5a13903304d", 0x88}, {&(0x7f0000001200)="edc10d0a2433bbb7d6630243113ccf123f62db96a9c045429ff42d0401146480e2b77edf721c747bdb9e2bdc48e5afcdc394945cbb804568c751baf0b1c48ebab75082b741c7226b0095d87bba2bda26832071ab637e2a97b9c024f1ec3b8a743738f6ec573a85e22a938f24dde634ee1bc8963f5e5c93e0267dcfefbc3eaaf214763b82dc301404b62e6fd13701614e7467f9848cf5cbe2ba477bd6131c885ce4923cfd22d20217737412748f8eb199dd7615ad80595e71c31526140380d7a503c9b28f57602c1ad2cff2f29ad8e179fa9e64bce9cbdf05814c7476d51135f39910cb5d8cc34ad382f3", 0xea}, {&(0x7f0000001300)="4cdac299d72cf89fe3e128d441baadb7c0a98b75d0f2158d6d00cc21bddcf217586e2468961da8397170284d421349d37ac321458a0d1a9c40faf084f833f18f3b4ffff2ba11336559d9bbe6b261296459432f566a218f254bdff9155c552490b5866e389fade15fea576101c01beea7b52fe3db76", 0x75}], 0x9, &(0x7f0000001440)=ANY=[@ANYBLOB="a80000000000000019010000020000005406905fecac9e2dcbfa950447fdd5f7eeab1c6bb8855b8149a4153abf3c7eb6923ce8419aa74ba2da1a4e48bae161aad4a761b3990ac686561ed351d45486a9719988ec6d84d9edee78d899ec3c88a076af311662f2559b1f9c7c05243af38784edefb5bda4873d59a8c5312570bb2102ce28be94dae11bf4a2a2f775ee577d93d8573e4c6df3cdbdd0ca13c5592c9cdc00000000000000"], 0xa8}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001500)="81f33e9588959efac3ff4512e0ac90f8fbb2b2ca92ce6f07e99d83d88825eab9ed4a8e2914d8f4d315f0fae6d33f02cdde0234ced776de79b2f19158464e4bedd90cb51da8bd2e2dd25bd11080", 0x4d}, {&(0x7f0000001580)="a280b29f732f45a9d1151ba22ec504032c2a76c86f45b70dd47c3d9e1e886a3edeb7aa86780c8470d1092119096925714d2caca3ba8340792638cac3489a5f05ec84cb396ee3bea08262c9b7a370f2ca02e5bc872df4190d1618345d401743c45e10dffbe1a98fb9158e6152a33517104a6b0ddc09416fd94a991c819d2d00061e31ff8d3412b887006b088c3b", 0x8d}, {&(0x7f0000001640)="f5a6e88ccd10beb6b2668704c015a395b0f76978d834def598c15a95074d69b3dbfba5679a47e0c146b22f0a94d9b6995102cbe39952472d51232c60e5af9e8292d3932bc530332bf0b47d8959d599618fff8082c224a4515fd83bce69c71354432adcf768afa2d61995d3ba2d8709f9a499b6409279af43ba405c9e323d0f0ba5fbeed7080a", 0x86}, {&(0x7f0000001700)="438543f070d94dd6a7ee970ef953d1aa15772d2316bc5bcd1a06a979331db7d52be3dc00bcca4ed6a770dcf925a4cf9e7217c4d9a5f08495a10b39710d90a0006db92bb9648ce172b8159f63a41fd5047297c79a79f4e60a64a6330171087c66b3bc2c4c383a5e0d2062fc8726ac285ea61a6626b268c0439de892ca1d54532e4c0de3a68a6418685750bc332fc358c078eddd22948678ea36a0db11a5f233d00839fc1df3baee8cc9e91d4034331d49e629df3cab3ca9eeec2167609e778221d9a81a509a6d430ad02c3bf0f756a4e712bb4bb118727342abf32225ba9a92a9dd6c13", 0xe3}, {&(0x7f0000001800)="814711e8adc17b74fba7b266964bb2d58aede2", 0x13}, {&(0x7f0000001840)="3173724300523c4ac2360abd57c581a67711378b661b0e69db2ac69865d0027002cc68c2a4fb4b6c25e49a5e02e9dd1f58accfa96783292a4ba9a45b8bc4189a2852772b708298f7f232930548417f69b6b662b51b0fe7f1bd67b80ce88184e51bb1f4524111b65004b8d39db4eb1f3f86e2d98587cdc59572aa878abac31d7fc89fd360296a630185b754450ed6567588bdd6b5f803b153995467fe24df7db14c3cda70f5d62df46659e588c9318184a15e07c2315adc313403045999a5f35eaf0d7eb66668c60c3cb25bdbee7a567a182578ed2965", 0xd6}, {&(0x7f0000001940)="2063e9f25cfa4cafad090b6e167c6155ad226bac23cc5603af3253037273608f5bef7cec7882f5a23cbbadd7bcfb70014b278cb8c5c8911d5fc596706137ebe945c9dd51838ab2d9a202eb08f074e4023cb9c518e8932714542c41fd736512807a27c53bf9518dc22fc6647c21b1b133454d3d11cc5791496b0db7870eb5d606fdd78ef4204989b7a39aa53b5f0058ca0b3e60fa80907d38ed5b09ca6f34cc0c6086eda45e64525c3eb8056863ce81", 0xaf}, {&(0x7f0000001a00)="2ffb97bd4224973e4578ee4308f10a4df6504848630629bd446e23bc15df7ac61f13c34321d122414d08bd70a7e94c63492ffc33f38d1dc5bb7e5ea7156b931125bc952d190ad76c24d1cc8e7974fdf5f8c3804473ce6b54c4fa0c0c6d9ac788ba3aaf902a0f076e82f84c3910e7cd97580c8735724937803b8dff90671a7ee7", 0x80}], 0x8}}, {{&(0x7f0000001b40)=@xdp={0x2c, 0x8, r9, 0x2}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="3b548b0f4b0b8bbd4e7ae2731ba45ccbb9c74982c1198c2d6a5c243db546287c1caa40c869915d3574278a15df35ec2a7b32dbe210e924e7e4857d74f63e166eaededfa893012fb29cd10b7866bbadbb7a742c927f7a1893e347f7f73209be15f0ed6005293857ed8fb4b40eb5a2f266554931cf4ee7298658bc8bc247fdab77f87d61d7e20d1bf5ddad73ea12e367f17e39dd1d693264e1bf71b376c4eb99ebce1a64d397b36af15794cb4c060630e132", 0xb1}, {&(0x7f0000002c80)="f1bc806e742a7e51b72768642d0499933e77f08d6d6935aaa3e58a6b50514d05bfeba87ef5569b5fb07bddd3488f411e240205a88f0c9fdf376e65f56edee6cd29f6a9d96d756da59e68bb9c0106834104cf95fd714624bec2eb913b2097fb57ab7a6b3b1749bf40887fcf42fcd27a810f3c5f685fb7059469f8274df600c05e", 0x80}], 0x3, &(0x7f0000002d40)=[{0x90, 0x84, 0xc0000000, "51fbd7fb427ff7a35923893c77a62bc119e56a807ab8ff5b030645782a730ab4785c8745ecba7bf9f456c4e00f5d78b5ca123ec1051481cc5580b1255597f334441d064db4ec59a46f87bfd0cbf4ff4794f39272c459c48722939e34e202a93b7db982ca634bd10f490f9db6a0b0f9ff28911e3541349dda40bec74172ac55e0"}, {0xb8, 0x105, 0x0, "2bb1ef5e8ac56af6eef7c8c71f70f3c2301679c5ff71ee1d8e42f13bab4cfb4bb937c10d9804fd765aa17b8d732e6d88cb85175bad39afad9411d346b1430d9f03a48978f06431838e980ae0db72a6f23fb9ee76a6d5a8fd6760240098e2dbde7835b57dbfa4717ae59920f16113d67062c542aaef99fb961723b02d225388b86a15c6b0c1a8eb01c57d1ba0787949d4ad3b77cc323b0c247127cef59b7377a86310"}, {0xd0, 0x115, 0x7f, "ae3b7f41fdba9e401e5c7073352c9e96ab8b6ddca18772d6452e41ee323a69cd9bae9d2e7ea9d4a8da9522440f95643cedde405aaf562e3cbbf8d216aeaa43c84153ceb2a78e10ff2861e80cc4f6e9ab90e3b02e96bbde252f5f28f128cde1898f8a4ea3aa6cbf61a77811e3d4763a0982d62a2294b2a21cdb2081700263ef2111e7e5a506dc726b9bb1e04cf90f58c03574b8adb82ad52e2a6b2d0385fec402fb340767d18e1183a3a9741c06741585168c7dab0a40c3ac94"}, {0x1010, 0x88, 0x80, "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"}], 0x1228}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003f80)="d90931a1d53216f1d6358d204bb725e6ecd117b710b8e14bf44bdf556f0c845a81ef4d48d8407bac97fdbde9e0c945a2518662dda84c22765b9e1c8cc78766f4d2323ca4fcfe0a9b3e4586313ac6939daec69767723c772feefdef719a8ea9e8207b2e014365c62ee49c8060c55e40e24b8b9dfcedcd4e0812a24a77f1569533ae704cf6c466dc8f8d6637eab04dea063b194eafd673ea183e610197ef08dd3de902ca", 0xa3}, {&(0x7f0000004040)="8c2fc09de557a1dea165174ce641bf2aada8b4cd3b65f741c22efeb6e1b473a1cd1e303a2916648cff3cf0d85d9f38cd175574194825e8354226f555de5aa2670347a2cc6cccc593e7089d51b63a886d986a7cd58de6394a8b1102c52bda9e64a0d85b227bd46ff7f7417b3d7475b13879d4d8b4a775f817c04339d0", 0x7c}], 0x2, &(0x7f0000004100)=[{0x88, 0x101, 0x1, "b0570c229b56f81c484a1dfe011de2c53815bc2f88bf6279a7c3b4e862aacf92d90453a62ccb80ed1def6afb7a0ca7488f7f584c46f7546ca64f16d3fbded1191466e3fb44d450ccc77365937c16f915d1779065fac6d36262fd43974eaf00d4f8346d87836605800d08d63f220a07a59c"}, {0x20, 0x103, 0x5, "7a144e34b20a3ef9a3254cec87"}, {0x80, 0x0, 0x0, "c7c36fd37c975b01e685f21f07b15d40683ee0d2d8e9dae948938d0e9b275cc91d96888bf26c747d5c285d4283979ac01ab435904669fb80b26675892b4139dc409e701721d4b540bf0a50f298368e189c5696fb6e6b2c2a2033bc317ad841039533942eb1d513e09510700ad4ef8ec2"}, {0x1010, 0xff, 0x80000001, "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"}, {0x90, 0x119, 0xffff, "fd0c3ecfa5de8b79f8b5359a627b896e5c9144ca341234d37726776b1f255b783ef4586a6f844244c863fd77d608af12174254f272e0cdd63670721b31e2dfc8e2a4f67444263cc860dcab02879370dcd9d9d5042d5d2e04adc091c3da323d5791052fb63892c041b59a9da895fefb1165f779600d3d96f78c3cc9ad5e"}, {0x48, 0x10d, 0x1, "de3b3510c36f8befa997eddc6ee8bcc4666ed7320692feb8018e2dbca6d8281351314db6aed780eb64d29ebd71821126fa834b2383be2aa8"}, {0x78, 0x115, 0x1, "5d255ec273a8260a5f190d5565ce13779185ac90a317f1054dc5d96fbb4c28de7de731b0e3922eb4e93542ff26becc9bc1925af75a3a896c0ec3769e4e044869bb87356a2f0f75c4ea4ffc98921c989836d2568e1830dab3a1ca8919cce813d3c4633d"}], 0x1288}}, {{&(0x7f00000053c0)=@phonet={0x23, 0x80, 0xb5, 0x7}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005440)="6c130549c795e5864118f0503e2d0a498a38d1af4e904848d7915cc6a70287a64a260cffa6e6d92905a08a5befb521e07a2e4c75d73518d6", 0x38}, {&(0x7f0000005480)="11b96e3f80fa5f34bfe3a094074c422cd0f0412721d2379163e0a6393517146b35b14eeeb3cb921145daee58dcd3a3181fe2395ef35a2348aaf7325281727d4a6044d8dcd8191a2aeaa0f8f0349b8bf75fccca", 0x53}, {&(0x7f0000005500)="ac395dedbb2da48948ace0b6a40a1e95ac4ec6600c0dc6fe99e58fc9f1d20f96f226b9ce192fdb406676fa7a94eff046fc0397cbec1a21bddf9bd3a8897f433323e4bc9a77e45b56c9f39e42fa8c153f193aed2ca3c08d89c032a8ea3cf52274c04ab2c5d541c32b58db32d82f5d7519a0e1b2923b4293ea57881cddb4eef69b251135a18912e2937fe8952fcaa702ffc0d3342ad7fea4d91c5c91d9dbd6fecdc2", 0xa1}, {&(0x7f00000055c0)="015f171e5e0bf9e032fae94377a5237d87472f196e9ac6f1864576f06d7b66a2c26976ac42", 0x25}], 0x4, &(0x7f0000005640)=[{0x98, 0x112, 0x2, "120fec189992e0539c745d55eb781745e9e2025a51b2a37b148ef8cbdda8f244b779ecdd589edbcf6814e3c789141c3eee42d27ae1f205a822fdb16fa9e9dd64c59265b7949c7a0a78f5c8b3e0c4190e9bf3ba40beb8dd43035d4da1fe3aba7d0179fdd8f90ca08f733c697fc1c174a9b61d0fe97481387313d396810a1a5cea8c82"}, {0xd0, 0x1, 0xfffffff9, "99bc47d87e8e0ef78159f8414b533d32e476b8d4f1df411074d8551b41b462730c89957c1d56664c927b03f23e05e0986b0cb82258576a3791c75dc39b97f6a58ab8f02f7e8cbe261af2a7be12a086f4694ab0823bf891aae2fca6177726e8047c35d30c4761aed8e511bfb189f5b743fc8849aa8e9c93f59e017694bfcf2c88a93f995aa46bb3c09c19869ec2815cfcd252414b8a6c5e4a07d383f542da6da312c1c85e5ecdfd96c6de5ccac849a2aa29a8248a306fa36a2219267b598e154f"}, {0x1010, 0x1, 0x2, "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"}, {0x80, 0x100, 0x3, "acbf5354f224090d46cd9f967ec1d22b55b864c1b412814e753ace13b3bfafd7fa624c5f302e2e753f198a0e59da3fe95316973b87d9289c1f838bf9c5e4dcb8033c7c42d38a75c35e430d55e2f5f0c793bc22e7edb2b1e8bf9b13b9ec09f4286177089b57443db24ddfbe2e8f408e4a"}], 0x11f8}}], 0x7, 0x800) 02:13:29 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x1}, {}, {}, {0x0, 0x0, {0x0, 0x1}}, {0x0, 0x0, {0x0, 0x0, 0x1}}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000380)=[{0x1, 0x81, 0x0, 0x0, @tick=0x10001, {0x2}, {0x7, 0x1}, @control={0x7, 0x3, 0x2}}, {0x7f, 0x8, 0x3, 0x9, @time={0x6}, {0xc0, 0x3}, {}, @quote={{0x2, 0x52}, 0x81, &(0x7f0000000140)={0x2, 0x7f, 0x7, 0x3f, @time={0x5}, {0x3, 0x20}, {}, @ext={0xa1, &(0x7f00000002c0)="547ae8abd702f574ccfb400e67e43fe3b4dcadbc732dd8f10750df0225cab4118fd398663a582a3fc12e0955020dcf1d7d6ee15e6671b5561fcad080735f18dbd44acfe1290a800db5253c4b5be67d579926c2fd63b91a86a376e7003f3cf8f751de10057c7603b8131c100fe53a7ae90496b51ab5383d9f9cfff7acf5d57c490b83098dd4bf1c7d7e12858fe8932ed3a5d0d5f67ad8b061a878cf6c6ed9f719d2"}}}}], 0x38) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) dup3(r5, r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r10}, &(0x7f0000000280)=0x84) 02:13:29 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x400454ca, 0x0) 02:13:29 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = dup(r4) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)={0x1, 0x10000, [{0xae5, 0x0, 0x4}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r6, 0x0, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000007) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:29 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) 02:13:29 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40049409, 0x0) 02:13:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) r3 = geteuid() fsetxattr$security_capability(r1, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0x964, 0x1}, {0xfffffffe}], r3}, 0x18, 0x2) 02:13:29 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = dup(r4) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)={0x1, 0x10000, [{0xae5, 0x0, 0x4}]}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:29 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="760100001200"], &(0x7f0000000080)=0x6) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x3}, {0x0, 0x0, {0x0, 0xff}}, {0x0, 0x0, {0x1}}, {}], 0xa0) [ 396.139459][ T27] audit: type=1804 audit(1591064009.932:134): pid=15228 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/163/cgroup.controllers" dev="sda1" ino=16370 res=1 02:13:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x4014563c, 0x0) 02:13:30 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = dup(r4) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)={0x1, 0x10000, [{0xae5, 0x0, 0x4}]}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40186366, 0x0) [ 396.305131][T15250] device bridge1 entered promiscuous mode 02:13:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@local, @private}, &(0x7f0000000040)=0x8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 396.371481][ T3835] usb 4-1: new high-speed USB device number 13 using dummy_hcd 02:13:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0xffff, "695d8ad41633b5ed76399b1235fce88ffaad54ad509cb7a05efa2fccb3925267", 0x3, 0x1, 0x7, 0x80008, 0x4, 0x2}) sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/297]) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x0, 0x0, 0x4}}, {}, {}, {}, {}], 0xa0) 02:13:30 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup(r4) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 396.623794][ T27] audit: type=1804 audit(1591064010.422:135): pid=15273 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/164/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 396.631408][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 396.779968][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 396.789610][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 396.807870][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 396.818181][ T3835] usb 4-1: config 0 has no interface number 0 [ 396.833484][ T3835] usb 4-1: config 0 has no interface number 1 [ 396.840098][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 396.862582][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 396.891522][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 396.903241][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 396.917115][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 396.924214][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 396.930895][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 396.940542][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.952077][ T3835] usb 4-1: config 0 descriptor?? [ 397.231467][ T3835] usb 4-1: string descriptor 0 read error: -71 [ 397.251540][ T3835] usb 4-1: Could not set interface, error -71 [ 397.271483][ T3835] usb 4-1: USB disconnect, device number 13 [ 397.961499][ T3835] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 398.201467][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 398.321578][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 398.329814][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 398.338027][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 398.347093][ T3835] usb 4-1: config 0 has no interface number 0 [ 398.353354][ T3835] usb 4-1: config 0 has no interface number 1 [ 398.359540][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 398.370360][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 398.383499][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 398.394641][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 398.408001][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 398.414911][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 398.421809][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 398.430870][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.442103][ T3835] usb 4-1: config 0 descriptor?? 02:13:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='net/ip_tables_names\x00', 0x0, r0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip_tables_names\x00') ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000200)={0x1, 0x49, &(0x7f0000000100)="2e83c5c9efac7f85df2ec75bfe781cda0a5cd879ee8b7c0ba31af55806124bfb335c85275eef3714f32c45c2910b574d0b2cb52280292b87624102363095e9ed5162654179be3ad2ecd30943016c85d26ae3e99a06f69172851afc666b784d1c9ca5ee0ae825ed5bcc101d4e8defe00761d870acb69cd0f3dc641653256ff2559e399a451011db615ec9ea85efdc61dcaa2ca1390ec246eef5f4414a6d93240649c4b2605d50298c8ac4871b0f09c7a97f520eb01ba17648086683616a6400c2961d267e8b5db1584d4ac8b78ea85f3d902bab1f188160776fa197927ec633e2a74cdb975aa72461c167eef15d9395cd6ec78d7b9b19795ffd", {0x80, 0x2, 0x42475251, 0x1, 0xa29, 0x9, 0x5, 0x40000000}}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x100) 02:13:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x4020940d, 0x0) 02:13:32 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:32 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x12c201, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a40)={0x1234, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xd37}, @WGDEVICE_A_PEERS={0x11e8, 0x8, 0x0, 0x1, [{0x628, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ALLOWEDIPS={0x368, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x13}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8f5aabe5698f791500079fd7cbe424fac3e7fb003d686432ce8aa0c35c0a3c2a"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @empty, 0x7f}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0cd1ce70af9dfa581b8780a85d19bebbcf02f1582f6816dc2a1505173e0b748d"}]}, {0x33c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "848321583140f07677c25ba7344a05eb5da67de043ba6d90c24fa4bde9c9b3e6"}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1c0000, @dev={0xfe, 0x80, [], 0x26}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4c55edc74aab4edf1216c751cb3ad54283d414542fdce59173c8a9f435600d73"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @mcast1, 0x8}}]}, {0x1f0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x40, @remote, 0x20}}]}, {0x574, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5882551b15bc95e5191512f6f5a4020e96b9436e7ad1f30472e497cce8efd811"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4d0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x20}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @remote, 0x7f}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}]}, 0x1234}, 0x1, 0x0, 0x0, 0x94}, 0x20008080) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000009) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:32 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) [ 398.728885][ T3835] usb 4-1: string descriptor 0 read error: -71 [ 398.763785][ T3835] usb 4-1: Could not set interface, error -71 [ 398.790430][ T3835] usb 4-1: USB disconnect, device number 14 02:13:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40345410, 0x0) 02:13:32 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:32 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0x8001) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 398.896820][ T27] audit: type=1804 audit(1591064012.692:136): pid=15322 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/165/cgroup.controllers" dev="sda1" ino=16368 res=1 02:13:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) sendmmsg$sock(r8, &(0x7f0000000e40)=[{{&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="ef5734b41c2eea76c00317274c1f0e2b873feba0c3a0e2c27d65cb03d2419220230e90450a6424827f69f8e6805da3757bdfa51243efdcb07b5a5535fe63121f1b744acab1fdf2a0f7bfa0a49e1eaba0cfc11e4ec396a64da3bc619ce73b7163faa29e365ae43b6f071d3501124a77e3f6e798289e489034af6034815501d552882eb8ba332ae6d0ff924a09ec8f9325fbd39fc33077d65a2ba7fb4e80a7eeccffb53e6c7b7e044956096eae7114dc308a6aa438121dbb0276b6157da78abc40856f479c2b970595137cda134ca083320169c5970e", 0xd5}, {&(0x7f00000000c0)="81b424bdfa8bfd930e387340c8d745fe4697624400b2fd72fd904f37d9c177488cfd2cbe92217d6ef5b2", 0x2a}, {&(0x7f0000000440)="2f9b326c4fe897956228dbb1f145b0724c76d08be596289dae50c499cc51f7e3b416db2536bb0f472f62d1258b798febfbee64f3d6f8541401c83f5477b01fd0df45429daa2e8cfc7021a320a1f67b28f9bfc29e28eb74eefd084deb88d63fa5918cd1c58c0878f52e455ceb575633002745b7912aa1320173af07bf736d93bb7b43b51a1a3d4a647d049a3c3a8359ae810e5108280f4dfad24f7d579d6f56e87d24e6a6d15c8a7f0209689239cc86af41121d7727fb86a54f3b2e95df94e467a3f71dc507fae668c0cf165e836f025d95", 0xd1}, {&(0x7f0000000240)="1ae9265d55153567c655803a4d55f60d63831ee237ea9cf48859c5e3c231f85335dcfd8a1c1fe4a1d1fa9c3398ae3d0fcd7ec0f52d081bcea6f0", 0x3a}, {&(0x7f0000000580)="150609ee0a1a7972fbaedcbf086f196a54aa4cf457d2715c0c9e6e153029633df9d5102d63a2b7824fb998fed714fa4b8a6f899fd832b172b8e5c893f344cab6a8c134ff292f125a4610fa545613a9136f80c5b64f3793fc28908dd7299ae088540936918fdbba874f696a7c9c609824a9c42189102190a4e92ae66586b083972bbe0f6f4f3bae779c200e86043556a0220510a8ccae6ca5731f3e75eb33ed8fcac8a3076d43c6f166030a3070276bebb1193aac280dd01c3331162e07322cf7d8a77efa8850e73d135845173da22d44668f5e8423d5b6f07b1108068a85f811a7809d", 0xe3}, {&(0x7f0000000680)="c5d003e9", 0x4}], 0x6, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0xceea}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x90}}, @mark={{0x14, 0x1, 0x24, 0x898}}, @timestamping={{0x14, 0x1, 0x25, 0x670d}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0xd8}}, {{&(0x7f0000000840)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)="e835b0d67293166cb55e6b532fe1ae9745b8c57466e915111d96be913a35f7024005c85f20e3fb655cdeede6e3c1c25cdece0d4ff6637a3ff2a0d70b1c5975f4e40b885c87899c9b19", 0x49}, {&(0x7f0000000940)="59e43da297845690c8d9c9693efc4caccf1bbdc104022d2e1562c12efb1cbbab74f3", 0x22}, {&(0x7f0000000980)="b591c479619054ac8063720c4e515a6064704eb0a3", 0x15}, {&(0x7f00000009c0)="df29808023f2a484c2c2ad70adf2c2bc44edcdecd75092c870eb243b956eb86dd21ea7066ed2ae785d72031cf74d51fa933106cf3896231ebaa415550583affc47889d4d96e189e32a70b1b20c602bed0bb2e71bc8cc11fa18a1b13f6fb2426c0b60acd1320bc36d229264b1b2a239e28e9489490be4a330a738bb32a18f74486ffd817499961e4484694984afa3e3eb7653985c4aaf55885c57a8896cf3031c3710308ce911b70bb01e32b4cb2fefbc2f5049f3822fd78c07314b48cb74a8a39458595bd5f273ccf905d4e7f7133c734b9098db3eadd095dc4f0c39", 0xdc}, {&(0x7f0000000ac0)="926d0fa6f3e016111718ac409e9528777e33b0b8d4048135d2b0951919829722e4873aeac175b9cdf7c0fd95f874c4cd54fd6fce69aa0a572b35455ad92fbd6212f8f2656a0de6d697fec68c4640a517841b3ec31a25ad479aac4b02cee59a55bf3d5a226cd342c79445258fc76e4030d80a18a5d07fac0f9116576889598b5ab43ef3f0fb740de34e9c45e618cece376641c15027e23b124df31aa30b3150abebe654648d335d179804ea21c7bba35058968264cd1ee9db27523f58e5a8a2c72e11c20405ead5c4", 0xc8}, {&(0x7f0000000bc0)="fb20b1efd70673f20ed589", 0xb}, {&(0x7f0000000c00)="220cdbc88a2ba0a10e8dbf390e59", 0xe}, {&(0x7f0000000c40)="08da878838e61a07e80c4ea81fdaa87dcf7867fe63c99ade9fbf7989d6f2895a50b6f64e9c2b5f50fe4adbebe35617e077cd249afb85566b19947996606004df008b7d93c289c3bb935644376a9dd97f1d851e950fdeab7920c9b2a64ca1dc81c50e34a298fb5e5ea4c28027ceebd9c52cdcef076fa13440c7b3b779cdc2fc2c70c4635f39", 0x85}, {&(0x7f0000000d00)="af6770be2ea32b0494d5330ab11c10018a98c9c32430d254c3c7157c1b479ea10bdf", 0x22}], 0x9, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}], 0x2, 0x80) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x20c}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80044d76, 0x0) 02:13:32 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x803, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 399.099121][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:13:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80044df9, 0x0) 02:13:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000000a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:33 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 399.261493][ T3835] usb 4-1: new high-speed USB device number 15 using dummy_hcd 02:13:33 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045002, 0x0) 02:13:33 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 399.419876][ T27] audit: type=1804 audit(1591064013.212:137): pid=15363 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/166/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 399.501529][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 399.592599][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.631708][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 399.641987][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 399.681110][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 399.700121][ T3835] usb 4-1: config 0 has no interface number 0 [ 399.721523][ T3835] usb 4-1: config 0 has no interface number 1 [ 399.731821][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 399.755316][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 399.783065][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 399.816773][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 399.880857][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 399.896315][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 399.911815][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 399.931095][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.955137][ T3835] usb 4-1: config 0 descriptor?? [ 400.231553][ T3835] usb 4-1: string descriptor 0 read error: -71 [ 400.251507][ T3835] usb 4-1: Could not set interface, error -71 [ 400.288410][ T3835] usb 4-1: USB disconnect, device number 15 [ 400.961523][ T3835] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 401.201418][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 401.321760][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 401.330280][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 401.338660][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 401.347730][ T3835] usb 4-1: config 0 has no interface number 0 [ 401.353974][ T3835] usb 4-1: config 0 has no interface number 1 [ 401.360226][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 401.370996][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 401.384107][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 401.395163][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 401.408584][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 401.415506][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 401.422458][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 401.431661][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.445834][ T3835] usb 4-1: config 0 descriptor?? 02:13:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045005, 0x0) 02:13:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000000b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="01012cbd7000fedbdf2502000000080005000a01010108000500000000002600070073797374656d5f753a6f626a6563745f723a6b736d5f6465766963655f743a73300000001f00070073797374656d5f753a6f626a6563745f723a7661725f743a733000000a000500e000000214000200ff010000000000000000000000000001"], 0x88}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:syslogd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x24000804) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000240)={0x4, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e23, 0x2, 'ovf\x00', 0xc, 0x6, 0x13}, 0x2c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {0x0, 0x0, {}, {0x1}}, {0x0, 0x3}, {0x1000000000000}], 0xa0) 02:13:35 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) socket$inet6(0xa, 0x800, 0x80) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) sendmsg(r8, &(0x7f0000001b00)={&(0x7f0000000340)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)="9df3682d93304e09ccb9075670dd7b296c6ea80e7952b3e61997b6b01df6325a6d5a3701237b4b220b4f99029ab863b7aa428e202b74f67658851047bc3697194ea93f88352b535261c94ed865a17964590b8dadee00d92f8649f5d91704040707d247fd9b348ad65dce2fdd0f7d5a8104f80ccdefab3ed0fc1a5a0d0cb483dffd709bfacc1da70de4e8d88d2dca5b98bddb06c06196013e22b2074cf8659644e936c055c4b1dfc7afb12d213a4fcd384a80046df0ef0259d23c72789bd05c4e61b220bcce3afd974d7a10f42d1be87bfb2d76c943e51ed50577eedf3213aa", 0xdf}, {&(0x7f00000002c0)="87e63f5ecc040a3da3feda8fa7", 0xd}, {&(0x7f00000004c0)="a9c5a6bdf0029352", 0x8}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000500)="3294c83939e3091218ccdae3e2ccc5f790d54bb7ca96c0f1447d3800e2605f05eec23a21c29a5239a849c10254cdfe2a0f46025ff4562ec832b142aea7eb0d85d5e7c6ddbd8a0f81a601388abb39607b9312ee2a0e917dcacd6f75ba9bd0c4a8176a8c7b29e2eb19f7705b3890837e279ed0ac970e63594fdd0e30815f9edce72608950d7dc4958602b278252e800eeb6ae9b7a1ae19d0d3e494df3d910177c1a92e83dceba8a68ca4abec9b895a3589d20d3a0d6ec97d00184b7be2fb215e512a77def51245510b01d29cab4e5e9a17ed41e5975b10df88eea88b457de0e1a940c21f35c668df43f1", 0xe9}, {&(0x7f0000000600)="4952a3798fa37ee7e7a14bfe9af9d89a1796b27b6253ea18e147057d00668c0575638739594b6394e773bd4a3bd629d9b43277786458356642793027502eaebf4b05e1005745f4dde22efe402ae2887e33017869d4e38f870f080d439fc25a2f77ac29e5286a8d689e048df0989addb36c1d90ba7ad4655be9dfb7dda2bd7fda6ba4927af9e960892b6f8c4f6300bf304fa794af60abf32729e8aab4149cefacb6082a", 0xa3}, {&(0x7f00000018c0)="31233b2fd40f0cf3941574321d5b268250ea4ec5ad73c9e37b28896ad9d201a6688e0534231752a280a25f6416c04716090abb0c58cf7030f68f36094eff9ba3a8439b0872834e808ac1b6b745815981eb2699f65a8c4740975e1f6d531ff45035ce43ed706dcd0a3d9eac7ec6652321aae65af0a1e633f742180da13837140f6f396e2f090ebe76ba56", 0x8a}, {&(0x7f0000001980)="772c63460326cff954eeef45be469eef1f7073887a85757c309bd1f0b5e5ff3ae0cdce666426077b243f1f8ea501b22b734b6f908538d437855100f3bbe322965b79f0a3c64ca716a6bd727dc07f31142190c58b30f1aad0fc5bdbbd623acba9813d330b23237da83598240314fe4ed1a3f5620ae77d58b1dc66564b9797c48effdc0168efae4bb17a10457e504fd4adb16d15ac5e7ccb", 0x97}], 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0xa8}, 0x10000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3, 0x0, 0x9, 0x0, 0x7, 0x40140000, r7}) sendfile(r0, r1, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000000, 0x100010, r1, 0x7) socket$inet6_dccp(0xa, 0x6, 0x0) [ 401.711509][ T3835] usb 4-1: string descriptor 0 read error: -71 [ 401.737351][ T3835] usb 4-1: Could not set interface, error -71 [ 401.790854][ T3835] usb 4-1: USB disconnect, device number 16 02:13:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045006, 0x0) 02:13:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x97602, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) [ 401.858323][T15412] IPVS: set_ctl: invalid protocol: 4 172.20.20.11:20003 [ 401.865609][ T27] audit: type=1804 audit(1591064015.652:138): pid=15411 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/167/cgroup.controllers" dev="sda1" ino=16372 res=1 02:13:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 401.929618][T15433] IPVS: set_ctl: invalid protocol: 4 172.20.20.11:20003 02:13:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045007, 0x0) 02:13:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500b, 0x0) 02:13:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r11) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x10800c0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="0adfc25e6e6f3d", @ANYRESHEX=r5, @ANYBLOB=',dfltuid=', @ANYRESHEX=r12, @ANYBLOB=',version=9p2000.L,privport,cache=fscache,mmap,privport,version=9p2000,access=', @ANYRESDEC=r7, @ANYBLOB=',msize=0x00000000000001ff,\x00']) 02:13:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000000c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x50, 0x0, 0xb, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x32, 0x1, '-eth0@[GPLppp0+ppp0v($cpuset\'!cpusetmime_type\x00'}]}, 0x50}}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x24}}, 0x40400d0) 02:13:36 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:36 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, 0x0) [ 402.261598][ T3835] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 402.385216][ T27] audit: type=1804 audit(1591064016.182:139): pid=15458 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/168/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 402.541586][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 402.681800][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 402.693430][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 402.704886][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 402.714695][ T3835] usb 4-1: config 0 has no interface number 0 [ 402.720814][ T3835] usb 4-1: config 0 has no interface number 1 [ 402.728509][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 402.740336][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 402.754177][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 402.766208][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 402.780214][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 402.787971][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 402.795423][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 402.805222][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.816274][ T3835] usb 4-1: config 0 descriptor?? [ 403.090742][T15422] device bridge14 entered promiscuous mode [ 403.099788][T15422] device bridge_slave_0 left promiscuous mode [ 403.106468][T15422] bridge12: port 1(bridge_slave_0) entered disabled state [ 403.191687][T15422] bridge14: port 1(bridge_slave_0) entered blocking state [ 403.198969][T15422] bridge14: port 1(bridge_slave_0) entered disabled state [ 403.208141][T15422] device bridge_slave_0 entered promiscuous mode [ 403.215715][T15422] bridge14: port 1(bridge_slave_0) entered blocking state [ 403.222947][T15422] bridge14: port 1(bridge_slave_0) entered forwarding state [ 403.261738][ T3835] usb 4-1: string descriptor 0 read error: -71 [ 403.281628][ T3835] usb 4-1: Could not set interface, error -71 [ 403.295902][ T3835] usb 4-1: USB disconnect, device number 17 [ 404.011589][ T3835] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 404.261552][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 404.381612][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 404.389782][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 404.402438][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 404.414561][ T3835] usb 4-1: config 0 has no interface number 0 [ 404.420624][ T3835] usb 4-1: config 0 has no interface number 1 [ 404.428926][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 404.444167][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 404.458455][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 404.473715][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 404.488723][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 404.498283][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 404.506721][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 404.518456][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.530331][ T3835] usb 4-1: config 0 descriptor?? 02:13:38 executing program 3: syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="d7c0fa5cee06a43794986e939e2894d85530f2473c80165eec3c52d1"], 0x0) 02:13:38 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x8, @empty, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x7, @private0, 0x4000000}}]}, 0x110) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000000)={0x7fffffff, 0x3, 0x72a, {0x4, 0x81}, 0x1, 0x3}) 02:13:38 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:38 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045010, 0x0) 02:13:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) r6 = pidfd_getfd(r5, r0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x7, 0x4, &(0x7f0000001500)=[{&(0x7f0000000340)="6799254e9e97af83ddded7338896a91d81cc60ded198a3daa6407a268aa0d71b613bd080eda675a8b4142e8c2ae7f28d27bc074ff804489104828a552a87ac6a133cecfce295428e3ece5ffd9119c5aebf598788b670ef663d04f5177008c78ef91b638fb1a5f1b89a0cf175c3ab255420b9f150a5245de1b44f497300efa4fb91d66030de383a4ac91e1f9ed552cc2a69a118f25fe2eec0e245a9fe76cd9638e44a357eb481a81e6d2db71badcceb32465b9a756890bd3f2cb82d122ce679f6a1cc2efc18fb6bc009b30f2720d694b3c875228e072d9ff4d647f3f5c5e627146015d8f891e773d7b89a9d844ce94f7a41f86865a3a211f7b35a1109b29656bd16254af39285416bada23f73a14f781aba1b80ea1e0ea3d4c7a85a99924585c034c7c150beeb8596b44a60cdfbc3bc1713d1148f84b435cfdf52ecb7baa3a5ef9360555e0f80bf3e3869ad2e1f85d0f482368854c3c8e16da37ee28326c0e407c6b876c5fd6de0fe4f20f15235a1efab8256e2e7f2e07380f264dd10507d74dba4ff0c2fb039106ec150e757126611d7f5ba479dfe0d884f2a0dd81cae6fb3878554ac469064e4918547b55e03e3ae0076df459ca3d5883f49d1816915824315af821f9894ca424ed5e620153f159ec11c02736eb4b982ee388e22a998e4a2d94f3e1ae9c3ddbf954fea8d37e46106579cca4f52b45faf81e4aa37fb619bd41b3934e681e12a8dac3f3c1e5bf15770211c6d74fa60d41238f43f28cad87dc034fc5ec2aaa60b527776c5bf04f0b1c034795bd82427610a5fa6efbf2f7783a695155c0f343aef2b529f08b4c2297789510f2452679976e240acde3a70781bd4378ea88427ec724cbf4c7bb16a19d0dd66d42696485ea147863fca467cf30dbd51e653d7cf8d6888289521f008f7430a9c97ac4e0533f8ca15f14ca611dfbed02514e2b72933419bc61e890a6a35741e72e00ddd62b77fcb21967b5f2666cb72a81cd96ff742958d224c3b4644143bd764cea0d3c4bcf2abf79d1e592105e31030977d3351a7ee044b0d572cf8fb640e0b7a683179cbb29da2daf8e904057b9aeba1d24903d45c7e1caf9bc5e5c84dcd1b77d3a94e129f69b9656c4f4b426a4e12ee4a698df5cb941bec036749a16d3089aa1eeccad745ff29bf6aba84ea17c521495253690b9b38c2f944740c18c6fee78e7dc1b2d64ce7deadb11166597f35a0765917e4ecdae290e2ec52dbc0f1358f520e92a33690471367a61544b09f91122d95765434e337fcd09f974140b024d122fbe25b83c237687a81d8abab9c329dfced0a5d85f337027e9f7ac697afb3535c9c377af214ae3f45010c312a1a7be42b57d2dacf977d1a4188cd94c75576f4fefec061d7b5157f862a4b97c189167c63dbd083fecd606c4885766c8717bb06ebde1a315f303e2e59e674db67afec936026afc1deb04423e99056ede8b37c10cbe76eecd85c9cc8ed3005db680c627c9e966c3d1855ee3f9f85828e60e12c6a1561b91d4678bacdaa0eacff2d434680c8c408b0a796db4f134ca19fe6f16e62eb98a408c9ba1d1d6d3140d5a7ede2371c74ffa3dc63f8261bcc0d03bdc9a0510dea5478b9fe12d6d00bb72b59812632ed14b838ae8907bdd926aa05f671d30a6d05b99db53e42deec90cf0fc5e6463a2d312f1c4baf15d7712e44012335ee42c24f54a3d46733e4e1b90ff3e16be641fce1c323ed3ed3fabaf76c26020780500ac19f307b171ebde58804c1a185a75d47d5ce4ec960ddaaa0773242dacc26ae28b2e0047cc8e351b8ee97562a583dcfe9a2084e73faf75cb86450aa4f8621cda13e896640a9d2da9e48b6bdb85a5c99e93adeb081667ee80334741a163f70301d715b292fc44d8c5ef9a788727112c3e848b2610c4ac4c824d706a8643b4fc1e9f93ed4634539b648fd51a71a81dc0f34349c786447d7ccb9321608227508590bc5c31243461d5d936b174f6e0cdc8e9c77784a444d1afeda375458988a0ad050dade8f7eadb2c72793ab941cbc921c5cc16fc539ee013c22609ce7d5c3ced4b8efe40668328ec38883949e8058d5649cda33417eb6f816d03495d0e416fb38508f84f9b434513aa1d03c1dc6931aaee58016d314b314ef5c7dc94471c656c9582931521101c8572c7923dddf0d6a239b330f66f7b4cb61f033b52e05ddac996c201cfa62223a3c5ec5967ac5cb6b4d24741859fdbec313626bdd7e132f4e5b98aa9bb66697e605124ecc36a42dbbd40ceef559f790319511d4652ea02d77fda2037a12914a791dae99b26e5751cfb0e898bb1c84a76822469fea395b9791a7f6a32175d4000fc4fcbe0e7e1584f2a6f07703dc673185bde315f977319a77f1f05694bec2ff1ac40d8737829cdf0ad295598a86265afcc513c93392868a1e7eb500c9397f560b6e6e623544d4b8faea49b893c16a6158aa8f9586526821aae34ff152ec40908dc8218860ee510a49e84d08c83282bcf22a614cd6328e999e88b49f1ecb12579100802b8c8e2bb80184fb88467c0227d83985717a4612cd502c72efd7e4ce2b98ad1a0026969aec1fa87a2f440a38361df534caec9882461b750ec4a594711c7ba89c662d7f04ba8c953066f965164342877d4590a703cadbe387edf27122dae1ea84a92a9087ddfd619faa51ee0d88a73282ff4402f5791e71ee71fefcc55681066bfd5ca393b7307be1d554a3dc53e913f971d925be85b510184ba033a0b4bee3b68a9e6be8435e5f39a3b7a00986c83f9b142f9cbeeba1f4ccd42dedcb5f1045c365704d13629a53b352792e815622c5a1846b57b9dd1106b00dcad60787bfeb15a6e5f55e44b0475ac73b973a5a8f680076e0f8785cdb9ac22c9847e034831abe0de1f3ee21b6fb49246458ba1393b4601c136251f98cba73df8fafaf90ea61bc1a0ffb9fe831ed07a631559bc64169e2b0d00bad96256f37ff29f83f8a71bec570e7b22b9cf401f62498b947850bd82565ab9f465a84e5bf62b90a67df9b6f00a02270b46ded76179753ea25ee3cd21d39d8306e33766981bca5b41047c505f7187909ce60c643e507cbfcba896ae472497c6fd3e212c8257d8bba3bc259fc61c5a87d52795ac2fe0da498c3d14acfb81cb93e9960410162b4b549eb83a476d84e8386ee8e9c898c88f0b195348257e4ae9fcbe5a40a90f6d5c74e2f911b1f83af0380dcac84027db3e932088d44a3010e1e1790d535a09def85fd96551f9def38f87cd8832e70f34db3bfa1ddfa97e4f19f677e0da06cfc135de3aec68201179661e81a4ce3d67306a0f910073a79f6436c781c49cb80de599371e6288e62f1429e2216f67f72780031acb531b5d30b9ca2764bca25a9a015f0aa10d9868b04b2f3d65748de7f6d05dfbb31401920e17be7353d059a6066ee7b2115be9c57d244cf731c8edcf199c6c6deea2d3cf9cfe3b1fc4fe9d6d4088b9b3c183632064aa0c980295f78432f1ee3a2fd7d4ad641f26cab472d5de1aff17fc772a5bbce79e3ad401b97c1e0acb4a2c2d292b527761d5178000dff8afb8b84b608163aee5440513383151feb664a78a3a119a415905cd4c10692bc9c4d1ee78ae7c670fb2e9f7a075aef356f4355908f845e94bbb11ed5b6687977fb44203b7e1eb122bdfc553fb3c9186053be7542df3ad18b238682ee1bc52c5293e33ddda881d0f34f20db39cbbccc90254719f1cecc75908fd9d13b167ef190429f114711e1384c74e0ec8f919801c56fcd046daabea48de6a8171445cfe402525ffdb58e4b1ba1d53bf076861d6ff2a106974316e756277e07a34f7d0941fe14f0c3be05685cec026ab795dc9944ebcdf9a044e3c1230e586cf63f0fdbae4538a5e8294a8198ed4b776462211835a3747802dba4b5ae77d90851131b749100439d5168b2099797ac3fef261fd8c650e591c6873f4073faad38d1b0241596dd4568f105b366fb1505da38d9273b6154bba9f2b6ab5b31962818e7dd14679cf09824f89e7b1228d56d0a34a5c3440402048335d2d0b2a108066b9b212557d3a9572886c3717056f00ed38a03cbc74a2ecf47cd70e535c673f55e3ef2caa1f26d2e14cd178723ec1280c7d14e139aad62838f52d0e8eedbcf30667f530d9e386ec1822be81c7040a5a57c09002e91b3ba755900f6c59686959719a76892cfe8f0d0fb9a09293f76b918c0a5c6667388b47614216f73371e2ff89e0d2ee1a7beed8be2e94b55bd48af130b60cc9658ba2db33e85a45b8a9bb9cec65e99a026b3950a62f423f06251054a1dd7c430a950839a09642f52e046916790f0ec7609af9b58702d029f76737a454d0152d9848dd90c644c940231b0d157f747e42154994203ac28ba295017000f0cc528f9ab297d9c4cc6ba700dc74f4b8a5bada6d0448ffd8f08ecdae7ed905d46bdcfa43a77bf0fa2a12a658b146b816ba84b095d83e67cee2e5757aca5c2a194d9454db9d662b183a55d9be6b8a7c49f9c88b78c12a9a7a4cbd0ef991199cc85a6331d25ff8c2d36c50a23edfc642b276b24c65ae4479eb336a8779589d5b5735373255f600e38eaec68d69fd00592eafcbc455804ca53875b3351ac83930fe42d9ec6e36c2dba8f509409f94b2e572a1fa59c7b5b0c8db0f313f0762b71f4bf3ce4b60f19559ca2a60a0b468ad00ced6d55cd72a764735dc86998aecd48fc1f25cd85baf47c94f9b511c4c384cce73c8c112d88cac67ff58d96159b1efc49bb5a68fc56f80dbb0687cd6fd7c8f1086020e19c8bac6d1aedb479c408a4748f3bb17b856d212920c416482c4ee29ac82ef6e2e43a18bd2801a7559160a01a46ba45cf876bb23e906fa5d9b38942ceda8872edadeaaa6f86a922206fc4bc25b2f94460cdbc8f162cdc769c8390a1170568a6cb8af1ce57b4b3fa377a79dd0b37b52b36ec1089b38f6b241bdd3d097e34f3661d1417cd8f220601748bc2b250cc64390f56f2bb885aa55743222d7bb4f98f383a3dfe512db0e5786c054a9ff0ab602b4e375036d1658da6b8a9760cc38a9c28cfb49e00ea5036abd04a8100a291b1b4d4c956271e7895cd3ca1b7dec5e6094d067443a77f5e7e440ace0c7297d747082369e8b57d040599e821b155edc2a755fa8fb0eb0270b0297730c0dc120fe025518bec0e47767e1d07590a9a0c048027278434087a994ec7b6bea0c928e8ca80d067721424217495aa874232f8128d9e672320adb6eab929ce2aca8951dba0b16c99d66746bb4c64932d371408b00ea6eb30114b8da535c851847121ff5ec3374b0502b1defa56de60c28fe55f76df0135936ff705a2bdc27cc78300aa130d38b4d6eb797e13c8639c5b436a76ef69ecf09c689c622c257646dc33c74739a0c255603d8a7e6475f09b5a01aecb181685f1a91b97d4859c351e4e334cc136dd0f4d2e15ac38d43d9e826f1a86928d8d6ef92ccd207aa6d4c81fe8254aedaa14a813e9e170620fae124d04193bc9c2f6eda59fc4f4422df718895f4d2249acfe8c0b0aa90588a417ba35beba90e9007c35f3c3335181a43fe8b5b62752962b294eace179b09d734e5f8b79436cb06475dbae583138941aaf0bab46a63e7bb46cf69bbd1b2e69bc728698a6f2bc91b2fb814df7464481346fc6299cd2aba44361892b58523a6c51bc7df59f660cea2d55a51b861dc0d9dfa2ac6fc162aa2b19bcaf89a045ae8775489776050a52da3386fbe59e815a002735e8d26117691c6f34c9b9ad2b7ec83fa3c2fad77e4bccb0e06b4d472f953f325fac6a14370ce681434d710132cf2640", 0x1000, 0x1}, {&(0x7f0000001340)="b59dfb2365fba4cf3ed5b22a44226a53f6c69cc4ece7567b20fe17eb4c63d9447de24fe5113b0f2047881b1898a40ae72aed4425f5d5965acfd4b0c2ff6b10ace6d4cd41aa0a9356be4fe705b6be5d219bb451fe49eb51ca17727b8a6c94ed399f7830c3f089f90f1cb7592e98ecda43f86d9845960eae3c99b3982d5c9b9300", 0x80, 0xf019}, {&(0x7f00000013c0)="b7598205cb71d84c0d3a068dbb005277203336deaf246b880e6061ccd4ba18723b95698ef5b4ae260d8e9a42e14e744d33b1f35bbcb9b723d2aa4efc99409e16c2408e5b2d7be4f294bc05c7154c8cc9160a751f192a151ffacaf8b924fe08f4466cf97da990e72b7150f80d909510bf6efafa9783c68379e0e1f83872e403257f975c02c58dee52d20edf7ab797a2720d6eaf9859bde3b7392d884a83a09745f41e13ab13e44038af239cb9739638237519466f22feafdfee418daa1bf605f3fff64b2d478af522fc56574368935dd2571f3d51eaaf09ae7dcc6a66f79edf9163afb782974e488b1a", 0xe9, 0x2}, {&(0x7f00000014c0)="5d48d4b59d", 0x5, 0x4}], 0x8, &(0x7f0000001700)=ANY=[@ANYBLOB="760600a933a91f", @ANYRESHEX=0x0, @ANYBLOB=',journal_checksum,debug,noinit_itable,rootcontext=staff_u,fsuuid=\x0010a9aa3-b884-ea3]-8e34-9aff9b50,func=FIRMWARE_CHECK,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f686173682cffffffff06000000666f776e47b7396eba027ec770e3d907ae4a00000000000000", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$RTC_UIE_ON(r6, 0x7003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x80}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r7, 0x1}, &(0x7f0000000280)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000016c0), &(0x7f0000000000)=0xffffffffffffffc6) 02:13:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000000d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 404.815396][ T3835] usb 4-1: string descriptor 0 read error: -71 [ 404.871586][ T3835] usb 4-1: Could not set interface, error -71 [ 404.899150][ T3835] usb 4-1: USB disconnect, device number 18 02:13:38 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:38 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x0, {0x0, 0x0, 0x3}}, {0x0, 0x0, {}, {}, 0xfd}, {0x0, 0x0, {}, {0x0, 0x0, 0x2}}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x3, 0x5e7, 0x3, 0x6}, 0x4b2f, 0xf5d, 'id0\x00', 'timer0\x00', 0x0, 0x2, 0x59fe000000, 0x0, 0x2}) [ 404.940332][T15516] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 02:13:38 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045017, 0x0) 02:13:38 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045430, 0x0) [ 404.967029][ T27] audit: type=1804 audit(1591064018.762:140): pid=15530 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/169/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 405.043423][T15515] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 405.090905][T15515] File: /root/syzkaller-testdir875291760/syzkaller.dEqCal/169/cgroup.controllers PID: 15515 Comm: syz-executor.2 02:13:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 405.136697][T15540] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 02:13:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80086301, 0x0) 02:13:39 executing program 0: socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x3, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b9f205a493c43400000010000104539300"/26, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0xa0000009}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10000, 0x404000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r7) read(r7, &(0x7f0000000240)=""/19, 0x13) 02:13:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000000e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x800c5011, 0x0) 02:13:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9e0000, 0x8, 0x0, r2, 0x0, &(0x7f0000000000)={0x990971, 0x1, [], @value64}}) getpeername$tipc(r3, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:39 executing program 3: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)={r0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r3}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r3, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x8, 0x6d6, 0xb957, r3}, &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000340)={r1}) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r4) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r5) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r6) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r7) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffff9, r7, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x878b50c14b106c44, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00000000000000000000011,mode=00000000000000000000006,mode=00000000000000000007777,mode=00000000000000000000005,mode=00000000000000000006027,mode=00000000000000000000004,mode=00000000000000000000006,smackfsroot=-}}pro\x00\x00\x00\x00evvbownet1em0*{,dont_hash,audit,obj_user=$&,\x00']) 02:13:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x800c5012, 0x0) 02:13:39 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 405.592949][ T27] audit: type=1804 audit(1591064019.392:141): pid=15568 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/170/cgroup.controllers" dev="sda1" ino=16384 res=1 02:13:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {0x0, 0x0, 0x3}}], 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) getpeername$inet(r2, &(0x7f0000000480)={0x2, 0x0, @private}, &(0x7f00000004c0)=0x10) sendto(r1, &(0x7f0000000240)="8cdf3a8ae7c716dce69c82b6433da34ec3dee3dbe2e750425707cf7a47d0b37575f558359f723a4913dcf01ba515cc9d72171328439cdae0c11a270807592ba8126b0d4b9b0ed48f9e714fdf8e8296f14bd9dc48ba8eb17d64ec76303a8eac99a42e43b318d78c21a4848fb7509d8da7185f20643201f8e7647ee04d02199c312b03be2d31e2f91ed2acfe3b996298cf18e0515374c8a9da8ebd3008325f2e51", 0xa0, 0x880, &(0x7f0000000300)=@x25={0x9, @remote={[], 0x2}}, 0x80) recvmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1, &(0x7f0000000180)=""/75, 0x4b}, 0x40002020) r3 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000500)={{0x2, 0x0, @reserved="a816a8eaa526fdcfbe25d937bb559269008673d9313e92bb43a02b4cc70be87d"}}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000000104010200000000000000000200000105000100010000000a00020000000097d8b0acff7912eb334c480000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x804) 02:13:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8010500c, 0x0) 02:13:39 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="293bd8576a5864a3bffc56382e3eba4ef290fe4c40ebbbc2f337f8deafe2cacce47842f7091268afba278220317032b87608bfe2e0c5cafcfe5c7945c965423546703c03597860e775ea0f6da80f5e79535b66c119acabaaf5fe04bbcbe96b9269ed2d68695c0873ea7385d802c29da2e71f52d55d4c737be97c3f289125a29765e3c9403ba6d85e4a092484b161f17ea94a", 0x92, 0x80000000}, {&(0x7f0000000180)="d4fa4d823d72d9c44bb0b33f1e7c009926ef8aac19491c68e88cdd3b205203c2bce1a709d1d6ae4f", 0x28, 0x6}, {&(0x7f0000000800)="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", 0x1000, 0x59}], 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x30, 0x35]}}, {@huge_advise={'huge=advise', 0x3d, '/dev/bsg\x00'}}, {@mode={'mode', 0x3d, 0x1ff}}], [{@uid_lt={'uid<', 0xee00}}]}) [ 405.873408][T15592] tmpfs: Bad value for 'huge' [ 405.929730][T15597] tmpfs: Bad value for 'huge' [ 405.961703][ T8708] usb 4-1: new high-speed USB device number 19 using dummy_hcd 02:13:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @default, @bpq0='bpq0\x00', 0x7, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x400) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) 02:13:40 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x40, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:40 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8010500d, 0x0) 02:13:40 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x0) 02:13:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000000f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 406.274522][ T8708] usb 4-1: device descriptor read/64, error 18 [ 406.478016][ T27] audit: type=1804 audit(1591064020.272:142): pid=15623 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/171/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 406.681626][ T8708] usb 4-1: device descriptor read/64, error 18 [ 406.951554][ T8708] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 407.231539][ T8708] usb 4-1: device descriptor read/64, error 18 [ 407.631584][ T8708] usb 4-1: device descriptor read/64, error 18 [ 407.751700][ T8708] usb usb4-port1: attempt power cycle [ 408.461596][ T8708] usb 4-1: new high-speed USB device number 21 using dummy_hcd 02:13:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:13:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 02:13:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80105013, 0x0) 02:13:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) bind(r1, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x0, 0x4}, 0x80) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x3}, {}, {0x0, 0x0, {0x2}}, {}, {}], 0xa0) 02:13:42 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000180)='cpuset\x00') sendfile(r4, r6, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045003, 0x0) [ 408.621627][ T8708] usb 4-1: device descriptor read/8, error -71 02:13:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80105014, 0x0) 02:13:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 408.744653][ T27] audit: type=1804 audit(1591064022.542:143): pid=15640 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/172/cgroup.controllers" dev="sda1" ino=16369 res=1 02:13:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvfrom(r0, &(0x7f0000000800)=""/4096, 0x1000, 0x10000, &(0x7f0000000080)=@llc={0x1a, 0x30d, 0xff, 0x6, 0xca, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x1}, {0x0, 0x0, {}, {}, 0xff}, {0x80, 0x0, {}, {0x2}, 0x0, 0x1}, {}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) fsmount(r2, 0x1, 0x4) [ 408.841704][ T8708] usb 4-1: device descriptor read/8, error -71 02:13:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045002, 0x0) 02:13:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 02:13:42 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x50000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x8c4, 0x3f, 0x8, 0x8000, 0x4, 0x2}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045003, 0x0) [ 409.341588][ T8708] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 409.441796][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 409.562702][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 409.570941][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 409.579480][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 409.588602][ T8708] usb 4-1: config 0 has no interface number 0 [ 409.594864][ T8708] usb 4-1: config 0 has no interface number 1 [ 409.600997][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 409.611881][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 409.625000][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 409.636124][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 409.649521][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 409.656441][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 409.663346][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 409.672520][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.682504][ T8708] usb 4-1: config 0 descriptor?? [ 409.961838][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 409.994754][ T8708] usb 4-1: Could not set interface, error -71 [ 410.004981][ T8708] usb 4-1: USB disconnect, device number 22 [ 410.711588][ T8708] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 410.951674][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 411.071717][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 411.079880][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 411.088414][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 411.097700][ T8708] usb 4-1: config 0 has no interface number 0 [ 411.104173][ T8708] usb 4-1: config 0 has no interface number 1 [ 411.110274][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 411.121269][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 411.134553][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 411.145817][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 411.159111][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 411.165964][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 411.172748][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 411.181824][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.190653][ T8708] usb 4-1: config 0 descriptor?? 02:13:45 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x221000, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="3ae7a08b6e63cc61d4aaa01cc8624113d451b6e3327b0769765c9078be508956ea9176f17c66cb524ae7d153643bc0a73a69535e1c2184e6b1ec5e5c58b7f8ba79a92edc3151d027000f9bde048e29", @ANYRES32=r0, @ANYBLOB="b6975e70ed12d546c45c123748ffedd8fe4edf1111be0d9b6dff53a73baa7755afedec04800818c8cfaa786a43a6f4da00f1dad7e5d3b3d814b262c00470d3618eddb7163365bc11463269a51a0d4ed680d1adeaa3b28d3c8284c17ba164dbd4c135f2b3fa6f608e3e355aa812d1340297bf269e1fefcc173e4c847af352196a9eafc0dc0884e655649ccdf2264a5cdc08d510d7233c25cc353594572e", @ANYRESDEC=r0], 0x0) 02:13:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x1}}, {0x0, 0x0, {0x0, 0xf0}, {}, 0x0, 0x1}, {}, {}, {}], 0xa0) 02:13:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000011) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0x2, 0x1}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) [ 411.491664][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 411.511704][ T8708] usb 4-1: Could not set interface, error -71 02:13:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 411.543586][ T8708] usb 4-1: USB disconnect, device number 23 02:13:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045004, 0x0) 02:13:45 executing program 1: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getpeername$packet(r1, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) getresuid(&(0x7f0000001980), &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in=@empty, @in=@local, 0x4e24, 0x3ff, 0x4e20, 0x4, 0x2, 0x0, 0x80, 0x88, r2, r3}, {0x1, 0xff, 0x5, 0x7, 0x1, 0x2, 0x1, 0x9}, {0x7f, 0xb5a, 0x779, 0xfffffffffffffff7}, 0xefd2, 0x6e6bbf, 0x2, 0x1, 0x2}, {{@in6=@ipv4={[], [], @remote}, 0x4d2, 0x6c}, 0xa, @in=@local, 0x3505, 0x2, 0x2, 0x9, 0x0, 0x9}}, 0xe8) 02:13:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x8) [ 411.639600][ T27] audit: type=1804 audit(1591064025.432:144): pid=15703 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/173/cgroup.controllers" dev="sda1" ino=16366 res=1 02:13:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 02:13:45 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) rt_sigsuspend(&(0x7f0000000080)={[0xa45]}, 0x8) 02:13:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000040)=0x7) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045003, 0x0) 02:13:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x0, 0x0, 0x1}}, {0x0, 0x0, {}, {0x0, 0xff}}, {0x0, 0x0, {}, {0x0, 0xff}}, {0x0, 0x0, {}, {0x1}, 0x0, 0xff}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0x6, 0x2, 0x1ff, 0x40000}) 02:13:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045006, 0x0) 02:13:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000012) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0x0, 0x8, 0x0, 0x2}) 02:13:46 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045008, 0x0) 02:13:46 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x7) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x94, 0x5, 0x6, "60ab69bab845fe98da1a6885ebed89e6", "4fbc148bd11f5ee7fb705837994e778386c4e0652482cf888dd89be441b8fb4f1c2c4511e1323baea55f8ffe3066464f4531f043b7023c2cd91cfe19465c97d2f8b19096a37ac8c93ea5706b31bd82c9bf9c1d751260b17d4b12f578270678da7aa569567e7a650d08ea258bd615197eccba356ddb77e7974120fd5e254ab7"}, 0x94, 0x3) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x1}, {}, 0x0, 0xff}, {0x0, 0x0, {}, {0x1}, 0x0, 0xff}, {}, {0x0, 0x4, {0x0, 0x0, 0x3}}, {}], 0xa0) [ 412.307324][ T27] audit: type=1804 audit(1591064026.102:145): pid=15766 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/174/cgroup.controllers" dev="sda1" ino=16035 res=1 02:13:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = dup3(r0, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045003, 0x0) 02:13:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0x0, 0x8, 0x0, 0x2}) 02:13:46 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045009, 0x0) [ 412.511833][ T8708] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 412.781792][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 412.921898][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 412.930137][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 412.939594][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 412.949262][ T8708] usb 4-1: config 0 has no interface number 0 [ 412.956030][ T8708] usb 4-1: config 0 has no interface number 1 [ 412.963065][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 412.973928][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 412.986968][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 412.998042][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 413.011325][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 413.018159][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 413.024954][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 413.034029][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.048194][ T8708] usb 4-1: config 0 descriptor?? 02:13:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x9, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x0, 0xff}}, {}, {0x400000000000000}, {0x0, 0x0, {}, {0x0, 0xf0}}, {}], 0xa0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 02:13:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0x0, 0x8, 0x0, 0x2}) 02:13:49 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc004500a, 0x0) 02:13:49 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045003, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x2, 0x0) sendfile(r4, r0, 0x0, 0x8) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f00000000c0)={0x6, "bb7a0d5facd5b7ba43ee09205dd7ce1578f21a57f2a43a5cc8b7c4974c185b95", 0x1, 0x1}) 02:13:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:49 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 415.251693][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 415.271840][ T8708] usb 4-1: Could not set interface, error -71 02:13:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x0, 0x0, 0x2}) 02:13:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x82042, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) 02:13:49 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) 02:13:49 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045878, 0x0) [ 415.332818][ T8708] usb 4-1: USB disconnect, device number 24 [ 415.349551][ T27] audit: type=1804 audit(1591064029.142:146): pid=15799 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/175/cgroup.controllers" dev="sda1" ino=16242 res=1 02:13:49 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x281c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) poll(&(0x7f0000000040)=[{r0, 0x6130}, {r1, 0x2000}], 0x2, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045003, 0x0) 02:13:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x0, 0x0, 0x2}) 02:13:49 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045878, 0x0) 02:13:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x2d0680, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r4}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r4, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x7ff, 0x9913, 0x72f0, 0x1, 0x10001}, 0x14) r5 = pidfd_getfd(r2, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x20, r7, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x7f}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c005}, 0x1) 02:13:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x0, 0x0, 0x2}) 02:13:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 415.802336][ T8708] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 415.818810][ T27] audit: type=1804 audit(1591064029.612:147): pid=15850 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/176/cgroup.controllers" dev="sda1" ino=15971 res=1 [ 416.061683][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 416.181852][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 416.194494][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 416.204986][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 416.215374][ T8708] usb 4-1: config 0 has no interface number 0 [ 416.223003][ T8708] usb 4-1: config 0 has no interface number 1 [ 416.229509][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 416.241180][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 416.254561][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 416.266805][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 416.280573][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 416.287655][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 416.294698][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 416.304210][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.314097][ T8708] usb 4-1: config 0 descriptor?? [ 416.591874][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 416.611737][ T8708] usb 4-1: Could not set interface, error -71 [ 416.625214][ T8708] usb 4-1: USB disconnect, device number 25 [ 417.321776][ T3836] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 417.581766][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 417.701777][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 417.710023][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 417.720297][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 417.730084][ T3836] usb 4-1: config 0 has no interface number 0 [ 417.736930][ T3836] usb 4-1: config 0 has no interface number 1 [ 417.743972][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 417.755398][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 417.769022][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 417.780758][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 417.794645][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 417.801406][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 417.809464][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 417.819137][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.829921][ T3836] usb 4-1: config 0 descriptor?? 02:13:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x2, 0xff}}, {}, {}, {}, {0x0, 0x0, {0x1}}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x1) 02:13:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0189436, 0x0) 02:13:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:13:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000015) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:51 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0xffd8, [0x7, 0x1, 0x4, 0x400, 0x5, 0x400, 0x1f, 0x40, 0x5, 0x7, 0xf69, 0x0, 0x9, 0x3f, 0x6, 0x6b09, 0x1, 0xbf0, 0x8001, 0x56, 0x1f, 0x1, 0x8, 0x0, 0xf5, 0x6, 0x8, 0x3, 0x9, 0x3, 0x9, 0x0, 0x6, 0x0, 0x3ff, 0x7fff, 0xffff, 0x200f, 0x6, 0x7, 0xff0f, 0x8000, 0x3, 0x9, 0x8, 0x4, 0x3], 0xc}) [ 418.113842][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 418.141950][ T3836] usb 4-1: Could not set interface, error -71 [ 418.175659][ T3836] usb 4-1: USB disconnect, device number 26 02:13:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:52 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:13:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x1f, @local, 0x8000}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r1, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r1, 0x20}, 0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:13:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc02064a4, 0x0) [ 418.312783][ T27] audit: type=1804 audit(1591064032.112:148): pid=15917 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/177/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 418.367354][T15926] FAULT_INJECTION: forcing a failure. [ 418.367354][T15926] name failslab, interval 1, probability 0, space 0, times 0 [ 418.394042][T15926] CPU: 0 PID: 15926 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 418.402386][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.412435][T15926] Call Trace: [ 418.415769][T15926] dump_stack+0x1e9/0x30e [ 418.420113][T15926] should_fail+0x433/0x5b0 [ 418.424556][T15926] ? tomoyo_realpath_from_path+0xd8/0x630 [ 418.430302][T15926] should_failslab+0x5/0x20 [ 418.434810][T15926] __kmalloc+0x74/0x330 [ 418.438967][T15926] ? tomoyo_realpath_from_path+0xcb/0x630 [ 418.444687][T15926] tomoyo_realpath_from_path+0xd8/0x630 [ 418.450244][T15926] tomoyo_path_number_perm+0x18f/0x690 [ 418.455758][T15926] security_file_ioctl+0x55/0xb0 [ 418.460718][T15926] __se_sys_ioctl+0x48/0x160 [ 418.465332][T15926] do_syscall_64+0xf3/0x1b0 [ 418.469866][T15926] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 418.475763][T15926] RIP: 0033:0x45ca69 [ 418.479660][T15926] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.499259][T15926] RSP: 002b:00007f7f3422ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.507663][T15926] RAX: ffffffffffffffda RBX: 00000000004f2b40 RCX: 000000000045ca69 02:13:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc020660b, 0x0) 02:13:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0405602, 0x0) 02:13:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 418.515629][T15926] RDX: 00000000200000c0 RSI: 000000000000560a RDI: 0000000000000003 [ 418.523599][T15926] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 418.531592][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 418.539558][T15926] R13: 0000000000000673 R14: 00000000004c96c1 R15: 00007f7f3422b6d4 02:13:52 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0a85352, 0x0) 02:13:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000016) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:52 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 418.701760][ T3836] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 418.827677][ T27] audit: type=1804 audit(1591064032.622:149): pid=15946 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/178/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 418.927965][T15926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 418.941733][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 419.061993][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 419.070195][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 419.101774][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 419.110753][ T3836] usb 4-1: config 0 has no interface number 0 [ 419.131715][ T3836] usb 4-1: config 0 has no interface number 1 [ 419.137832][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 419.164011][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 419.189795][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 419.231759][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 419.280998][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 419.304687][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 419.311436][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 419.348057][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.375574][ T3836] usb 4-1: config 0 descriptor?? [ 419.651881][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 419.671746][ T3836] usb 4-1: Could not set interface, error -71 [ 419.691872][ T3836] usb 4-1: USB disconnect, device number 27 [ 420.391800][ T8708] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 420.651784][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 420.781961][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 420.793614][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 420.808521][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 420.820997][ T8708] usb 4-1: config 0 has no interface number 0 [ 420.833184][ T8708] usb 4-1: config 0 has no interface number 1 [ 420.839367][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 420.859444][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 420.880049][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 420.898253][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 420.918823][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 420.934201][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 420.947002][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 420.957591][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.974952][ T8708] usb 4-1: config 0 descriptor?? 02:13:54 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="130100000307670891050090f1e2000000010902240005007873004904020022ffcde000fc038f02000000000008f65915806ac041af902dadc3a792bd5d697b8ce4ab0ba82ef00dfaf5586145ac6825e23046203ca1f7cc6b7844d1a5728586d0c5497a4da244c4a07f72011f9b3bfe68a591643d79af873bb581ee5ed00266cee9f09d5fe34db8990342773c36b5b6b7e0f540d2e0686128c7f47dc4277d6e925af092"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x200f, 0x1}) 02:13:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x8, {{0x2, 0x4e20, @remote}}}, 0x88) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:13:54 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:54 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:13:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000017) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 421.191828][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 421.222909][ T8708] usb 4-1: Could not set interface, error -71 [ 421.257822][T15992] FAULT_INJECTION: forcing a failure. [ 421.257822][T15992] name failslab, interval 1, probability 0, space 0, times 0 [ 421.273264][ T8708] usb 4-1: USB disconnect, device number 28 [ 421.313601][T15992] CPU: 1 PID: 15992 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 421.321938][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.331991][T15992] Call Trace: [ 421.335291][T15992] dump_stack+0x1e9/0x30e [ 421.339632][T15992] should_fail+0x433/0x5b0 [ 421.342910][ T27] audit: type=1804 audit(1591064035.142:150): pid=16005 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/179/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 421.344051][T15992] ? tomoyo_encode2+0x25a/0x560 [ 421.344062][T15992] should_failslab+0x5/0x20 [ 421.344077][T15992] __kmalloc+0x74/0x330 [ 421.381237][T15992] tomoyo_encode2+0x25a/0x560 [ 421.385921][T15992] tomoyo_realpath_from_path+0x5d6/0x630 [ 421.391567][T15992] tomoyo_path_number_perm+0x18f/0x690 [ 421.397060][T15992] security_file_ioctl+0x55/0xb0 [ 421.402002][T15992] __se_sys_ioctl+0x48/0x160 [ 421.406592][T15992] do_syscall_64+0xf3/0x1b0 [ 421.411101][T15992] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 421.417081][T15992] RIP: 0033:0x45ca69 [ 421.420975][T15992] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.441355][T15992] RSP: 002b:00007f7f3422ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.449764][T15992] RAX: ffffffffffffffda RBX: 00000000004f2b40 RCX: 000000000045ca69 02:13:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:13:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 421.457731][T15992] RDX: 00000000200000c0 RSI: 000000000000560a RDI: 0000000000000003 [ 421.465695][T15992] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 421.473660][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 421.481627][T15992] R13: 0000000000000673 R14: 00000000004c96c1 R15: 00007f7f3422b6d4 [ 421.502476][T15989] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 421.550014][T15989] File: /root/syzkaller-testdir875291760/syzkaller.dEqCal/179/cgroup.controllers PID: 15989 Comm: syz-executor.2 [ 421.575781][T15992] ERROR: Out of memory at tomoyo_realpath_from_path. 02:13:55 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:13:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) 02:13:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x10000000000001, 0x0, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) sched_getscheduler(r2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), 0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x55) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000084}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000240)="62e3e0f5b5b4c3360898ddb723eb69d9d195e247b21f01d669e65aa88d5bb2fa62d0cfeb2ff91a7d92c23d49685bffeb1e4dba0c4a088b1cd7567c4db5bca33d1b346b564b37e201b7fd44a104bcc9465c42bb71c666545ebdf6f4b83e956286d0fa2765eb4508e72c9418ec7716e3e7b6a5f9ca95272ece40f6577228f669ededd59ddcb0b8c856", 0x88) [ 421.718716][T16018] FAULT_INJECTION: forcing a failure. [ 421.718716][T16018] name failslab, interval 1, probability 0, space 0, times 0 02:13:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 421.778809][T16018] CPU: 0 PID: 16018 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 421.787411][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.797461][T16018] Call Trace: [ 421.800751][T16018] dump_stack+0x1e9/0x30e [ 421.805084][T16018] should_fail+0x433/0x5b0 [ 421.809509][T16018] ? tomoyo_encode2+0x25a/0x560 [ 421.814358][T16018] should_failslab+0x5/0x20 [ 421.818858][T16018] __kmalloc+0x74/0x330 [ 421.823018][T16018] tomoyo_encode2+0x25a/0x560 [ 421.827700][T16018] tomoyo_realpath_from_path+0x5d6/0x630 [ 421.833340][T16018] tomoyo_path_number_perm+0x18f/0x690 [ 421.838841][T16018] security_file_ioctl+0x55/0xb0 [ 421.843780][T16018] __se_sys_ioctl+0x48/0x160 [ 421.848370][T16018] do_syscall_64+0xf3/0x1b0 [ 421.852877][T16018] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 421.858763][T16018] RIP: 0033:0x45ca69 02:13:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0xb7d2, 0x8, 0x0, 0x2}) [ 421.862651][T16018] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.882245][T16018] RSP: 002b:00007f7f3422ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.890649][T16018] RAX: ffffffffffffffda RBX: 00000000004f2b40 RCX: 000000000045ca69 [ 421.898641][T16018] RDX: 00000000200000c0 RSI: 000000000000560a RDI: 0000000000000003 [ 421.906608][T16018] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 421.914575][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 421.922540][T16018] R13: 0000000000000673 R14: 00000000004c96c1 R15: 00007f7f3422b6d4 [ 422.001871][ T8708] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 422.146859][T16018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.291895][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 422.421925][ T8708] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 422.441758][ T8708] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 422.450708][ T8708] usb 4-1: New USB device found, idVendor=0591, idProduct=9000, bcdDevice=e2.f1 [ 422.481726][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.503159][ T8708] usb 4-1: config 0 descriptor?? [ 422.781806][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 422.792230][ T8708] usb 4-1: USB disconnect, device number 29 [ 423.521834][ T2479] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 423.761790][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 423.881858][ T2479] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 423.901752][ T2479] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 423.911055][ T2479] usb 4-1: New USB device found, idVendor=0591, idProduct=9000, bcdDevice=e2.f1 [ 423.931881][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.945953][ T2479] usb 4-1: config 0 descriptor?? 02:13:58 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000307670899111890f1e20000000b0902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac08bfcab4779385c3b5ac6e6b2f46ff35fb0a12fc071bffee28a6da448dd1af7eb8289aa57d66deb0a68626b4317b70a1b9000d2d7fcf608c5bde10242c3000b2e68fc20ecb476515b745757add4ac0879ab5e7c2b0639d145147a47131e1ed528175a2b7b5e2331b7bf215a33016a737a85c65d50e5dfef32f807330085c38e6cff6a3ae"], 0x0) 02:13:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000018) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:13:58 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x34902, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000001100)=0x6) sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000001140)={[0x1f, 0x1, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0xc4d, 0xffffffff, 0xfffffffffffffc01, 0xffff, 0x4, 0x81, 0x292, 0x0, 0x5], 0x1, 0x8000}) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f00000000c0)={{0x2, 0x200, 0x6, 0xe376, 0x3, 0xe04}, 0x2fb, [0x4, 0xffffff5b, 0x5, 0x9, 0xa5, 0x7ff, 0x6, 0x8, 0xfffffe00, 0x8001, 0x1f, 0x7, 0x8, 0x38, 0xffff, 0x9, 0x3, 0x8, 0x8, 0xee, 0xbb63, 0x790b, 0x5, 0x765, 0x3, 0x2a2, 0x7fff, 0xdfb0, 0x200000, 0x0, 0x7, 0x7, 0x96, 0x80000001, 0x401, 0x7f, 0x8f28, 0x1, 0x7, 0x1, 0x2, 0x101000, 0x0, 0x7f, 0x9, 0xfffffffb, 0x7fff, 0x1, 0x5, 0x44dc60f2, 0xda4, 0xffffffe1, 0x0, 0x1f, 0x3, 0x8, 0x1000, 0x2, 0xea2, 0x9, 0x3, 0x40, 0x10001, 0x1, 0xfffffffa, 0x8229, 0x7fff, 0x8, 0xa8, 0x1, 0xee5, 0x8, 0x7f00, 0x80000001, 0x1, 0x3, 0x1, 0x101, 0x4, 0x8, 0x2, 0x6, 0x1f, 0x5, 0x3, 0x8, 0x3, 0xfffffff7, 0x2, 0xfffffffc, 0x1bf9, 0x7, 0x7fff, 0x7, 0xbd3, 0x7f, 0x6, 0x9, 0x6000000, 0x10000, 0x7ff, 0xfffffffa, 0x978, 0x7, 0x7ff, 0x9, 0x9, 0x400, 0x7, 0x5, 0x5, 0x1f, 0x81, 0x8, 0x401, 0x1f, 0x40, 0x7f, 0x64, 0x1, 0x5, 0x3, 0x0, 0x7, 0x9, 0x19b4, 0x1f, 0x1, 0x687, 0x6, 0x9, 0x7, 0x5, 0x2, 0x2, 0x3, 0x4, 0x5, 0x1, 0x0, 0x3, 0x9, 0x9, 0x8000, 0x5, 0xc0f9, 0x80, 0x80000001, 0x4, 0xfff, 0x2, 0x100, 0x0, 0x3, 0x81, 0x9, 0x5, 0x7, 0x9, 0x9a, 0x4, 0x642, 0x7, 0x7, 0x4, 0xfffffd52, 0x6, 0x3, 0x2, 0x800, 0x76, 0x7, 0x5, 0x1f, 0x6, 0x6, 0x101, 0x3, 0x81, 0x800, 0x6, 0x100, 0x6, 0x1, 0xffff0001, 0x8, 0x5, 0x1, 0x2, 0x1, 0xfffff000, 0x3, 0x3a9e477c, 0x1, 0x6, 0x8cf, 0x100, 0x1000, 0x8, 0x401, 0x2, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7fff, 0x401, 0x80000001, 0x3, 0x40, 0x6, 0x400, 0x3, 0x8, 0x7, 0x1, 0x5, 0x3, 0x9, 0xfffffff8, 0xc80, 0x4, 0xfffffff7, 0x600e, 0x80000001, 0x3, 0x2, 0x4, 0x5, 0x6, 0x7f, 0x1, 0x2, 0x9, 0x1, 0x1, 0x5, 0x6, 0x9, 0x2, 0xd7, 0x1, 0x4, 0x6, 0x100, 0xffff, 0x6, 0x4, 0x3, 0x9, 0x7, 0x1ff, 0x100, 0x80000001, 0x0, 0x80000000, 0x9, 0x1, 0x8, 0x9, 0x73fa, 0x0, 0xffffffff, 0xce, 0x4, 0x0, 0x6, 0x8, 0x4, 0x5, 0x2, 0x9, 0x60, 0xfffffffe, 0xb08e, 0x3, 0x40, 0xaa46, 0x5, 0x101, 0x170c0000, 0x2, 0x1, 0x9, 0xfffffff7, 0xfff, 0x3, 0x1000, 0x8, 0x1, 0x2, 0x1, 0x7f, 0x5, 0x8, 0x3, 0x2, 0x46, 0x7, 0x7, 0x0, 0x6, 0x1, 0x6, 0xfffffffb, 0x5d, 0x1, 0x5, 0xbac, 0x3, 0x9, 0x7, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x0, 0x2, 0x1, 0x3ff, 0x2, 0x80000001, 0x59, 0x401, 0x1, 0xfffffe01, 0x1, 0xffff8880, 0x0, 0xffffff7f, 0x20, 0x1, 0x3, 0x1, 0x599, 0x2, 0x2, 0xf361, 0x2, 0x4, 0x7, 0xedc, 0xfffffffe, 0x0, 0x7, 0x61, 0x3ff, 0x0, 0x3, 0xdc7, 0x10000, 0x6, 0xad0c, 0xfffffaac, 0xffffffff, 0xfffff8ee, 0x7ff, 0x400, 0x9, 0x80000000, 0x6, 0x401, 0x0, 0x2, 0x4, 0x7, 0x8, 0xffffffff, 0x3ff, 0x7, 0x10000, 0x9, 0x2, 0x3f, 0x800, 0x3, 0x9a0e, 0x9, 0x8, 0x0, 0x6382, 0xfffffffc, 0x4, 0x8, 0xebb5cf3, 0xffffffff, 0x1, 0xaf, 0xfffffffc, 0x7, 0x80, 0x81, 0x9, 0x4, 0x0, 0x19c, 0x8, 0xfffffffc, 0x0, 0x26, 0x1, 0x0, 0x4, 0xa5d4, 0x4, 0x80, 0x9, 0x9, 0xf486e574, 0x1f, 0x5, 0x8, 0x5, 0x2, 0xfff, 0x800, 0x6, 0x4, 0x9, 0xfffffffa, 0x2, 0x7fff, 0x6, 0x8, 0x3, 0x6, 0x6, 0x6, 0x9, 0x5, 0x3, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x1, 0x3, 0x8, 0x6, 0x5, 0xd29, 0x5, 0x5, 0x3, 0x7, 0x4, 0x0, 0x9, 0x2, 0x8001, 0x7, 0x7, 0x9, 0x5, 0x5f, 0x3477, 0x5, 0x1f, 0x8d3, 0x2, 0x80, 0x6, 0xbc7, 0x4, 0x1f, 0x7, 0x9b2c, 0x1, 0x4, 0xffff, 0x7, 0xfffffff8, 0xff, 0x8, 0x8, 0x6, 0x5fdd773, 0x8, 0x2, 0x4, 0x71, 0x200, 0x7, 0x9, 0x3ff, 0xffff, 0x100, 0x100, 0x0, 0x101, 0x1, 0x3fffc00, 0x8, 0x7, 0x6, 0x2, 0xffffffff, 0x89, 0xfff, 0x0, 0x1, 0x9, 0x80, 0x2, 0x1, 0xb4, 0x1, 0x29a4, 0x3, 0x8, 0x0, 0x0, 0x5ab2, 0x25d, 0x85, 0xb50, 0x40, 0x3, 0x7fff, 0xef1, 0x2, 0x7, 0x7, 0x1, 0x326, 0xfffff72d, 0x5, 0x200, 0x1, 0xcb, 0x5, 0x3ff, 0xfffffff9, 0x1, 0x5, 0x5d, 0x3, 0x1f5, 0xfffffffe, 0x7, 0x20, 0x7, 0xed7a, 0x3, 0x9, 0x2, 0x9ecb, 0x5b, 0x3, 0x7, 0x1, 0x100, 0x5, 0x80, 0x8000, 0x3ff, 0x8, 0x1, 0xaa, 0x40, 0x3, 0x7, 0x100, 0x0, 0x4, 0x4f30, 0x200, 0x40d, 0x10001, 0x4, 0x2, 0x9, 0x1, 0x8, 0x8c, 0x1fc, 0xfffffffd, 0xff, 0xd6, 0x4, 0x81, 0x0, 0x40, 0x100, 0x7, 0xd5a, 0xffff8001, 0x6, 0x2, 0x7, 0x7, 0xffff, 0xeb0e, 0x5, 0x7fff, 0x41, 0xfe1, 0x1, 0x3, 0x3, 0x9, 0x4, 0x9, 0x4, 0x3, 0x80000001, 0x1ff, 0x2, 0x3, 0x2, 0x1, 0x3, 0x5c, 0x800, 0x3f, 0x0, 0x6, 0x7ff, 0x80, 0x2, 0x2, 0x5, 0x1000, 0x40, 0x8001, 0x40, 0x81, 0xffffffff, 0x0, 0x7ff, 0x81, 0x20, 0x40, 0x9, 0x4, 0x0, 0x9, 0x1, 0xc3dd, 0x8, 0x10001, 0x100, 0x5, 0x1f, 0xfffff801, 0x3ff, 0x2abe8f3a, 0x0, 0x200, 0x0, 0x80000001, 0x6586, 0x7fff, 0x9, 0x8481, 0x7f, 0xfffff559, 0x2, 0xe22, 0x0, 0x6d, 0xda87, 0x7, 0x0, 0x1e77, 0x81, 0x2, 0x9, 0x4, 0xffff, 0x10001, 0x1, 0x8, 0x6, 0x7fffffff, 0x9, 0x2945, 0xc7db, 0x8, 0x4, 0x1, 0xfffff801, 0xffffffff, 0x0, 0x29, 0x8000, 0x2, 0x6, 0xffffffb2, 0x3, 0x0, 0x3ff, 0x4, 0x40, 0x7, 0x1, 0x9, 0xfffffff9, 0x6, 0x6, 0x4, 0x7f, 0x8, 0x6, 0x3, 0x9, 0x7, 0x0, 0xaa, 0x3, 0x20000000, 0x6, 0xffff8001, 0x2, 0x1, 0x0, 0x1, 0x80000000, 0x9, 0x7, 0x0, 0x1000, 0x4, 0x8, 0x4, 0x62, 0x5, 0x3, 0x6, 0x7, 0xff, 0xe7f1, 0x7fffffff, 0x8, 0x0, 0x9, 0x8000, 0x5, 0x2, 0x7, 0x8, 0x5, 0xea, 0x81, 0xfffff000, 0x7, 0xc00000, 0x3, 0xc, 0x3c, 0x9, 0x5, 0x7, 0x7f, 0x7, 0xd8, 0xfffffff7, 0x3, 0x4, 0x3ff, 0x9, 0x16, 0x8001, 0x5, 0x3f, 0x4, 0x0, 0x3ff, 0xbc3, 0x7fffffff, 0x8000, 0x0, 0x30, 0x4, 0x8000, 0xffff8001, 0x7, 0x2, 0xffff79f5, 0x5, 0x1f, 0x1, 0x8, 0x80000000, 0x7b27, 0x0, 0x8, 0x3, 0x1000, 0x8001, 0x3, 0x3, 0x1, 0x20, 0xfffff7c6, 0x6, 0x1c0000, 0x937, 0xfff, 0x7fffffff, 0xc1, 0x5, 0x4, 0x101, 0x40, 0x6, 0x8, 0x1, 0x8, 0x3ec8, 0xfffffffa, 0x9, 0x3, 0x6, 0xff, 0x194, 0x7, 0x138d, 0x4, 0x81, 0x5, 0x400, 0x5, 0x1, 0xc81a, 0x589, 0x7, 0x7e66, 0x3, 0x3f, 0x1152, 0xa417, 0x100, 0x51, 0x3f, 0x1, 0x1000, 0xfff, 0x8000, 0x3acfa571, 0x6, 0x1f, 0xca7, 0x40, 0x6ed, 0x2, 0x2, 0xd9, 0x2, 0x954, 0x1000, 0x4, 0x0, 0x7, 0x7, 0x3765, 0xfffffff8, 0xd8f, 0xeb, 0x8e8, 0x6, 0x5, 0x3c, 0x7, 0xffff, 0x65, 0xffff6194, 0x2, 0x2, 0x7, 0x5, 0x9, 0x9, 0xfffff79d, 0x3, 0xffff277b, 0x26d4, 0x1f, 0x81, 0xfff, 0x3, 0x8, 0x3f, 0x80000000, 0x81, 0x7ff, 0x200, 0x7fffffff, 0x4, 0x6, 0x8, 0x0, 0x0, 0x7, 0x4, 0x1, 0x1, 0x1, 0x6, 0x1f, 0x3, 0x7, 0x6, 0x40, 0x401, 0x5, 0x7f, 0x3, 0x9, 0xe784, 0xfffffffc, 0x3, 0x10000, 0x2, 0x3, 0x1000, 0x80000001, 0x3f, 0x1, 0x2, 0x9, 0x7ea, 0x2, 0x5d36000, 0xfff, 0x3, 0x451f, 0x2, 0x4, 0x0, 0x1, 0x80000000, 0x8, 0x8, 0xfc, 0x80000001, 0x8, 0x3, 0x6, 0x8000, 0x6, 0x5, 0x8, 0x81, 0x9, 0x80, 0xffff, 0xfffffffe, 0x9, 0x9, 0x1, 0x3, 0x7, 0xd3, 0x8, 0xa64, 0x7, 0x400, 0x5, 0xffffff9f, 0x6, 0x3ff, 0x400, 0x8, 0x79, 0x0, 0x1f, 0x7, 0x3, 0x5, 0x9, 0x1ea, 0x200, 0x2b4a, 0x81c, 0x0, 0x0, 0x7829, 0xfffff87a, 0x2, 0x7, 0xffff, 0x9, 0x6, 0xd67, 0x3ff, 0x5, 0xffff, 0x8001, 0x1ff, 0x4bb, 0x401, 0x69, 0x5, 0x4, 0xcea0e2cf, 0x911, 0x5, 0x6, 0x998, 0xf373, 0x7f, 0xee, 0xc0, 0x6, 0x7, 0xfee, 0x81, 0x8, 0x6, 0x1000, 0x3, 0xc178, 0x0, 0x7, 0x8, 0x1, 0x401, 0x10000, 0x401]}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) 02:13:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 02:13:58 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 424.241833][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 424.275256][ T2479] usb 4-1: USB disconnect, device number 30 02:13:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 424.374043][T16060] device bridge12 entered promiscuous mode [ 424.411098][T16066] device bridge_slave_0 left promiscuous mode 02:13:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 424.418360][ T27] audit: type=1804 audit(1591064038.212:151): pid=16064 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/180/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 424.470552][T16066] bridge11: port 1(bridge_slave_0) entered disabled state 02:13:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:13:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 424.604911][T16066] bridge12: port 1(bridge_slave_0) entered blocking state [ 424.617990][T16066] bridge12: port 1(bridge_slave_0) entered disabled state [ 424.659766][T16066] device bridge_slave_0 entered promiscuous mode [ 424.678495][T16066] bridge12: port 1(bridge_slave_0) entered blocking state [ 424.685777][T16066] bridge12: port 1(bridge_slave_0) entered forwarding state 02:13:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x10, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:13:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x0, 0xb7d2, 0x8, 0x0, 0x2}) [ 424.707863][ T2479] usb 4-1: new high-speed USB device number 31 using dummy_hcd 02:13:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 424.963061][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 425.011988][ T2479] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 425.111921][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 425.129653][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 425.150765][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 425.170888][ T2479] usb 4-1: config 0 has no interface number 0 [ 425.183773][ T2479] usb 4-1: config 0 has no interface number 1 [ 425.190916][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 425.211116][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 425.232613][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 425.251971][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 425.272720][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 425.279598][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 425.371974][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 425.383575][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 425.401476][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 425.431787][ T2479] usb 4-1: config 0 has no interface number 0 [ 425.437861][ T2479] usb 4-1: config 0 has no interface number 1 [ 425.461862][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 425.473734][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 425.501794][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 425.525332][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 425.539573][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 425.547399][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 425.632044][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 425.640222][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 425.659220][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 425.669575][ T2479] usb 4-1: config 0 has no interface number 0 [ 425.683052][ T2479] usb 4-1: config 0 has no interface number 1 [ 425.689235][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 425.708291][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 425.728436][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 425.740686][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 425.761596][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 425.769585][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 425.861945][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 425.870098][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 425.878993][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 425.888250][ T2479] usb 4-1: config 0 has no interface number 0 [ 425.894454][ T2479] usb 4-1: config 0 has no interface number 1 [ 425.900537][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 425.911291][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 425.924300][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 425.935328][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 425.948583][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 425.955407][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 426.041931][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 426.050078][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 426.062494][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 426.071410][ T2479] usb 4-1: config 0 has no interface number 0 [ 426.080552][ T2479] usb 4-1: config 0 has no interface number 1 [ 426.088995][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 426.103592][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 426.118190][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 426.134560][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 426.147975][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 426.155025][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 426.251880][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 426.260140][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 426.268412][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 426.277483][ T2479] usb 4-1: config 0 has no interface number 0 [ 426.283777][ T2479] usb 4-1: config 0 has no interface number 1 [ 426.289927][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 426.300722][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 426.314091][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 426.325159][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 426.338482][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 426.345369][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 426.431904][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 426.440062][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 426.450096][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 426.459827][ T2479] usb 4-1: config 0 has no interface number 0 [ 426.466628][ T2479] usb 4-1: config 0 has no interface number 1 [ 426.473771][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 426.485646][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 426.499393][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 426.511125][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 426.525011][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 426.532760][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 426.611929][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 426.620104][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 426.628406][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 426.637514][ T2479] usb 4-1: config 0 has no interface number 0 [ 426.643719][ T2479] usb 4-1: config 0 has no interface number 1 [ 426.649801][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 426.660555][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 426.673616][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 426.684668][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 426.697928][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 426.704758][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 426.711440][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 426.720558][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.734219][ T2479] usb 4-1: config 0 descriptor?? [ 427.011983][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 427.031945][ T2479] usb 4-1: Could not set interface, error -71 [ 427.051466][ T2479] usb 4-1: USB disconnect, device number 31 [ 427.741846][ T3836] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 427.981884][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 428.022052][ T3836] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 428.102061][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 428.110406][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 428.118594][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 428.127867][ T3836] usb 4-1: config 0 has no interface number 0 [ 428.134052][ T3836] usb 4-1: config 0 has no interface number 1 [ 428.140126][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 428.151057][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 428.164069][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 428.175873][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 428.189131][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 428.195996][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 02:14:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x0, 0xb7d2, 0x8, 0x0, 0x2}) 02:14:02 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xdc, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffe01}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4050) 02:14:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000019) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x3, 0x1, 0x4, 0x4072020, 0x7, {0x0, 0xea60}, {0x4, 0x2, 0xff, 0x4, 0x85, 0x6, "e64e5d8a"}, 0x3, 0x1, @fd, 0x7ff, 0x0, r0}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x10000, 0x8}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x5a, r2}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:14:02 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_init_net_socket$llc(0x1a, 0x7e75b523d9163c55, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffa2) sendfile(r1, r0, 0x0, 0x10000) read$hiddev(r0, &(0x7f0000000080)=""/187, 0xbb) [ 428.341896][ T3836] usb 4-1: unable to read config index 1 descriptor/all [ 428.356063][ T3836] usb 4-1: can't read configurations, error -71 02:14:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x5dc}, 0x8) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:14:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b31, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x0, 0xb7d2, 0x8, 0x0, 0x2}) 02:14:02 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0xfd, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xa01, 0x0) [ 428.465430][ T27] audit: type=1804 audit(1591064042.262:152): pid=16119 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/181/cgroup.controllers" dev="sda1" ino=16366 res=1 02:14:02 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000080)={0x18, 0x0, 0x8, 0x10000}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x5c74}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x2}}, {0x0, 0x0, {}, {0x0, 0x0, 0x3}}, {0x0, 0xfffffffffffffffc, {0x0, 0x1, 0x1}}, {}, {0x1, 0x0, {0x2}, {0x0, 0x0, 0x4}}], 0xa0) 02:14:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b32, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0x0, 0x8, 0x0, 0x2}) 02:14:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000001a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x80000001, 0x4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 428.762208][ T3836] usb 4-1: new high-speed USB device number 33 using dummy_hcd 02:14:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b33, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}) [ 428.906185][ T27] audit: type=1804 audit(1591064042.702:153): pid=16155 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/182/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 429.001959][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 429.123233][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 429.131419][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 429.159279][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 429.184366][ T3836] usb 4-1: config 0 has no interface number 0 [ 429.190470][ T3836] usb 4-1: config 0 has no interface number 1 [ 429.206758][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 429.228531][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 429.268158][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 429.280739][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 429.301210][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 429.309394][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 429.327631][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 429.354903][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.381558][ T3836] usb 4-1: config 0 descriptor?? [ 429.675926][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 429.702111][ T3836] usb 4-1: Could not set interface, error -71 [ 429.729083][ T3836] usb 4-1: USB disconnect, device number 33 [ 430.421938][ T3836] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 430.671882][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 430.802145][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 430.813803][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 430.829221][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 430.841080][ T3836] usb 4-1: config 0 has no interface number 0 [ 430.855376][ T3836] usb 4-1: config 0 has no interface number 1 [ 430.861564][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 430.880588][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 430.900766][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 430.918063][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 430.937787][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 430.944901][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 430.951593][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 430.967133][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.980991][ T3836] usb 4-1: config 0 descriptor?? 02:14:05 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 02:14:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b34, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {0x0, 0x0, {}, {0x1}}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f8d671a8560db2fd34921f854897cb05ca7f234fc1bc615a36b5adc54988fe3b5b435f2543ca6982c5ecf824b73be2c3c69911cf54d5143cea58eba6202744739b76d5597927448f18c508d119ee4e0b2dc192a097a834cf81da72ead5d143ac252b0ffd49a03b0460d0834b5be802005194aeb778521bdfe9146754ce8cbb250089cf4702e3a817f04be8ebe5ec19d6067096c0cee8bc36744205e1ae9385abe254be1640", @ANYRES16=r3, @ANYBLOB="0000000000e0aa99000043e3b0a1c90df4dc9aac760100000000000000801a620b2073bf29085206e7a2ed00"], 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 02:14:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}) 02:14:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000001b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 431.304057][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 431.324444][ T3836] usb 4-1: Could not set interface, error -71 [ 431.356738][ T3836] usb 4-1: USB disconnect, device number 34 02:14:05 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000) 02:14:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b35, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}) [ 431.479011][ T27] audit: type=1804 audit(1591064045.272:154): pid=16208 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/183/cgroup.controllers" dev="sda1" ino=16370 res=1 02:14:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b36, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x0, {0x0, 0x1}}, {}, {}, {}], 0xa0) inotify_init() 02:14:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1000, 0x0, 0x8}) 02:14:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000001c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 431.771936][ T3836] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 431.859759][ T27] audit: type=1804 audit(1591064045.652:155): pid=16239 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/184/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 432.031917][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 432.174890][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 432.189638][ T3836] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 5 [ 432.207105][ T3836] usb 4-1: config 0 has no interface number 0 [ 432.215667][ T3836] usb 4-1: config 0 has no interface number 1 [ 432.228075][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 432.241429][ T3836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 432.258836][ T3836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 432.270617][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 432.291179][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 432.309313][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 432.334517][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 432.358711][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 432.380183][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.399834][ T3836] usb 4-1: config 0 descriptor?? [ 432.682007][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 432.699782][ T3836] usb 4-1: unknown number of interfaces: 2 [ 432.728554][ T3836] usb 4-1: USB disconnect, device number 35 [ 433.422062][ T3836] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 433.661955][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 433.782155][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 433.790346][ T3836] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 5 [ 433.807728][ T3836] usb 4-1: config 0 has no interface number 0 [ 433.815109][ T3836] usb 4-1: config 0 has no interface number 1 [ 433.821309][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 433.840599][ T3836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 433.851718][ T3836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 433.869369][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 433.883711][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 433.896105][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 433.912262][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 433.919033][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 433.930142][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.945047][ T3836] usb 4-1: config 0 descriptor?? 02:14:08 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1202b780409dff065be4a93d022516010000fcffffff99111890f1e20200e2ff0802240005007873000904020022ffcde00009048f02000000000009045915806ac0f16d3916adc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:14:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b37, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 434.222772][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 434.238420][ T3836] usb 4-1: unknown number of interfaces: 2 02:14:08 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_init_net_socket$llc(0x1a, 0x7e75b523d9163c55, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffa2) sendfile(r1, r0, 0x0, 0x10000) read$hiddev(r0, &(0x7f0000000080)=""/187, 0xbb) 02:14:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000140)=0x1d40) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x0, 0x0, 0x2}}, {}, {}, {0x0, 0x0, {}, {0x0, 0x0, 0x2}}, {0x0, 0x0, {}, {}, 0xff}], 0xa0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x18801, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getpeername$tipc(r4, &(0x7f0000000240)=@name, &(0x7f00000001c0)=0xffffffffffffffd9) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SET_ENDIAN(0x14, 0x2) write$evdev(r1, &(0x7f00000000c0)=[{{r2, r3/1000+60000}, 0x11, 0x5}, {{0x0, 0x2710}, 0x4, 0xdae0, 0x2}, {{}, 0x11, 0x5, 0x70}, {{0x0, 0x2710}, 0x12, 0x7, 0x80000001}, {{r5, r6/1000+60000}, 0x14, 0x9, 0x1}], 0x78) 02:14:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000001d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 434.285912][ T3836] usb 4-1: USB disconnect, device number 36 02:14:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 434.454337][ T27] audit: type=1804 audit(1591064048.252:156): pid=16291 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/185/cgroup.controllers" dev="sda1" ino=16369 res=1 02:14:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 434.641995][ T3834] usb 1-1: new high-speed USB device number 4 using dummy_hcd 02:14:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @can={0x1d, r7}, @llc={0x1a, 0x3, 0x1f, 0x2, 0xa5, 0xff, @local}, @can={0x1d, r9}, 0xa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='veth0\x00', 0xe2be, 0x6, 0x6}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x1}, {0x0, 0x1}}, {}, {0x0, 0x0, {}, {}, 0x2}, {0x0, 0x0, {0x0, 0x0, 0x1}}, {}], 0xa0) 02:14:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3c, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 434.692457][ T3836] usb 4-1: new high-speed USB device number 37 using dummy_hcd 02:14:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000001e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 434.804522][T16309] device bridge2 entered promiscuous mode [ 434.861707][T16314] bridge2: port 1(bridge_slave_0) entered blocking state [ 434.900543][T16314] bridge2: port 1(bridge_slave_0) entered disabled state 02:14:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b40, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 434.912365][ T3834] usb 1-1: Using ep0 maxpacket: 8 [ 434.981994][ T3836] usb 4-1: device descriptor read/64, error 18 [ 434.998617][T16314] device bridge_slave_0 entered promiscuous mode [ 435.007382][ T27] audit: type=1804 audit(1591064048.812:157): pid=16316 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/186/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 435.043965][ T3834] usb 1-1: config 0 has an invalid interface number: 143 but max is 4 [ 435.062005][ T3834] usb 1-1: config 0 has an invalid interface number: 89 but max is 4 [ 435.080689][T16314] bridge2: port 1(bridge_slave_0) entered blocking state [ 435.089230][T16314] bridge2: port 1(bridge_slave_0) entered forwarding state [ 435.094072][ T3834] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 435.140142][ T3834] usb 1-1: config 0 has no interface number 0 [ 435.168951][ T3834] usb 1-1: config 0 has no interface number 1 [ 435.234109][ T3834] usb 1-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 435.268521][ T3834] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 435.289349][ T3834] usb 1-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 435.308124][ T3834] usb 1-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 435.332239][ T3834] usb 1-1: config 0 interface 143 has no altsetting 0 [ 435.340430][ T3834] usb 1-1: config 0 interface 89 has no altsetting 0 [ 435.355786][ T3834] usb 1-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 435.381956][ T3834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.402002][ T3836] usb 4-1: device descriptor read/64, error 18 [ 435.427779][ T3834] usb 1-1: config 0 descriptor?? [ 435.678781][ T3836] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 435.732055][ T3834] usb 1-1: string descriptor 0 read error: -71 [ 435.753047][ T3834] usb 1-1: Could not set interface, error -71 [ 435.791360][ T3834] usb 1-1: USB disconnect, device number 4 [ 436.001997][ T3836] usb 4-1: device descriptor read/64, error 18 [ 436.392026][ T3836] usb 4-1: device descriptor read/64, error 18 [ 436.515445][ T3836] usb usb4-port1: attempt power cycle 02:14:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b41, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000021) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x0, {}, {}, 0xfe}, {}, {}, {}], 0xa0) 02:14:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @can={0x1d, r7}, @llc={0x1a, 0x3, 0x1f, 0x2, 0xa5, 0xff, @local}, @can={0x1d, r9}, 0xa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='veth0\x00', 0xe2be, 0x6, 0x6}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x1}, {0x0, 0x1}}, {}, {0x0, 0x0, {}, {}, 0x2}, {0x0, 0x0, {0x0, 0x0, 0x1}}, {}], 0xa0) [ 437.232012][ T3836] usb 4-1: new high-speed USB device number 39 using dummy_hcd 02:14:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={0x0, 0x100000001}) 02:14:11 executing program 3: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="800c63e2e8b8535f1ee489b3b534bc05a0fa9ab00e7da4d30002ec41ff9443b181391d9751215f53eeba723e8fd61d97a9c874c5fb166630f4009f483a1f8c14a74e8658eb96253441e027cd0fb5372a4bc106b686df369e7d8417e8726102db8861f66413f9e7271acfe4abd5fb27c43383f844f0f012b0cff3c17f430b5c2affd532b7ae3de3d090318d71a5f6547ac1f36e5a381d03694bf1d9405c8551853acc8b39bfe27b0e9b17cde0ebafc8f863ae06aed745fb103718f48ff1a130470c4b11a062eb43818cf40bebd64c95060b78e8996a1dcdbd32d488c4e1", 0xdd, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000001c0)={r6, 0xb7, &(0x7f0000000380)=""/183}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x3ff, 0xcba, 0x8001, 0x7}) timerfd_create(0x1, 0x800) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000340)={r0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) [ 437.342028][ T3836] usb 4-1: device descriptor read/8, error -71 [ 437.395149][T16353] device bridge10 entered promiscuous mode 02:14:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b44, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 437.444411][ T27] audit: type=1804 audit(1591064051.242:158): pid=16355 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/187/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 437.481851][T16362] bridge10: port 1(bridge_slave_0) entered blocking state 02:14:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) recvfrom$x25(r0, &(0x7f00000000c0)=""/247, 0xf7, 0x10000, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045007, 0x0) [ 437.499663][T16362] bridge10: port 1(bridge_slave_0) entered disabled state 02:14:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000000)={0x5, 0x0, 0x2024, 0x4, 0x80000001, {0x400}, 0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000800)=""/4096) openat$cgroup_ro(r3, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000200)=[{0x0, 0x0, {}, {0x0, 0xf}, 0x0, 0x2}, {0x0, 0x0, {}, {0x2}, 0xfe}, {0x0, 0x2, {0x2}, {0x0, 0x9168ab3c50b83f3d}, 0x0, 0xfe}, {0x0, 0x0, {0x2}, {}, 0x0, 0xfe}, {0x0, 0x0, {0x1, 0x0, 0x3}}], 0xa0) prctl$PR_MCE_KILL_GET(0x22) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='maps\x00') sendfile(r6, r7, 0x0, 0x0) write$vhost_msg_v2(r7, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/26, 0x1a, &(0x7f0000000300)=""/167, 0x1, 0x1}}, 0x48) [ 437.552535][ T3836] usb 4-1: device descriptor read/8, error -71 [ 437.580048][T16362] device bridge_slave_0 entered promiscuous mode 02:14:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b45, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:11 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xa0100, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x1, 0x2, 0xff, 0x20, 0x80, 0x1, 0xe9, 0x40, 0x6, 0x8, 0x56, 0x80000001}, {0x9, 0x7, 0x26, 0xb8, 0x6, 0x20, 0x7f, 0x0, 0x9, 0x1f, 0x8, 0x3e, 0x3}, {0x5, 0xc77c, 0x64, 0x1, 0x80, 0x7, 0x80, 0x80, 0x8, 0x6, 0x80, 0x4, 0x9}], 0x5}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:11 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x377001, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x656901, 0x0) 02:14:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000022) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @can={0x1d, r7}, @llc={0x1a, 0x3, 0x1f, 0x2, 0xa5, 0xff, @local}, @can={0x1d, r9}, 0xa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='veth0\x00', 0xe2be, 0x6, 0x6}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x1}, {0x0, 0x1}}, {}, {0x0, 0x0, {}, {}, 0x2}, {0x0, 0x0, {0x0, 0x0, 0x1}}, {}], 0xa0) 02:14:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b47, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:11 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xcb0c09b19f5fe2cc, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 438.042045][ T3836] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 438.099176][T16399] device bridge11 entered promiscuous mode [ 438.222255][ T3836] usb 4-1: device descriptor read/8, error -61 [ 438.228690][ T27] audit: type=1804 audit(1591064052.022:159): pid=16405 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/188/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 438.287195][T16399] device bridge_slave_0 left promiscuous mode [ 438.295950][T16399] bridge10: port 1(bridge_slave_0) entered disabled state [ 438.402459][T16399] bridge11: port 1(bridge_slave_0) entered blocking state [ 438.410522][T16399] bridge11: port 1(bridge_slave_0) entered disabled state [ 438.420460][T16399] device bridge_slave_0 entered promiscuous mode [ 438.492824][ T3836] usb 4-1: device descriptor read/8, error -61 [ 438.612393][ T3836] usb usb4-port1: unable to enumerate USB device 02:14:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 02:14:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000004) 02:14:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b48, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000023) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x0, 0x81, r0, 0x0, &(0x7f0000000040)={0xa30904, 0x6, [], @string=&(0x7f0000000000)=0xff}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000240)={0x6, 0x2, @raw_data=[0x0, 0x9, 0x800, 0x1, 0x8323, 0x7, 0x9, 0x1, 0x0, 0x800, 0xbef, 0xfffffeff, 0x0, 0x6, 0x400, 0x9]}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000002c0)={0x2}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @local, 0x1}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000100001045393000000e4ffffff000000", @ANYRES32=r4, @ANYBLOB="ddffffff227f5a4d629fce6b08179404f6bdffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809e652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c0000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000200)=0x8) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r5 = socket$rxrpc(0x21, 0x2, 0x0) getpeername(r5, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x80) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140)=0x20, 0x4) 02:14:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000016) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 440.463510][T16426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 02:14:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 440.510937][T16429] device bridge13 entered promiscuous mode [ 440.552217][ T27] audit: type=1804 audit(1591064054.341:160): pid=16441 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/189/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 440.560230][T16426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 02:14:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r3) 02:14:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 440.600567][ T27] audit: type=1804 audit(1591064054.391:161): pid=16430 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir154213946/syzkaller.n2a6pJ/300/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 440.632357][T16439] device bridge_slave_0 left promiscuous mode [ 440.638591][T16439] bridge12: port 1(bridge_slave_0) entered disabled state 02:14:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x5e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'ovf\x00', 0x11, 0x7, 0x3f}, 0x2c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {}, 0x0, 0xff}, {0x0, 0x0, {}, {0x0, 0x0, 0x2}}, {}, {0x0, 0x0, {}, {}, 0x0, 0xfd}, {}], 0xa0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000a80)=@llc={0x1a, 0x17, 0x8, 0x1, 0x9, 0x40, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r8, 0x3, {0x2, 0x0, 0x2}, 0xfd}, 0x18) [ 440.752290][T16439] bridge13: port 1(bridge_slave_0) entered blocking state [ 440.760684][T16439] bridge13: port 1(bridge_slave_0) entered disabled state [ 440.781521][T16439] device bridge_slave_0 entered promiscuous mode [ 440.798439][T16439] bridge13: port 1(bridge_slave_0) entered blocking state [ 440.805715][T16439] bridge13: port 1(bridge_slave_0) entered forwarding state 02:14:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4c, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 440.859705][T16455] device bridge3 entered promiscuous mode [ 440.897310][T16459] device bridge_slave_0 left promiscuous mode [ 440.912164][ T2479] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 440.943369][T16459] bridge2: port 1(bridge_slave_0) entered disabled state [ 441.082238][T16459] bridge3: port 1(bridge_slave_0) entered blocking state [ 441.089328][T16459] bridge3: port 1(bridge_slave_0) entered disabled state [ 441.124598][T16459] device bridge_slave_0 entered promiscuous mode [ 441.134196][T16459] bridge3: port 1(bridge_slave_0) entered blocking state [ 441.141317][T16459] bridge3: port 1(bridge_slave_0) entered forwarding state [ 441.157211][T16459] device bridge_slave_0 left promiscuous mode [ 441.158786][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 441.163591][T16459] bridge3: port 1(bridge_slave_0) entered disabled state [ 441.202267][ T2479] usb 4-1: too many configurations: 246, using maximum allowed: 8 [ 441.332126][ T2479] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 441.339789][ T2479] usb 4-1: can't read configurations, error -61 [ 441.512089][ T2479] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 441.782035][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 441.822309][ T2479] usb 4-1: too many configurations: 246, using maximum allowed: 8 [ 441.942142][ T2479] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 441.949856][ T2479] usb 4-1: can't read configurations, error -61 [ 441.958542][ T2479] usb usb4-port1: attempt power cycle [ 442.672057][ T2479] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 442.772243][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 442.812172][ T2479] usb 4-1: too many configurations: 246, using maximum allowed: 8 [ 442.942294][ T2479] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.949940][ T2479] usb 4-1: can't read configurations, error -61 [ 443.102126][ T2479] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 443.192232][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 443.232275][ T2479] usb 4-1: too many configurations: 246, using maximum allowed: 8 [ 443.352373][ T2479] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 443.359989][ T2479] usb 4-1: can't read configurations, error -61 [ 443.368419][ T2479] usb usb4-port1: unable to enumerate USB device 02:14:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r1, @in={{0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="000005000000000102000000000017c9712cdca4dfa7b759688513a1bfe0dc9e59bba38bd1106d89d1aec2b077328519a4d6698d2d8d4be2af1d57056192d86f3c35dec7ef8e1d18f8a860f47ac3372a71fa57e396e025d6f355f9a572ce83e740f6a57ab531c497fad6fbb91d7c9859ad4eb58ea832f54d025749ad175a6bcf9d5c13372512fc583f1fbb24bb3f9151cf12bc436a432079a472acf92824f6f652d066fca79fe277908b673341282f368e95385f50d98d231dac7eca17d96d4cacf3ed0e53ad62d5d1cb2bd3227ac1614aa4d896b31c4529b4234505370db79f"], 0x12) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r1, 0xffff2418}, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) 02:14:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000024) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = accept4(r3, &(0x7f0000000040)=@isdn, &(0x7f00000001c0)=0x80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000000)=0xfffffffffffffc39) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) sendto(r6, &(0x7f0000000440)="e5f8304829b66e34dbfc3b6c4d", 0xd, 0x0, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x10001, @ipv4={[], [], @local}, 0x3}}, 0x80) sendmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{}, 0x25, 0x0, 0x0, 0x0, "3d7f23a697c67ddc920e39e4677e1fca2448b8b9b534be89a9cec7e020e0bc6b0df787ebf34be9512b8674bb33d744454c527ed0a8e7a9fd8de8e04b924aed11"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000028ffff000000400000000000000003000000e3feffff050000000500000020000011c6917aba3c7bc4d6afc9efd1b8776ff6c9348c98312ede066da70900b5ddbdd8a462688c3ef75655866c760a52d5b2a2fa4261ba010018fee910fc10a53ad9d3dde310bc7e3b3a6b1652d98f7fbf379cf58766382e7d581b6df9ea6a7f5595ac126c35336e764cee087bb57cdacc25f6b2341e444dbf7ae8ce23f7660496c1da0e551aac998854c75da81e4f8c8cce321f9eaea56e7867895d3460ef7cbcd78199b26f3a71e3c831615e75cd76e9fbe92d52afe8df"]) 02:14:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x6) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x5, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909cf, 0xffffffff, [], @ptr=0x7}}) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000100)=0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:14:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4e, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) [ 443.600451][ T27] audit: type=1804 audit(1591064057.391:162): pid=16489 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/190/cgroup.controllers" dev="sda1" ino=15985 res=1 02:14:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {0x0, 0x0, {}, {0x0, 0xff}}, {}, {}], 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r10, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="e58046ce3fefe61da00260c7b4a5ac8b0c19266e4ee253229c20d349b5d6be7d07519f56486ada1f53dbcfa4db8e4310d7f0264c5305a80fe7458536eed32ae0a72db163f0d56f93900bcb7d1e"], 0x28}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000001880)=ANY=[@ANYBLOB="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"]) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x4) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000000)={0x0, 0x100, 0xe, 0x1, 0xee4, 0xfff}) 02:14:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 443.660071][T16490] device bridge15 entered promiscuous mode 02:14:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 443.725604][T16495] device bridge_slave_0 left promiscuous mode [ 443.737847][T16495] bridge14: port 1(bridge_slave_0) entered disabled state 02:14:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) write$smackfs_logging(r2, &(0x7f0000000000)=0x2, 0x14) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x800) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x15bcf05c8a76e658, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) signalfd(r1, &(0x7f00000003c0)={[0x1ff]}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000030801010000000000000000030000050600024088640000090001001c00048008000240000004e6080001400000000908000640000001ff"], 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x24008895) 02:14:17 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 443.842255][T16495] bridge15: port 1(bridge_slave_0) entered blocking state [ 443.854006][T16495] bridge15: port 1(bridge_slave_0) entered disabled state 02:14:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000025) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b60, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 443.900507][T16495] device bridge_slave_0 entered promiscuous mode [ 443.939837][T16495] bridge15: port 1(bridge_slave_0) entered blocking state 02:14:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) [ 443.947102][T16495] bridge15: port 1(bridge_slave_0) entered forwarding state [ 444.009954][T16502] device bridge4 entered promiscuous mode [ 444.022347][ T2479] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 444.051528][T16507] bridge4: port 1(bridge_slave_0) entered blocking state [ 444.058846][ T27] audit: type=1804 audit(1591064057.851:163): pid=16527 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/191/cgroup.controllers" dev="sda1" ino=15921 res=1 [ 444.088263][T16507] bridge4: port 1(bridge_slave_0) entered disabled state [ 444.107263][T16507] device bridge_slave_0 entered promiscuous mode [ 444.114798][T16507] bridge4: port 1(bridge_slave_0) entered blocking state [ 444.122075][T16507] bridge4: port 1(bridge_slave_0) entered forwarding state [ 444.292113][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 444.453972][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 444.462197][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 444.470249][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 444.479625][ T2479] usb 4-1: config 0 has no interface number 0 [ 444.485868][ T2479] usb 4-1: config 0 has no interface number 1 [ 444.491943][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 444.503706][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 444.517534][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 444.529191][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 444.543095][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 444.549881][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 444.558450][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 444.568266][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.579085][ T2479] usb 4-1: config 0 descriptor?? [ 444.862226][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 444.882370][ T2479] usb 4-1: Could not set interface, error -71 [ 444.891532][ T2479] usb 4-1: USB disconnect, device number 45 02:14:19 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 02:14:19 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:19 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x24902, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/ptrace\x00', 0x2, 0x0) 02:14:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b61, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)={0x9, 0x8, 0x4, 0x2000000, 0x2, {0x0, 0xea60}, {0x3, 0x8, 0x80, 0x1, 0x3, 0x1f, "636c56c4"}, 0x7fffffff, 0x4, @offset=0xffffff7f, 0x2, 0x0, 0xffffffffffffffff}) openat$cgroup_type(r3, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000000)) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:14:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000026) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b62, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:19 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r2, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x8, 0x445}, &(0x7f0000000040)=0x8) 02:14:19 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 445.483141][ T27] audit: type=1804 audit(1591064059.281:164): pid=16567 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/192/cgroup.controllers" dev="sda1" ino=16307 res=1 02:14:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:14:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 445.682255][ T3835] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 445.932264][ T3835] usb 4-1: Using ep0 maxpacket: 8 [ 446.052369][ T3835] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 446.060539][ T3835] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 446.070427][ T3835] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 446.080100][ T3835] usb 4-1: config 0 has no interface number 0 [ 446.087106][ T3835] usb 4-1: config 0 has no interface number 1 [ 446.093929][ T3835] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 446.105606][ T3835] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 446.119373][ T3835] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 446.131125][ T3835] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 446.145131][ T3835] usb 4-1: config 0 interface 143 has no altsetting 0 [ 446.151912][ T3835] usb 4-1: config 0 interface 89 has no altsetting 0 [ 446.159879][ T3835] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 446.169541][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.180609][ T3835] usb 4-1: config 0 descriptor?? [ 446.462270][ T3835] usb 4-1: string descriptor 0 read error: -71 [ 446.482296][ T3835] usb 4-1: Could not set interface, error -71 [ 446.502913][ T3835] usb 4-1: USB disconnect, device number 46 [ 447.202164][ T17] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 447.462177][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 447.582320][ T17] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 447.590562][ T17] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 447.599907][ T17] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 447.609796][ T17] usb 4-1: config 0 has no interface number 0 [ 447.616562][ T17] usb 4-1: config 0 has no interface number 1 [ 447.624258][ T17] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 447.635690][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 447.649418][ T17] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 447.661034][ T17] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 447.674972][ T17] usb 4-1: config 0 interface 143 has no altsetting 0 [ 447.681723][ T17] usb 4-1: config 0 interface 89 has no altsetting 0 [ 447.689604][ T17] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 447.699348][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.709169][ T17] usb 4-1: config 0 descriptor?? 02:14:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x480040, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) pipe(&(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000240)=0x29) 02:14:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b63, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:21 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0xb01}, 0x14}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100}, 0x40041) 02:14:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000027) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:21 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 448.012260][ T17] usb 4-1: string descriptor 0 read error: -71 [ 448.043022][ T17] usb 4-1: Could not set interface, error -71 02:14:21 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 448.083820][ T17] usb 4-1: USB disconnect, device number 47 [ 448.101016][T16634] device bridge14 entered promiscuous mode 02:14:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b64, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 448.161805][ T27] audit: type=1804 audit(1591064061.951:165): pid=16637 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/193/cgroup.controllers" dev="sda1" ino=16375 res=1 02:14:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0xf0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendfile(r2, r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000100)) r7 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x141000) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x18000, 0x0) ioctl$KVM_GET_TSC_KHZ(r8, 0xaea3) fchmod(r7, 0xa8) 02:14:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000040)={0x1, 0xffffffff, 0x1ff, 0x40, 0x8, 0x101}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b65, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 448.343228][T16659] device bridge5 entered promiscuous mode 02:14:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, 0x0) 02:14:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:22 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x4}, {}, {}, {}], 0xa0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r1, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e, 0xfffb}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "00cd0e"}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a662000000110000"}}}}, 0x8a) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x2, 0x80, 0x3cc}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'ip6gre0\x00', @dev={[], 0x28}}) 02:14:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b66, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000028) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:22 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x208000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendfile(r0, r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x9, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x8, 0x20000000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r7, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private}]}, 0x2c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18011) 02:14:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, 0x0) 02:14:22 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) [ 448.573752][T16679] skbuff: bad partial csum: csum=126/65531 headroom=64 headlen=128 02:14:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b67, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, 0x0) 02:14:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe53ad3d5b2263836, 0x11, r2, 0x0) 02:14:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 448.774984][ T27] audit: type=1804 audit(1591064062.571:166): pid=16699 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/194/cgroup.controllers" dev="sda1" ino=16383 res=1 02:14:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0xb7d2, 0x8}) 02:14:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b69, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 448.838766][T16709] skbuff: bad partial csum: csum=126/65531 headroom=64 headlen=128 [ 448.932331][ T2479] usb 4-1: new high-speed USB device number 48 using dummy_hcd 02:14:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x6) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x438}, 0x1, 0x0, 0x0, 0x4004010}, 0x5) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000800)="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") setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:14:22 executing program 4: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045007, 0x0) clone(0x10000000, &(0x7f00000000c0)="0a4c2071e7d9569b12932f735b50f1102c7c0368eab4379e0db2e6d6346fc1a10bb83adf5eb23273efb593f01106fceb39decde5d4e0efd676110473cc474f4b62ad3ca1aaf44d0809fb92a97081b939b709d07c2519d0a30b5d748a4929c2f8291c41a371708e60466d63ace90e7391eacb851f1e8559a4b0efcd2fb2ef5906e035fcb16b24cbdfd8d8c057fb6f66b0e36a6a6e", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)="18af9999fb0e0269d7620af3787809be4b6dfaec5b3d74c408bbe29c30100a66dc38cbcc74") 02:14:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 449.192338][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 449.312544][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 449.320720][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 449.329793][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 449.338835][ T2479] usb 4-1: config 0 has no interface number 0 [ 449.344994][ T2479] usb 4-1: config 0 has no interface number 1 [ 449.351092][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 449.382472][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 449.397417][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 449.408843][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 449.438783][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 449.445791][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 449.452572][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 449.471237][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.492625][ T2479] usb 4-1: config 0 descriptor?? [ 449.772319][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 449.792309][ T2479] usb 4-1: Could not set interface, error -71 [ 449.809227][ T2479] usb 4-1: USB disconnect, device number 48 [ 449.894450][ T0] NOHZ: local_softirq_pending 08 [ 450.502255][ T3836] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 450.742311][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 450.862400][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 450.870621][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 450.880049][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 450.889788][ T3836] usb 4-1: config 0 has no interface number 0 [ 450.896828][ T3836] usb 4-1: config 0 has no interface number 1 [ 450.903764][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 450.915466][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 450.929152][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 450.941185][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 450.955061][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 450.961848][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 450.970167][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 450.979817][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.990280][ T3836] usb 4-1: config 0 descriptor?? 02:14:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000029) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0xb7d2, 0x8}) 02:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)="657f8bd24d6fce6d012a88273bd8c7bf8aada87811b6f7fa28f9978fc70da99c70fa128097d20b1c0207269f9bbd876bbc21802660d551d429442835d0fda8d01ec22370e27eca1e8aaa6a14abbc28e881f97a2872536720027317d280b1e4ad18e5ba94bc4b6ae93f0549016b21ab38a4", 0x71) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x806000, 0x4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r4, 0x3, 0x5, r6}) r7 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000002c0)={0x3, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000080)={{0xa, 0x0, 0x1, 0xffffffff, 'syz1\x00', 0x2}, 0x4, 0x2, 0x4c, r7, 0x1, 0xb8, 'syz0\x00', &(0x7f0000000040)=['trustedproctrustedkeyring^\\keyring\x00'], 0x23, [], [0x3, 0x8000, 0x5, 0x629]}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 451.279067][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 451.314487][ T3836] usb 4-1: Could not set interface, error -71 [ 451.343788][ T3836] usb 4-1: USB disconnect, device number 49 02:14:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0xb7d2, 0x8}) [ 451.418807][ T27] audit: type=1804 audit(1591064065.211:167): pid=16784 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/195/cgroup.controllers" dev="sda1" ino=16370 res=1 02:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6c, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x44000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) poll(&(0x7f0000000040)=[{r0, 0x4400}, {r1, 0x8}, {r2, 0x10}, {r0, 0x600}, {r3, 0x2}, {r4, 0x280}, {r0, 0x4005}], 0x7, 0x1ff) 02:14:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40, 0x0, 0x0, 0x8}) 02:14:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000000000000400000006000e000500000005000700020000000600010000000000080011000000000008001800ffffffff050014000100000008000b0000510000140008007369743000"/92], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff556}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xce9}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, r2, 0x209}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x24854}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000440)={@ipv4={[], [], @remote}, 0x59, r5}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) semctl$GETPID(r2, 0x0, 0xb, 0x0) semctl$GETZCNT(r2, 0x0, 0xf, &(0x7f00000011c0)=""/4096) semop(r2, &(0x7f0000000080)=[{0x2, 0x2, 0x2800}, {0x1, 0xfff9, 0x800}], 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f00000011c0)=""/4096) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x8, 0x1000}, {0x4, 0xd48}, {0x1, 0x4ce, 0x1800}, {0x2, 0x3, 0x1000}], 0x4, &(0x7f0000000040)) 02:14:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000002a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40}) 02:14:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000001c0)={0xa3e, 0x4, 0x4, 0x80000, 0x3f, {r3, r4/1000+10000}, {0x0, 0x2, 0x93, 0x3, 0x4, 0x32, "6d889f4f"}, 0x0, 0x4, @userptr=0x7, 0x19, 0x0, 0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200001, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000240)=r6, 0x1) write$dsp(r0, &(0x7f00000000c0)="5b4140a25da27831625c77fcecf2613d56060de6eb39faaa7bb3f5fb77c317b6727189cf9ed8dc476aa68f6009c0ce762934a573f6212fc34d8a1c1f45e6133f45f40662fc0187e43ce57c9f8065765065db3021f12dedcfe2a93eddf1cc631d9162837bcb0c5b370d773115724518f140c298bcf179220c15caed386f3915bf2bc8db11e652fa32c03b679c90e4cc636bb2d43d0a47210846ae58ac657738e833b4a932ae16bce8ef995f81e00093e50572bea2588570816f51a7fb8da589670f", 0xc1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b70, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x8, r7, 0x20}, 0x10) [ 451.838858][T16824] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 451.838858][T16824] The task syz-executor.1 (16824) triggered the difference, watch for misbehavior. 02:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b71, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:25 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40}) [ 451.912283][ T27] audit: type=1804 audit(1591064065.701:168): pid=16823 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/196/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 451.935995][ T3836] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 451.981505][T16831] device bridge15 entered promiscuous mode [ 452.002979][T16836] device bridge_slave_0 left promiscuous mode [ 452.016570][T16836] bridge13: port 1(bridge_slave_0) entered disabled state [ 452.064126][T16841] FAULT_INJECTION: forcing a failure. [ 452.064126][T16841] name failslab, interval 1, probability 0, space 0, times 0 [ 452.112958][T16836] bridge15: port 1(bridge_slave_0) entered blocking state [ 452.119460][T16841] CPU: 1 PID: 16841 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 452.128380][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.132316][T16836] bridge15: port 1(bridge_slave_0) entered disabled state [ 452.138426][T16841] Call Trace: [ 452.138445][T16841] dump_stack+0x1e9/0x30e [ 452.138461][T16841] should_fail+0x433/0x5b0 [ 452.138482][T16841] ? tomoyo_realpath_from_path+0xd8/0x630 02:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b72, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 452.138493][T16841] should_failslab+0x5/0x20 [ 452.138507][T16841] __kmalloc+0x74/0x330 [ 452.165082][T16836] device bridge_slave_0 entered promiscuous mode [ 452.167857][T16841] ? tomoyo_realpath_from_path+0xcb/0x630 [ 452.167873][T16841] tomoyo_realpath_from_path+0xd8/0x630 [ 452.167896][T16841] tomoyo_path_number_perm+0x18f/0x690 [ 452.167945][T16841] security_file_ioctl+0x55/0xb0 [ 452.177579][T16836] bridge15: port 1(bridge_slave_0) entered blocking state [ 452.178386][T16841] __se_sys_ioctl+0x48/0x160 [ 452.178411][T16841] do_syscall_64+0xf3/0x1b0 [ 452.178428][T16841] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 452.178438][T16841] RIP: 0033:0x45ca69 [ 452.178449][T16841] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.178459][T16841] RSP: 002b:00007f1b21adbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.184258][T16836] bridge15: port 1(bridge_slave_0) entered forwarding state [ 452.189691][T16841] RAX: ffffffffffffffda RBX: 00000000004f2b40 RCX: 000000000045ca69 [ 452.189702][T16841] RDX: 00000000200000c0 RSI: 0000000000004b4b RDI: 0000000000000003 [ 452.195785][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 452.200042][T16841] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 452.200049][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 452.200056][T16841] R13: 0000000000000673 R14: 00000000004c96c1 R15: 00007f1b21adc6d4 [ 452.303751][T16841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 452.560273][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 452.576437][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 452.586547][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 452.612281][ T3836] usb 4-1: config 0 has no interface number 0 [ 452.618346][ T3836] usb 4-1: config 0 has no interface number 1 [ 452.632853][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 452.644709][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 452.654774][T16831] device bridge_slave_0 left promiscuous mode [ 452.660120][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 452.674822][T16831] bridge15: port 1(bridge_slave_0) entered disabled state [ 452.682084][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 452.695878][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 452.702709][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 452.709393][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 452.718551][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.729407][ T3836] usb 4-1: config 0 descriptor?? [ 453.012710][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 453.032346][ T3836] usb 4-1: Could not set interface, error -71 [ 453.051951][ T3836] usb 4-1: USB disconnect, device number 50 02:14:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfa, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000002b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:27 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40}) 02:14:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c, 0x80000) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7ff, 0x1f}], 0x1) 02:14:27 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r4, 0x401}, 0x8) sendfile(r1, r2, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x2, 0x664}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f00000001c0)='syz0\x00') [ 453.543673][T16883] FAULT_INJECTION: forcing a failure. [ 453.543673][T16883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.556892][T16883] CPU: 0 PID: 16883 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 453.565202][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.575245][T16883] Call Trace: [ 453.578532][T16883] dump_stack+0x1e9/0x30e [ 453.583035][T16883] should_fail+0x433/0x5b0 [ 453.587473][T16883] prepare_alloc_pages+0x28c/0x4a0 [ 453.592591][T16883] __alloc_pages_nodemask+0xbc/0x5e0 [ 453.597875][T16883] ? __lock_acquire+0x116c/0x2c30 [ 453.602905][T16883] kmem_getpages+0x49/0x900 [ 453.607405][T16883] cache_grow_begin+0x7b/0x2e0 [ 453.612172][T16883] cache_alloc_refill+0x359/0x3f0 [ 453.617207][T16883] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 453.622924][T16883] ? check_preemption_disabled+0xb0/0x240 [ 453.628639][T16883] ? debug_smp_processor_id+0x5/0x20 [ 453.633922][T16883] __kmalloc+0x30c/0x330 [ 453.638166][T16883] ? tomoyo_realpath_from_path+0xd8/0x630 [ 453.643881][T16883] tomoyo_realpath_from_path+0xd8/0x630 [ 453.649459][T16883] tomoyo_path_number_perm+0x18f/0x690 [ 453.654953][T16883] security_file_ioctl+0x55/0xb0 [ 453.659893][T16883] __se_sys_ioctl+0x48/0x160 [ 453.664490][T16883] do_syscall_64+0xf3/0x1b0 [ 453.668996][T16883] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 453.674886][T16883] RIP: 0033:0x45ca69 [ 453.678778][T16883] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 453.698375][T16883] RSP: 002b:00007f1b21adbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.706781][T16883] RAX: ffffffffffffffda RBX: 00000000004f2b40 RCX: 000000000045ca69 [ 453.714745][T16883] RDX: 00000000200000c0 RSI: 0000000000004b4b RDI: 0000000000000003 [ 453.722712][T16883] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 453.730679][T16883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 02:14:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRESDEC=r7, @ANYRES32], 0x0) [ 453.738648][T16883] R13: 0000000000000673 R14: 00000000004c96c1 R15: 00007f1b21adc6d4 [ 453.747291][ T27] audit: type=1804 audit(1591064067.441:169): pid=16886 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/197/cgroup.controllers" dev="sda1" ino=16370 res=1 02:14:27 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10140, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x200) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x99) read$eventfd(r2, &(0x7f0000000100), 0x8) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfb, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x300, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3c0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4dca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6f3d8e59}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfeb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x128, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2094a400}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb4a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x4040}, 0x4000081) [ 453.828235][T16894] device bridge16 entered promiscuous mode [ 453.838664][T16894] device bridge_slave_0 left promiscuous mode [ 453.856027][T16894] bridge15: port 1(bridge_slave_0) entered disabled state [ 453.922494][T16894] bridge16: port 1(bridge_slave_0) entered blocking state [ 453.929854][T16894] bridge16: port 1(bridge_slave_0) entered disabled state 02:14:27 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40}) [ 453.963087][T16894] device bridge_slave_0 entered promiscuous mode [ 453.994476][T16894] bridge16: port 1(bridge_slave_0) entered blocking state [ 454.001673][T16894] bridge16: port 1(bridge_slave_0) entered forwarding state 02:14:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000002c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4c01, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:27 executing program 1: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000004c0)=""/235) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_open_dev$usbfs(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x4c98, 0xebdabb6c605bb5b0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000000100050000000000001c000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x4, 0x2, 0x5, r2, 0x0, &(0x7f0000000000)={0x990af9, 0x9, [], @value=0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) fcntl$getflags(r8, 0x3) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000080)={"ead52d51ce53af50bf03aba3b8f91a8c2c3c246aba50c5ea7e2dc04a0b89418f10f1fda3581b8b7e8e1326ec9e774b17c93396769c14c4a8201c6d605de890a37bbf098f24d00466ac9375b17b848d142c520db97c8740fad4f2a3e9bb76b56b058bd828ee1d9457e397fc9eb45d33ee1723f1817a5d2d4646608796cd5d4a18efef85fba05660698239b96a4283121cc1d5b5fdb4c3ee07cdf6f992958fd994e7a85ca447fdba836bd6451a401d29a243e532e28e10ec85946702ee0f3e3931e258e6edbc2141ec9e0e8edff98bf454d0acd2f22627feaefe16a277ea032020a9c2cf8f47403faf96caa7bddbf1ffa04c9ac1fe6467003c4f6f55f9994adcb82f1aae437386deb60b135c79ca7a99efa2e71d9cd4305a5da2cc204e06bb1e4726538fcf9dbc94464386003a26259172274b2d7c43c0a5c54c0a566f4c8fa142a7bd335dcdeb168d9295f5e54708b2cfe46867394a405efa7e8aa2fa778ebe735fbc26a1b82b8a7c259db56fa5e5d1684dce08b0a71caab62674c9c61e57f8a93b3fa16a646610593cfe0a5fefc544a9f6a9ea4798b3248a799fb2872c80eb5b36c46e2b65fd0366590bcf96bff4f01e31ff89ce56c623a586f19059a215c6a8b5c4b76548c1369c1dee8af5e8dc7ab007bf6989eb5cbf32bb4f672c714a65d78e814afa299fa98438fc031ae790da08486ead82546dbaec44f983ada25a2e78d2f9f5165c9bf56ac2bb9e623aece7b0220ddb7833b921088a1bdf23d9fad92036246df666b2a414f46f11caaee9c302e41285427d54687bd83bd2de8f346c8bed9208e457cff6aed6ef6ed5121694b3df47419078d7d7a7420566cb2e6bf29da512b9368df9911efd292e5af3911beab08326e1f27d1608aae5e7c1f9e774e1594b7160cb329b38ca4c60683e696ec1dcd2b63e7f290f3075aa5e68478068c069ff380e189d1ad11def512e0bba9417ae437debb3a5f7d858fcf48a0d755ff5aa0a2777ecea1e063c829044b7d503ddcca64531c375077dfda485585333f4699f8cbb0adf4cc5416b74baa9b0846727ad437ffebe18a7767b328f99aac124c1b1a412f57f0ef126c38a14c3cbcbfd715d05dc832649218ad1c4aaaea1741dc90809fa989975a6c01619fbd9afcd4eaacd0917931d6461a32b96e6fccdce096dc4b4a1cc83bd03ff457ff8aed08ed4b825ae906d4c580b461d2ce90820efcec4ce8d8bb516568de2bb9f7f3045c75b9584c3ae8d66e75734eb1d78351612d9413d3f53c49e87c45a8fab1f0ee78a599c2d87c8b52171f7e74320bcadf8e0ac157f0f30832996b6a1c66b8fa571fa504d28d138834e7797985cc0e9c8bcc92ef3d4d5e535163d221d750e6c9970deddadc4b2bace9397a1457b0649af9caf7f3f1d6d11aa98d3cf447b0804751d98ddea138ad453bd04d63fe01efce72a9be09d"}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0xffffffffffffffff}, {}, {}, {0x0, 0x0, {}, {}, 0x0, 0x2}], 0xa0) [ 454.074963][T16915] FAULT_INJECTION: forcing a failure. [ 454.074963][T16915] name failslab, interval 1, probability 0, space 0, times 0 02:14:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5000, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 454.135891][T16898] device bridge17 entered promiscuous mode [ 454.164249][T16915] CPU: 0 PID: 16915 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 454.172570][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.182638][T16915] Call Trace: [ 454.185947][T16915] dump_stack+0x1e9/0x30e [ 454.190282][T16915] should_fail+0x433/0x5b0 [ 454.194765][T16915] ? vt_do_diacrit+0x589/0xa70 [ 454.199529][T16915] should_failslab+0x5/0x20 [ 454.204045][T16915] __kmalloc_track_caller+0x72/0x320 [ 454.209346][T16915] ? __might_fault+0xf5/0x150 [ 454.212323][ T2479] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 454.214020][T16915] memdup_user+0x22/0xb0 [ 454.214041][T16915] vt_do_diacrit+0x589/0xa70 [ 454.214057][T16915] vt_ioctl+0xd3d/0x3eb0 02:14:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5001, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 454.234629][T16915] ? rcu_lock_release+0x5/0x20 [ 454.239388][T16915] ? tomoyo_path_number_perm+0x58f/0x690 [ 454.245083][T16915] ? tty_jobctrl_ioctl+0x1e8/0xc20 [ 454.250199][T16915] tty_ioctl+0xee4/0x15c0 [ 454.254543][T16915] ? tty_do_resize+0x180/0x180 [ 454.259322][T16915] __se_sys_ioctl+0xf9/0x160 [ 454.263912][T16915] do_syscall_64+0xf3/0x1b0 [ 454.268419][T16915] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 454.274317][T16915] RIP: 0033:0x45ca69 [ 454.278212][T16915] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.297816][T16915] RSP: 002b:00007f1b21adbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.306217][T16915] RAX: ffffffffffffffda RBX: 00000000004f2b40 RCX: 000000000045ca69 02:14:28 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x393}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x48000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5008, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 454.311743][ T27] audit: type=1804 audit(1591064068.031:170): pid=16922 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/198/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 454.314204][T16915] RDX: 00000000200000c0 RSI: 0000000000004b4b RDI: 0000000000000003 [ 454.314211][T16915] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 454.314216][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 454.314222][T16915] R13: 0000000000000673 R14: 00000000004c96c1 R15: 00007f1b21adc6d4 [ 454.378628][T16927] device bridge_slave_0 left promiscuous mode [ 454.406041][T16927] bridge4: port 1(bridge_slave_0) entered disabled state [ 454.562277][ T2479] usb 4-1: device descriptor read/64, error 18 [ 454.952282][ T2479] usb 4-1: device descriptor read/64, error 18 [ 455.222272][ T2479] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 455.512345][ T2479] usb 4-1: device descriptor read/64, error 18 [ 455.902346][ T2479] usb 4-1: device descriptor read/64, error 18 [ 456.022446][ T2479] usb usb4-port1: attempt power cycle [ 456.732354][ T2479] usb 4-1: new high-speed USB device number 53 using dummy_hcd 02:14:30 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x4, &(0x7f0000001380)=[{&(0x7f0000000100)="e87e5659f7e0f489255152eeabc1f8a279bc09b201d2f9e8edfdcabe4b66d52b97d80c3051d1de1e9517c6a29ef23397bf6c5a8aabeb30bd62f055b7b883347f59e4ec2fb65a8e06ad6af44ab6eda8e6a1618c93ad60eaaf5ced2a70d98a36e62dda895bd983820b14c343085252", 0x6e, 0x401}, {&(0x7f0000000180)="4a3815643d23c757ace37a42ef56acc9777fe3cc4487a6a0e98c0659d6bbf87c23363c70fb906a73f25ede1e11539effd23d2c5580665a4a564b9161f33b5dc6abf8b407340df0987ae02f26541bfa554ca575525b8c75730f25f247a7a30d6e55b52db6d22412dc0ff1b0d28b81b8c8cee991e9d07bd291f5296dadf1a9ae83b4ea47960884d4d6d278487be8f70219bfc5adcd15febe7d4e5a094078d20910699c135eb965aa7e5ca4bcc1ee71829dad433af77fb2ab74160db357c43d976fd17864e97b634b87c7f4d3e9b9f32b737d14", 0xd2}, {&(0x7f0000000280)="65ee98957a0dc215f8ffcc048a62f1e93a5233f43a91dd7ef71e087ddfaa1bf0a919e8da91f08932f91c96b39061608462bd063c61d9bfc015aa546d36f10699535929aaff6256234202dca90ac5c9e6e7c5c75def2207f7baa8abe3703fa3df288a2d816169139b1a28a9e9b0b64ea3aac390013ce5106d4c20a98f99c91af5dbbb609868bf7a7815176d4d6c9e1d36f7217be42b269f12b4a6a97ff94294ac89b38bf9b696f10cd8026a02e63b224c4ba4ae5ee584b72345373226f83b0fed03dc1477266ddf0f12d541fba34665080519514c27951dd76246dcd8610bc1f649d4d65f02e4632f8ac9", 0xea, 0xff}, {&(0x7f0000000380)="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", 0x1000, 0x2}], 0x108004, &(0x7f0000001400)={[{@grpid='grpid'}, {@commit={'commit', 0x3d, 0x1e6bc849}}, {@acl='acl'}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpid='grpid'}, {@test_dummy_encryption='test_dummy_encryption'}, {@max_batch_time={'max_batch_time', 0x3d, 0x26}}, {@data_writeback='data=writeback'}], [{@smackfsroot={'smackfsroot'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@smackfshat={'smackfshat'}}, {@fowner_gt={'fowner>', 0xee01}}, {@subj_type={'subj_type', 0x3d, ')\'ppp1+#'}}, {@obj_role={'obj_role', 0x3d, '\\'}}, {@dont_hash='dont_hash'}]}) 02:14:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x500e, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x0, 0x0, 0x4}}, {0x0, 0x0, {0x0, 0x0, 0x3}}, {0x0, 0x0, {0x2}}, {0x0, 0x0, {0x0, 0x1}}, {}], 0xffffffffffffff2e) 02:14:30 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40}) 02:14:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000002d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 456.862418][ T2479] usb 4-1: device descriptor read/8, error -71 02:14:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5015, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000000c0)={0x40}) 02:14:30 executing program 1: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x472}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x859}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8cd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x68}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 02:14:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20100, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, r2, 0x1}) [ 456.987834][ T27] audit: type=1804 audit(1591064070.791:171): pid=16965 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/199/cgroup.controllers" dev="sda1" ino=16371 res=1 02:14:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5016, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2, &(0x7f00000000c0)={0x40}) [ 457.072475][ T2479] usb 4-1: device descriptor read/8, error -71 [ 457.562457][ T2479] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 457.662361][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 457.792414][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 457.800734][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 457.810854][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 457.820592][ T2479] usb 4-1: config 0 has no interface number 0 [ 457.827707][ T2479] usb 4-1: config 0 has no interface number 1 [ 457.834880][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 457.846337][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 457.860041][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 457.871884][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 457.886093][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 457.894047][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 457.900756][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 457.910918][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.920420][ T2479] usb 4-1: config 0 descriptor?? [ 458.252451][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 458.272487][ T2479] usb 4-1: Could not set interface, error -71 [ 458.296445][ T2479] usb 4-1: USB disconnect, device number 54 [ 458.992384][ T8708] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 459.232412][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 459.362517][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 459.370947][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 459.379090][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 459.388166][ T8708] usb 4-1: config 0 has no interface number 0 [ 459.394319][ T8708] usb 4-1: config 0 has no interface number 1 [ 459.400444][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 459.411560][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 459.425006][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 459.436022][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 459.449265][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 459.456084][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 459.462871][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 459.471905][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.481116][ T8708] usb 4-1: config 0 descriptor?? 02:14:33 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000080)={{0x4, @name="23c6e67c689ed1789af126db8973755d893655b83aadd272dd25b330516f7cae"}, "f5fcf1851b09dd42fd5cc5e0910bf874a629d2bf8713b40ad14965368077d577", 0x2}) 02:14:33 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140c, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 02:14:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5409, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:33 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x145c40, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x10, &(0x7f00000000c0)={0x40}) 02:14:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000002e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 459.772354][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 459.792446][ T8708] usb 4-1: Could not set interface, error -71 02:14:33 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100001040000000000000000000000005e66dacbe853d0374f90ddfd043a2cedf4afd7cdaeadb70bc09630036f963925fed5cfdf7a8032676ee964abb9cd555747842253356002a48d2d4f35492415b0620bc44f7c16e8136c714b732daf177709796800f05ea2737fbd9a770552ac5e9b128997b4aea91d73111eadfef7a738f583d9a2df5ca0b20d4bcd1877da71b42813b1ee80ec6ff141cd892714ff5cb80f41012024b61377897e6c4aaf1bfcbe5d6749043dc3a7efed325e6824c31eefc0fa581bd49ba0f0ce8f2cff38391de85f824203d6880ac06b", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) getsockname(r3, &(0x7f0000000180)=@pppol2tpv3, &(0x7f0000000200)=0x80) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000000140)={0x3, @bcast, r9}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7f, 0x7f}, @sack_perm, @timestamp, @timestamp], 0x4) sendfile(r1, r8, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) [ 459.840981][ T8708] usb 4-1: USB disconnect, device number 55 02:14:33 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000000)={0x7, 0xffffffb4, 0x9, 0xffff}) [ 459.872154][ T27] audit: type=1804 audit(1591064073.671:172): pid=17024 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/200/cgroup.controllers" dev="sda1" ino=16382 res=1 02:14:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4c, &(0x7f00000000c0)={0x40}) 02:14:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:33 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @multicast2}, {0x306, @random="ded36e72dfc2"}, 0x10, {0x2, 0x4e24, @local}, 'batadv0\x00'}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) write$UHID_CREATE(r2, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/127, 0x7f, 0x8, 0xd38e, 0x5, 0x20, 0xfffffc26}}, 0x120) [ 459.974762][T17046] device bridge6 entered promiscuous mode [ 459.988964][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.044103][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:14:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x56, &(0x7f00000000c0)={0x40}) [ 460.332485][ T8708] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 460.622400][ T8708] usb 4-1: device descriptor read/64, error 18 [ 461.022379][ T8708] usb 4-1: device descriptor read/64, error 18 [ 461.302393][ T8708] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 461.582387][ T8708] usb 4-1: device descriptor read/64, error 18 [ 461.972390][ T8708] usb 4-1: device descriptor read/64, error 18 [ 462.103186][ T8708] usb usb4-port1: attempt power cycle 02:14:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x10001, 0x80000001, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x1f, 0x8, 0x5, 0xfffffffe, 0xfffffffc, 0xfffffffb, 0x86, 0xc, 0x31, {0x42f, 0x2}, 0xff, 0x2}}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$NBD_DISCONNECT(r4, 0xab08) 02:14:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540c, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x146, &(0x7f00000000c0)={0x40}) 02:14:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000002f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:36 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x432b00, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 462.812430][ T8708] usb 4-1: new high-speed USB device number 58 using dummy_hcd 02:14:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000080)={0xa0, 0x0, 0x1, {{0x6, 0x3, 0x80000001, 0x18, 0x2, 0x81, {0x4, 0x5, 0x7ff, 0x3, 0x4, 0x6b7c, 0x5, 0x91d, 0x6, 0xffffff01, 0xcb, r3, r4, 0x9, 0x73}}, {0x0, 0x11}}}, 0xa0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r6}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00'/14], 0x12) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r6, 0x1000, 0x9, 0xffff0001, 0x4, 0x4}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r5}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r5, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, &(0x7f0000000180)=0x4) [ 462.922458][ T8708] usb 4-1: device descriptor read/8, error -71 02:14:36 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0xfffffff9, [[0xfff, 0x4, 0x2, 0x9, 0x6, 0xdad, 0x7, 0x7], [0x6, 0x10000, 0x62, 0x7, 0x757f, 0x80000001, 0x2, 0x5], [0x4, 0x3, 0x9, 0x4, 0x8, 0x4, 0x3ff, 0x4]], [], [{0x7, 0xac78, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x8, 0x0, 0x0, 0x1}, {0x5, 0x386, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x40, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x7083, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}, {0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7, 0xfffffffb, 0x1}, {0x3546, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x81, 0x32, 0x0, 0x0, 0x0, 0x1}, {0x3, 0xfffffffc, 0x1, 0x1, 0x1}], [], 0x800}) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x250800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, @nfc, @hci, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 02:14:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x14c, &(0x7f00000000c0)={0x40}) [ 462.999023][ T27] audit: type=1804 audit(1591064076.801:173): pid=17087 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/201/cgroup.controllers" dev="sda1" ino=16371 res=1 02:14:36 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r2, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000f30f000104080000000000000000000000069ad15f030795ceb382e9a2a702", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000061}, 0x40) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f0000000000)) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x0, {0x2}}, {}, {}, {0x0, 0x0, {}, {0x0, 0xf0}}], 0xa0) [ 463.142814][ T8708] usb 4-1: device descriptor read/8, error -71 02:14:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000030) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540e, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x155, &(0x7f00000000c0)={0x40}) [ 463.340970][T17110] device bridge7 entered promiscuous mode [ 463.430356][ T27] audit: type=1804 audit(1591064077.231:174): pid=17115 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/202/cgroup.controllers" dev="sda1" ino=16367 res=1 02:14:37 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, r2, 0x0, 0x14, &(0x7f0000000140)='vboxnet0#cgroupem1*\x00'}, 0x30) migrate_pages(r4, 0x4, &(0x7f0000000000)=0x1, 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000040)={0x598239e7, {{0xa, 0x4e21, 0x5, @local, 0x9}}}, 0x88) 02:14:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540f, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x156, &(0x7f00000000c0)={0x40}) 02:14:37 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x94) [ 463.632507][ T8708] usb 4-1: new high-speed USB device number 59 using dummy_hcd 02:14:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5410, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 463.732530][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 463.862695][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 463.870887][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 463.887905][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 463.898831][ T8708] usb 4-1: config 0 has no interface number 0 [ 463.905822][ T8708] usb 4-1: config 0 has no interface number 1 [ 463.911931][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 463.942528][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 463.982393][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 464.002567][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 464.027498][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 464.035799][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 464.043497][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 464.053431][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.065747][ T8708] usb 4-1: config 0 descriptor?? [ 464.352485][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 464.372653][ T8708] usb 4-1: Could not set interface, error -71 [ 464.385932][ T8708] usb 4-1: USB disconnect, device number 59 02:14:38 executing program 3: syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e200000001090224e304007873fcffffffffffffffe00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) setxattr$smack_xattr_label(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64EXEC\x00', &(0x7f0000000100)={'vboxnet1'}, 0x9, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000140)=0xdb85) 02:14:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1ae, &(0x7f00000000c0)={0x40}) 02:14:38 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x92}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48000}, 0x10800) 02:14:38 executing program 4: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f00000000c0)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000100)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {0x8001}, 0x2}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045007, 0x0) 02:14:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000031) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x24c, &(0x7f00000000c0)={0x40}) 02:14:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5413, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:38 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) [ 465.037207][ T27] audit: type=1804 audit(1591064078.841:175): pid=17188 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/203/cgroup.controllers" dev="sda1" ino=16367 res=1 02:14:38 executing program 4: r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) semctl$GETPID(r0, 0x0, 0xb, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f00000011c0)=""/4096) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/100) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$phonet(r1, &(0x7f00000000c0)=""/120, 0x78, 0x40, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045007, 0x0) 02:14:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x255, &(0x7f00000000c0)={0x40}) 02:14:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5414, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 465.302456][ T2709] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 465.662567][ T2709] usb 4-1: config index 0 descriptor too short (expected 58148, got 36) [ 465.670987][ T2709] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 465.683905][ T2709] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 465.693662][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 465.703241][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.720319][ T2709] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 465.729692][ T2709] usb 4-1: no configuration chosen from 1 choice 02:14:41 executing program 3: syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcd9d44157a62802a10156556e1e00009048f02000011000009045915806ac041af902dadc3a7920ba82ef00dfaf5586145ac"], 0x0) 02:14:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x256, &(0x7f00000000c0)={0x40}) 02:14:41 executing program 1: r0 = socket(0x10, 0x96a5585f5995dc55, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x400c000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x84040) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x509c83, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4020014) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000240)={0xa}, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x4000, 0x1}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000740)=[{0x3}, {}, {0x0, 0x0, {}, {}, 0xff}, {}, {0x0, 0x0, {}, {0x0, 0xff}}], 0xa0) 02:14:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5415, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000032) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:41 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4, 0x53, 0x40, 0x6, 0x0, 0x9, 0x915a1, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x30614906, 0x7}, 0x2000, 0x4, 0x400, 0x4, 0x69, 0x40, 0x8}, r0, 0x10, 0xffffffffffffffff, 0x3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) [ 467.876273][ T2709] usb 4-1: USB disconnect, device number 60 02:14:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x356, &(0x7f00000000c0)={0x40}) 02:14:41 executing program 4: unshare(0x8000400) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) 02:14:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5416, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 468.004813][ T27] audit: type=1804 audit(1591064081.811:176): pid=17235 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/204/cgroup.controllers" dev="sda1" ino=16374 res=1 02:14:41 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000000)={0x9, 0x9, 0x1fffe, 0x0, 0x3}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) 02:14:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5417, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x556, &(0x7f00000000c0)={0x40}) [ 468.392520][ T2709] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 468.752473][ T2709] usb 4-1: config 0 has an invalid descriptor of length 21, skipping remainder of the config [ 468.762742][ T2709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 468.771576][ T2709] usb 4-1: config 0 has no interface number 0 [ 468.779909][ T2709] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 468.790799][ T2709] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 468.803892][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 468.813039][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.823162][ T2709] usb 4-1: config 0 descriptor?? [ 469.102557][ T2709] usb 4-1: string descriptor 0 read error: -71 [ 469.110857][ T2709] usb 4-1: USB disconnect, device number 61 [ 469.842452][ T8708] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 470.212522][ T8708] usb 4-1: config 0 has an invalid descriptor of length 21, skipping remainder of the config [ 470.222819][ T8708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 470.231734][ T8708] usb 4-1: config 0 has no interface number 0 [ 470.238367][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 470.249187][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 470.262244][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 470.271342][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.280370][ T8708] usb 4-1: config 0 descriptor?? 02:14:44 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r0) 02:14:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000033) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x482000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) fcntl$setown(r2, 0x8, r3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f00000000c0)={{0x2, 0x3, 0x5, 0x2}, 0x5103e2f3, 0x5}) 02:14:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x656, &(0x7f00000000c0)={0x40}) 02:14:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5418, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 470.568255][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 470.580125][ T8708] usb 4-1: USB disconnect, device number 62 02:14:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x756, &(0x7f00000000c0)={0x40}) 02:14:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x2, "1e041ff6f14046fe"}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {0x3}, {0x0, 0x0, 0x2}, 0x1}, {}, {}, {0x0, 0x0, {}, {0x0, 0x0, 0x3}}, {0x0, 0x4000000000000}], 0xa0) [ 470.714008][ T27] audit: type=1804 audit(1591064084.521:177): pid=17296 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/205/cgroup.controllers" dev="sda1" ino=16370 res=1 02:14:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x856, &(0x7f00000000c0)={0x40}) 02:14:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541c, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 470.865198][T17317] device bridge16 entered promiscuous mode [ 471.022448][ T8708] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 471.262426][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 471.382431][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 471.390602][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 471.406161][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 471.417758][ T8708] usb 4-1: config 0 has no interface number 0 [ 471.425500][ T8708] usb 4-1: config 0 has no interface number 1 [ 471.431577][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 471.446469][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 471.459600][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 471.474039][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 471.489368][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 471.496255][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 471.503073][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 471.512081][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.521305][ T8708] usb 4-1: config 0 descriptor?? [ 471.812412][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 471.835949][ T8708] usb 4-1: Could not set interface, error -71 [ 471.861036][ T8708] usb 4-1: USB disconnect, device number 63 [ 472.532359][ T3836] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 472.772394][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 472.892386][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 472.900607][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 472.908903][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 472.917949][ T3836] usb 4-1: config 0 has no interface number 0 [ 472.924316][ T3836] usb 4-1: config 0 has no interface number 1 [ 472.930396][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 472.941163][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 472.954230][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 472.965262][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 472.978541][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 472.985381][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 472.992055][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 473.001152][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.011434][ T3836] usb 4-1: config 0 descriptor?? 02:14:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x954, &(0x7f00000000c0)={0x40}) 02:14:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x202, 0xc8af0fe7adaa2acd) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}) 02:14:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r5, 0x6}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000100), 0x0) sendfile(r3, r6, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x1ff, 0x6, 0x1, 0x1, 0x1}, 0x8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000034) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:47 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b6fb4ab0ba82ef00d06f5586145ac"], 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000000c0)) socketpair(0x18, 0xa, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @broadcast}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="08020a000000000000000000", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r9, r10, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r10, 0x4) [ 473.292472][ T3836] usb 4-1: string descriptor 0 read error: -71 02:14:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x956, &(0x7f00000000c0)={0x40}) [ 473.334744][ T3836] usb 4-1: Could not set interface, error -71 02:14:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$isdn(0x22, 0x3, 0x3) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0xff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x4, 0x8, 0x20}, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000300)=[{0x0, 0x0, {}, {0x0, 0x1}, 0x2}, {}, {0x0, 0x0, {}, {0x0, 0x0, 0x4}}, {}, {}, {0x3, 0x2, {0x0, 0x1, 0x4}, {0x0, 0x1, 0x3}, 0x2, 0xfd}], 0xc0) [ 473.376457][ T3836] usb 4-1: USB disconnect, device number 64 [ 473.393838][ T27] audit: type=1804 audit(1591064087.201:178): pid=17370 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/206/cgroup.controllers" dev="sda1" ino=15890 res=1 02:14:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000f83af6cdc40050000000001020000000000c0fce0dadc6b3ee7759a27aa7010b53cf645f1ec95daceda79805c606a65765083f53a023e3010da84b7bbeaabda47bed6f03d85a94787d3f0dd38bfd71b3f0c13630173dab0c981aa0612042e8d96801a98b5dac6aa88662db4b1c6a302b60f91abf3378bf9c34259d6bae40cb114f2a930cba5b96b5050439938b2ecae740ae13a59dca28ce85793060ef93bd3f1f3f7f2c985bdd07c73f06ea62fc25cf14b49fc74559ec3547ad3f08f170451fec6a98d0d2e22b0ad0fe43995ec8479fa9cb23c3afa1c588153c53abbd8ab8f77e8df63"], 0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 02:14:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xa56, &(0x7f00000000c0)={0x40}) 02:14:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x0, 0x0, 0x3}}, {}, {0x0, 0x0, {}, {}, 0xff}, {}, {0x0, 0x0, {0x0, 0xf0}, {0x0, 0xf0}, 0x2}], 0xa0) 02:14:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {0x0, 0x0, {}, {0x0, 0xe}}, {}, {0x0, 0xfffffffffffffffd}, {}], 0xa0) 02:14:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xb54, &(0x7f00000000c0)={0x40}) [ 473.777740][ T3836] usb 4-1: new high-speed USB device number 65 using dummy_hcd 02:14:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000035) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 473.929538][ T27] audit: type=1804 audit(1591064087.731:179): pid=17424 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/207/cgroup.controllers" dev="sda1" ino=15825 res=1 [ 474.022470][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 474.142695][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 474.157100][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 474.177742][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 474.237212][ T3836] usb 4-1: config 0 has no interface number 0 [ 474.262359][ T3836] usb 4-1: config 0 has no interface number 1 [ 474.268609][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 474.293361][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 474.306838][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 474.318171][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 474.331503][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 474.338696][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 474.345928][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 474.355295][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.366689][ T3836] usb 4-1: config 0 descriptor?? [ 474.853284][T17442] device bridge_slave_0 left promiscuous mode [ 474.859543][T17442] bridge16: port 1(bridge_slave_0) entered disabled state [ 474.953018][T17442] bridge6: port 1(bridge_slave_0) entered blocking state [ 474.960278][T17442] bridge6: port 1(bridge_slave_0) entered disabled state [ 474.969184][T17442] device bridge_slave_0 entered promiscuous mode [ 474.977899][T17442] bridge6: port 1(bridge_slave_0) entered blocking state [ 474.985008][T17442] bridge6: port 1(bridge_slave_0) entered forwarding state [ 475.023653][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 475.052387][ T3836] usb 4-1: Could not set interface, error -71 [ 475.061507][ T3836] usb 4-1: USB disconnect, device number 65 [ 475.772317][ T2709] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 476.012292][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 476.132371][ T2709] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 476.140551][ T2709] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 476.149017][ T2709] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 476.158111][ T2709] usb 4-1: config 0 has no interface number 0 [ 476.164376][ T2709] usb 4-1: config 0 has no interface number 1 [ 476.170476][ T2709] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 476.181350][ T2709] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 476.194391][ T2709] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 476.205449][ T2709] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 476.218742][ T2709] usb 4-1: config 0 interface 143 has no altsetting 0 [ 476.225612][ T2709] usb 4-1: config 0 interface 89 has no altsetting 0 [ 476.232472][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 476.241480][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.255361][ T2709] usb 4-1: config 0 descriptor?? 02:14:50 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000030767087873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145aca350463aa300"/83], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x6, 0x0, {0xffffffffffffffff, 0x2, 0x6, 0x1, 0xe09}, 0xa9}) 02:14:50 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x2}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) 02:14:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5421, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xb56, &(0x7f00000000c0)={0x40}) 02:14:50 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 02:14:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000036) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 476.392423][ T2709] usb 4-1: string descriptor 0 read error: -71 [ 476.422446][ T2709] usb 4-1: Could not set interface, error -71 02:14:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5422, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 476.461991][ T2709] usb 4-1: USB disconnect, device number 66 02:14:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc54, &(0x7f00000000c0)={0x40}) 02:14:50 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:50 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000002000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x8100, r8}}, 0x20}}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{0x0, 0x0, {}, {0x1}, 0x0, 0xff}, {0x0, 0x0, {0x0, 0xf0}}, {}, {0x0, 0x0, {}, {0x0, 0x1}}, {}], 0xa0) [ 476.511036][ T27] audit: type=1804 audit(1591064090.301:180): pid=17475 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/208/cgroup.controllers" dev="sda1" ino=16273 res=1 02:14:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5423, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc56, &(0x7f00000000c0)={0x40}) [ 476.635266][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.685033][T17504] bridge8: port 1(bond0) entered blocking state [ 476.712464][T17504] bridge8: port 1(bond0) entered disabled state [ 476.720115][T17504] device bond0 entered promiscuous mode [ 476.762515][T17504] device bond_slave_0 entered promiscuous mode [ 476.769040][T17504] device bond_slave_1 entered promiscuous mode [ 476.793373][T17497] device bond0 left promiscuous mode [ 476.798733][T17497] device bond_slave_0 left promiscuous mode [ 476.808887][T17497] device bond_slave_1 left promiscuous mode [ 476.817671][T17497] bridge8: port 1(bond0) entered disabled state [ 476.892573][ T2709] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 477.142264][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 477.183590][ T2709] usb 4-1: too many configurations: 205, using maximum allowed: 8 [ 477.215209][T17504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 477.302370][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 477.310027][ T2709] usb 4-1: can't read configurations, error -61 [ 477.462256][ T2709] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 477.712277][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 477.752510][ T2709] usb 4-1: too many configurations: 205, using maximum allowed: 8 [ 477.872365][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 477.879907][ T2709] usb 4-1: can't read configurations, error -61 [ 477.890681][ T2709] usb usb4-port1: attempt power cycle [ 478.602258][ T2709] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 478.692333][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 478.732354][ T2709] usb 4-1: too many configurations: 205, using maximum allowed: 8 [ 478.852307][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 478.859883][ T2709] usb 4-1: can't read configurations, error -61 [ 479.012202][ T2709] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 479.102388][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 479.142406][ T2709] usb 4-1: too many configurations: 205, using maximum allowed: 8 [ 479.262318][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 479.269879][ T2709] usb 4-1: can't read configurations, error -61 [ 479.278177][ T2709] usb usb4-port1: unable to enumerate USB device 02:14:53 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003076708a8e61890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba8fff00dfaf5586145ac"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:14:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5424, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xd54, &(0x7f00000000c0)={0x40}) 02:14:53 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x517881, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000037) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:53 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000080)='proc&ppp0]vmnet0\x00', &(0x7f00000000c0)="bc63b60a7e2003dfe9a6c240d02bc1c01c4a05b3992bdc256dc1d1ebe1f1ccfcc59322935078acf2bed528c3ac65ddd890665f70b9c5b468b00a3e8debba88df5c0ebacb74fbdb914bc7f054d561c6ed03b449b45f9b31e7a08fa6cc0125a065b178940f818be4e54f46c092db05708b44502a88082e5238cf673e46b9", 0x7d) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0xa0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000040)={0x0, 0x6b9, 0x4, &(0x7f0000000000)=0x3f}) 02:14:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xd56, &(0x7f00000000c0)={0x40}) 02:14:53 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000340)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104cdbe31546c384ab753930000", @ANYRES32=r9, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vxcan0\x00', r9}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001840)={@empty, 0x37, r10}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000040)="731c35c87f40ecd1f9d38efe26fc334f971705", &(0x7f0000000240)=""/89, 0x4}, 0x20) 02:14:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5425, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:53 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 479.608126][ T27] audit: type=1804 audit(1591064093.401:181): pid=17535 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/209/cgroup.controllers" dev="sda1" ino=16371 res=1 02:14:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xe54, &(0x7f00000000c0)={0x40}) [ 479.711972][T17550] device bridge17 entered promiscuous mode 02:14:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5427, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 479.756749][T17555] bridge17: port 1(bridge_slave_0) entered blocking state [ 479.787200][T17555] bridge17: port 1(bridge_slave_0) entered disabled state [ 479.835751][T17555] device bridge_slave_0 entered promiscuous mode [ 479.874128][T17555] bridge17: port 1(bridge_slave_0) entered blocking state [ 479.881367][T17555] bridge17: port 1(bridge_slave_0) entered forwarding state [ 479.893614][ T8708] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 480.144949][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 480.292724][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 480.300895][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 480.310029][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 480.319169][ T8708] usb 4-1: config 0 has no interface number 0 [ 480.325460][ T8708] usb 4-1: config 0 has no interface number 1 [ 480.331557][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 480.342443][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 480.355559][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 480.366713][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 480.380111][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 480.387062][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 480.393858][ T8708] usb 4-1: New USB device found, idVendor=e6a8, idProduct=9018, bcdDevice=e2.f1 [ 480.402967][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.415480][ T8708] usb 4-1: config 0 descriptor?? [ 480.702283][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 480.716467][ T8708] usb 4-1: USB disconnect, device number 71 [ 481.432214][ T2709] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 481.672198][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 481.792278][ T2709] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 481.800428][ T2709] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 481.810453][ T2709] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 481.820433][ T2709] usb 4-1: config 0 has no interface number 0 [ 481.827609][ T2709] usb 4-1: config 0 has no interface number 1 [ 481.834605][ T2709] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 481.846092][ T2709] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 481.859849][ T2709] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 481.871603][ T2709] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 481.885813][ T2709] usb 4-1: config 0 interface 143 has no altsetting 0 [ 481.886628][ T0] NOHZ: local_softirq_pending 08 [ 481.894368][ T2709] usb 4-1: config 0 interface 89 has no altsetting 0 [ 481.905313][ T2709] usb 4-1: New USB device found, idVendor=e6a8, idProduct=9018, bcdDevice=e2.f1 [ 481.915062][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.930103][ T2709] usb 4-1: config 0 descriptor?? 02:14:56 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005e27773000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4aba82ef00dfaf5586145ac"], 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x82, 0x8) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000000c0)=0x3) 02:14:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5428, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xe56, &(0x7f00000000c0)={0x40}) 02:14:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000038) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:56 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r3}, &(0x7f0000000280)=0x84) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_NET_NS_PID={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00e90043daff83e22d9bf0109721f12fe41053f4fe265c2a383461b58bb2e9975a16912caa1a73c920490c7c30baed410a44bee9213ca130d62bbc70845065ada663e9df9a0b4e0899cddf4fce6c651c2143cbdedf"], 0x12) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="4cc83743474b98e2b2f8bdc39f152a194b05c148665a20c97d14ad80acbc6b411fb2bdce362863acc6bc2ca179496cfa32eb1e950e100db6e720bc1b94931f087f50497424c661c99c7afffef192a9037bdf946d956dd94a6bb9f79c8f562c5357bde70c83a54b44c403e9ebdf6def4322edc0b457e0322c15bd190bc63065b8075c976edce0f3be7f3f9a2638d3c9aac07b6c48ed1f9570bc2ad26d2969418f2a474e39a6698a2ff9c6fbf82c7972cb204a694d9d24f104d5ac1673387571ee506e957c427691a00940532e7c7449d8f7387591bc0eea5034"], 0xa) [ 482.212307][ T2709] usb 4-1: string descriptor 0 read error: -71 [ 482.237747][ T2709] usb 4-1: USB disconnect, device number 72 02:14:56 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xf54, &(0x7f00000000c0)={0x40}) 02:14:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5429, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:14:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5437, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000039) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 482.596187][ T27] audit: type=1804 audit(1591064096.391:182): pid=17639 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/211/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 482.692575][ T2709] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 482.952337][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 483.072230][ T2709] usb 4-1: config 226 has an invalid interface number: 143 but max is 4 [ 483.080665][ T2709] usb 4-1: config 226 has an invalid interface number: 89 but max is 4 [ 483.090273][ T2709] usb 4-1: config 226 has 3 interfaces, different from the descriptor's value: 5 [ 483.100431][ T2709] usb 4-1: config 226 has no interface number 0 [ 483.107720][ T2709] usb 4-1: config 226 has no interface number 1 [ 483.114205][ T2709] usb 4-1: too many endpoints for config 226 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 483.125408][ T2709] usb 4-1: config 226 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 483.138791][ T2709] usb 4-1: too many endpoints for config 226 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 483.150244][ T2709] usb 4-1: config 226 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 483.163943][ T2709] usb 4-1: config 226 interface 143 has no altsetting 0 [ 483.170874][ T2709] usb 4-1: config 226 interface 89 has no altsetting 0 [ 483.177983][ T2709] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 483.187366][ T2709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.472299][ T2709] usb 4-1: string descriptor 0 read error: -71 [ 483.492346][ T2709] usb 4-1: Could not set interface, error -71 [ 483.501542][ T2709] usb 4-1: USB disconnect, device number 73 [ 484.205986][ T8708] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 484.462117][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 484.592174][ T8708] usb 4-1: config 226 has an invalid interface number: 143 but max is 4 [ 484.600667][ T8708] usb 4-1: config 226 has an invalid interface number: 89 but max is 4 [ 484.609070][ T8708] usb 4-1: config 226 has 3 interfaces, different from the descriptor's value: 5 [ 484.618294][ T8708] usb 4-1: config 226 has no interface number 0 [ 484.624678][ T8708] usb 4-1: config 226 has no interface number 1 [ 484.631049][ T8708] usb 4-1: too many endpoints for config 226 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 484.642113][ T8708] usb 4-1: config 226 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 484.655332][ T8708] usb 4-1: too many endpoints for config 226 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 484.666613][ T8708] usb 4-1: config 226 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 484.680205][ T8708] usb 4-1: config 226 interface 143 has no altsetting 0 [ 484.687591][ T8708] usb 4-1: config 226 interface 89 has no altsetting 0 [ 484.694587][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 484.703847][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:14:58 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) sync() 02:14:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xf56, &(0x7f00000000c0)={0x40}) 02:14:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5441, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:58 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x105581, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000240)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000140)=0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 02:14:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000003a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:14:58 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) [ 484.999512][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 485.022263][ T8708] usb 4-1: Could not set interface, error -71 [ 485.066437][ T8708] usb 4-1: USB disconnect, device number 74 02:14:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5450, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1054, &(0x7f00000000c0)={0x40}) [ 485.133853][T17693] device bridge18 entered promiscuous mode 02:14:59 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) [ 485.204639][ T27] audit: type=1804 audit(1591064099.001:183): pid=17710 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/212/cgroup.controllers" dev="sda1" ino=16366 res=1 02:14:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5451, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:14:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1254, &(0x7f00000000c0)={0x40}) 02:14:59 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) [ 485.482245][ T8708] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 485.752096][ T8708] usb 4-1: device descriptor read/64, error 18 [ 486.146037][ T8708] usb 4-1: device descriptor read/64, error 18 [ 486.432143][ T8708] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 486.722102][ T8708] usb 4-1: device descriptor read/64, error 18 [ 487.132102][ T8708] usb 4-1: device descriptor read/64, error 18 [ 487.262554][ T8708] usb usb4-port1: attempt power cycle 02:15:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1279, &(0x7f00000000c0)={0x40}) 02:15:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5452, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000003b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:01 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:01 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) 02:15:01 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'overlay\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @rand_addr=0x64010100}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x80) [ 487.992113][ T8708] usb 4-1: new high-speed USB device number 77 using dummy_hcd 02:15:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x545d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x127b, &(0x7f00000000c0)={0x40}) 02:15:02 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x9, 0x8, 0x3f, 0x2, 0x2, 0x3e, 0x2, 0x2b1, 0x40, 0x13d, 0x3, 0xa6, 0x38, 0x1, 0xcd67, 0x1, 0xa2b6}, [{0x70000000, 0x2000000, 0x7fff, 0x6, 0xff, 0x0, 0x1, 0x8}, {0x6474e551, 0x9, 0xb, 0x7fffffff, 0x4, 0x3, 0x916, 0x2237}], "8c98c75ed7610d51a23a2feda1d95a214e2f099841c6f7735071205eef74223ea99afa6c7b9d58fd6b34fca7a0502124c713c15e07fca0ea187622abcf3da0f34d6cd2354cd82637e8d6b2e78d4134da50f6ef25592d77480663d4b726f41d57fe284854c04bdbc90ae284a20a1112ce84d2fbd3ca5c38c3333aa0b349597068902a8714d47a830398826ea299907450c53c7ddfd8ac570ebf1309b61be3b4", [[], [], [], [], [], [], [], [], [], []]}, 0xb4f) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r4, 0x3a000) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000c40)={0x1, 0x8, 0x4, 0x200000, 0x80000000, {0x77359400}, {0x3, 0x0, 0x3, 0x5, 0x0, 0x5, "96195907"}, 0xd64, 0x3, @userptr=0x2, 0x9, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000d00)='./file0\x00', 0x117) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x0, r7}) tee(r8, r3, 0xe76f, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000000)={0xf1, 0x9, 0x5a99, {0xfff, 0x6}, 0x2, 0x2b2}) [ 488.196133][ T27] audit: type=1804 audit(1591064101.991:184): pid=17745 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/213/cgroup.controllers" dev="sda1" ino=16367 res=1 02:15:02 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5460, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1289, &(0x7f00000000c0)={0x40}) 02:15:02 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:02 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x6781, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "18ecbf6a"}, 0x0, 0x0, @fd}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './bus', [{0x20, '&$em1ppp0'}], 0xa, "b706ecc5c2fd7eeaaa375553e727f7c84989a4ab0da9c3ffa13cba307f20fa3ea95a9eaf403aa7e7eb12da6c421bafa41b8a622bcdacc1af7ba1c7c22d28cdcc039c82b77c89cfac73496c9b635d9e96c11853536ff1d127be6d1af170441fa363bc1656daa88d84066a0422febcbb7705dedc6fd7cb4513c830143cd5cc17cc8ecb67f26858ea187d553a6b500177dd3957a29da4f2f19495b4acc0351993b3cf697622c975a31cf73731f49b27c85defdb725f3c7ff8349ea467b693300999d2799e2fe9c90304b4c4d6bd7b0694b878f850d05b5da43fe6b70c8329f826493a5c7ac5f7ce22dad933ae736f4b94bfce"}, 0x104) 02:15:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000003c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5501, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 488.474165][ T8708] usb 4-1: device not accepting address 77, error -71 [ 488.658044][ T27] audit: type=1804 audit(1591064102.451:185): pid=17778 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/214/cgroup.controllers" dev="sda1" ino=15762 res=1 [ 488.701087][ T27] audit: type=1804 audit(1591064102.491:186): pid=17782 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir024890230/syzkaller.42XUY0/362/bus" dev="sda1" ino=16373 res=1 [ 488.739669][ T27] audit: type=1804 audit(1591064102.491:187): pid=17773 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir024890230/syzkaller.42XUY0/362/bus" dev="sda1" ino=16373 res=1 [ 488.862165][ T8708] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 489.062468][ T8708] usb 4-1: device descriptor read/8, error -61 [ 489.332082][ T8708] usb 4-1: device descriptor read/8, error -61 [ 489.462201][ T8708] usb usb4-port1: unable to enumerate USB device 02:15:04 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'gretap0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) 02:15:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1354, &(0x7f00000000c0)={0x40}) 02:15:04 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5509, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:04 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x102, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getpeername$ax25(r1, &(0x7f0000000040)={{}, [@remote, @netrom, @default, @remote, @netrom, @netrom, @null, @bcast]}, &(0x7f00000000c0)=0x48) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000003d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1454, &(0x7f00000000c0)={0x40}) 02:15:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000000)) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045007, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f00000001c0)={0x5}, 0x4) [ 491.266013][ T27] audit: type=1804 audit(1591064105.062:188): pid=17800 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/215/cgroup.controllers" dev="sda1" ino=16377 res=1 02:15:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5600, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:05 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1455, &(0x7f00000000c0)={0x40}) 02:15:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5601, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 491.602305][ T2479] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 491.852002][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 491.972229][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 491.980435][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 491.989897][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 491.999539][ T2479] usb 4-1: config 0 has no interface number 0 [ 492.006383][ T2479] usb 4-1: config 0 has no interface number 1 [ 492.013397][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 492.024880][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 492.038626][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 492.050656][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 492.065034][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 492.071778][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 492.079740][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 492.089329][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.101168][ T2479] usb 4-1: config 0 descriptor?? [ 492.462029][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 492.482105][ T2479] usb 4-1: Could not set interface, error -71 [ 492.495219][ T2479] usb 4-1: USB disconnect, device number 79 [ 493.182073][ T8708] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 493.422010][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 493.552351][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 493.560504][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 493.569898][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 493.579651][ T8708] usb 4-1: config 0 has no interface number 0 [ 493.586429][ T8708] usb 4-1: config 0 has no interface number 1 [ 493.593554][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 493.605360][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 493.619199][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 493.631066][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 493.644982][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 493.651763][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 493.660241][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 493.669984][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.679732][ T8708] usb 4-1: config 0 descriptor?? 02:15:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1554, &(0x7f00000000c0)={0x40}) 02:15:07 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:07 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/udp6\x00') sendfile(r3, r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendfile(r6, r7, &(0x7f0000000100)=0x5, 0x80000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5602, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000003e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 493.962042][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 493.982089][ T8708] usb 4-1: Could not set interface, error -71 02:15:07 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005000800000000000000ffcde00009048f02000000569f0904902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5583145ac00000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x15, "6a6d66f3cfff95edded2cf62cb3dc807f8baf5d00c"}, &(0x7f0000000440)=0x1d) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x404c801}, 0x800) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$alg(r0, 0x0, 0x0, 0x40000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xfba874ad530a754, 0x5543, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0x62, 0x2, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x8000, 0x4, 0x1, {0x22, 0x63a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x5e0380e38c754c22, 0x4, 0xd0, 0x2}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1d, 0x2, 0x7, 0x20, 0x20}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x45, &(0x7f0000000140)=@string={0x45, 0x3, "55c1592630ec12bee1bce8ddd31ca3fafcbd584f77bccb36a0a674ea5e51e6fd244cbd4445a5a861363eadd975fe30e85598b02db9eda3eb4e032c0c5c9eba3b720f7e"}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="000000102f06c493930000000200000000000000cdec38f1c3de4d53dc636569b65e473886a0b6aeb4f8ae037d2d377cbedcefb8f8934ce329d0597458711a14dcb275fce033a207f5469e4548fb8d65048ce2762fe2c8e85b6586a576cc74f492938eb095dc5ef35009e156649066b7a1e3f749d02b664701f4eaefae80c45f78b78c4f41f8dc93", @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000300)={r1, r6, 0x8, 0x43, &(0x7f0000000280)="67142583d7b73b94e43cec3c040000001042474518df1fbeb4ffa167cc97f21f554ec9cd767c9e0d066b242a4c53c27d1f85f0a5c152e95ea756f1678668fb80104f0f", 0x7f, 0x1f, 0x1f, 0xe, 0x87, 0x1, 0x6, 'syz1\x00'}) [ 494.024220][ T8708] usb 4-1: USB disconnect, device number 80 02:15:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1654, &(0x7f00000000c0)={0x40}) 02:15:07 executing program 1: syz_open_dev$sndmidi(0x0, 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) [ 494.119084][ T27] audit: type=1804 audit(1591064107.912:189): pid=17866 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/216/cgroup.controllers" dev="sda1" ino=16370 res=1 02:15:07 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0xb00, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000240)={'batadv0\x00', 0x7}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xf0c, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e21, @empty}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x0) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000040)={0x7ff, 0x7f, 0x800}) 02:15:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5603, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1754, &(0x7f00000000c0)={0x40}) 02:15:08 executing program 1: syz_open_dev$sndmidi(0x0, 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5605, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 494.317052][T17888] device bridge19 entered promiscuous mode 02:15:08 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000000c0)={0x6, 0xeeb, 0x0, 'queue1\x00'}) 02:15:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5606, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:08 executing program 1: syz_open_dev$sndmidi(0x0, 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 494.562006][ T8708] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 494.578728][ T27] audit: type=1804 audit(1591064108.372:190): pid=17911 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/217/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 494.832004][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 494.952014][ T8708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.002527][ T8708] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 495.011602][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 495.068811][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.082771][ T8708] usb 4-1: config 0 descriptor?? [ 495.324459][T17879] udc-core: couldn't find an available UDC or it's busy [ 495.331540][T17879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 495.381990][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 495.389827][ T8708] usb 4-1: USB disconnect, device number 81 [ 496.161992][ T3836] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 496.411930][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 496.532126][ T3836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.542325][ T3836] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 496.551331][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 496.560876][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.572534][ T3836] usb 4-1: config 0 descriptor?? [ 496.813788][T17943] udc-core: couldn't find an available UDC or it's busy [ 496.820742][T17943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 02:15:10 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1854, &(0x7f00000000c0)={0x40}) 02:15:10 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000340)={r11}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r11, @ANYRES32=r9, @ANYRES32=r0], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0xff, 0x8, 0x4, 0x200000, 0x10001, {r3, r4/1000+10000}, {0x1, 0x8, 0x0, 0x1, 0x4, 0xff, "ac4c7188"}, 0xecb, 0x1, @offset=0x3ff, 0x328, 0x0, r6}) setsockopt$IP_VS_SO_SET_TIMEOUT(r12, 0x0, 0x48a, &(0x7f0000000040)={0x1, 0x4, 0x800}, 0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) unlink(&(0x7f0000000240)='./file0\x00') 02:15:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5607, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x10010000005c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 496.872044][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 496.879449][ T3836] usb 4-1: USB disconnect, device number 82 02:15:10 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x3, 0x2, 0x80000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="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"], 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRESHEX, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000000000000b96f2a9f20ff", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000080)=0x1, 0x4) 02:15:10 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5608, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1b54, &(0x7f00000000c0)={0x40}) [ 496.989780][T17959] device bridge_slave_0 left promiscuous mode [ 497.019231][T17959] bridge17: port 1(bridge_slave_0) entered disabled state [ 497.061771][ T27] audit: type=1804 audit(1591064110.852:191): pid=17960 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/218/cgroup.controllers" dev="sda1" ino=16368 res=1 02:15:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5609, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1c54, &(0x7f00000000c0)={0x40}) 02:15:11 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) 02:15:11 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000000)) 02:15:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1d54, &(0x7f00000000c0)={0x40}) 02:15:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000060) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:11 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) [ 497.381956][ T3836] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 497.556890][ T27] audit: type=1804 audit(1591064111.352:192): pid=17997 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/219/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 497.651990][ T3836] usb 4-1: device descriptor read/64, error 18 [ 498.051990][ T3836] usb 4-1: device descriptor read/64, error 18 [ 498.321923][ T3836] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 498.591988][ T3836] usb 4-1: device descriptor read/64, error 18 [ 498.981890][ T3836] usb 4-1: device descriptor read/64, error 18 [ 499.102008][ T3836] usb usb4-port1: attempt power cycle [ 499.811983][ T3836] usb 4-1: new high-speed USB device number 85 using dummy_hcd 02:15:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1e54, &(0x7f00000000c0)={0x40}) 02:15:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560c, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:13 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 02:15:13 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r5, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x3, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40008c1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r5, 0x200, 0x5, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4080) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r8, 0x5, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21041050}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 02:15:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x1001000000e6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 499.981952][ T3836] usb 4-1: device descriptor read/8, error -71 02:15:13 executing program 3: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc8, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2d}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44080}, 0x4000040) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x79c) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r3}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="04"], 0x12) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r3, 0x8}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={r4, 0x7, 0x3, [0x3a41, 0x200, 0x5]}, 0xe) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:15:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x1f54, &(0x7f00000000c0)={0x40}) [ 500.149580][ T27] audit: type=1804 audit(1591064113.942:193): pid=18015 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/220/cgroup.controllers" dev="sda1" ino=16372 res=1 02:15:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2154, &(0x7f00000000c0)={0x40}) 02:15:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x410b00, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x800) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:14 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) [ 500.192143][ T3836] usb 4-1: device descriptor read/8, error -71 02:15:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2254, &(0x7f00000000c0)={0x40}) 02:15:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560f, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2}, {0xa, 0x0, 0x0, @dev}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000001180)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0xff, "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", 0x5, 0x77, 0x2, 0x3, 0x1, 0xe7, 0x1, 0x1}, r6}}, 0x128) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r7}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000010c0)={r7, 0x7b, "0ea0a2922cb442f61cb749c2633249cf88f93daea616b18e9cfc8468904a879af8b4a3c8dab390b2a2a041d1ca013cd0ceb962fd8d344e5e0c31eaca1e07e6d44fbbd7ae1838fa2a4e3b836de97fdf58b22e47ee9c1e4b29fdd2cc33dfa5688ddd2644439337a26da10755ea628f1b89f421db96c40a82d4887c3b"}, &(0x7f0000000000)=0x83) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000000c0)=""/4096) 02:15:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2354, &(0x7f00000000c0)={0x40}) 02:15:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x1001000000e7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 500.688286][ T27] audit: type=1804 audit(1591064114.482:194): pid=18056 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/221/cgroup.controllers" dev="sda1" ino=15704 res=1 [ 500.731986][ T3836] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 500.822192][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 500.942766][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 500.950934][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 500.959409][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 500.968439][ T3836] usb 4-1: config 0 has no interface number 0 [ 500.974604][ T3836] usb 4-1: config 0 has no interface number 1 [ 500.980746][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 500.991541][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 501.004569][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 501.015594][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 501.028878][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 501.035702][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 501.042529][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 501.051553][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.060804][ T3836] usb 4-1: config 0 descriptor?? [ 501.331938][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 501.352033][ T3836] usb 4-1: Could not set interface, error -71 [ 501.361407][ T3836] usb 4-1: USB disconnect, device number 86 02:15:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2454, &(0x7f00000000c0)={0x40}) 02:15:15 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 02:15:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5625, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:15 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "f6720edf53c38ca329dc7ce34a1ee748"}, 0x11, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045007, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x73b) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000000000)=0x1) 02:15:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x1001000000e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:15 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffc9c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r5, 0xb}}, 0x18) 02:15:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x6364, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2554, &(0x7f00000000c0)={0x40}) [ 501.989604][ T27] audit: type=1804 audit(1591064115.782:195): pid=18096 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/222/cgroup.controllers" dev="sda1" ino=16367 res=1 02:15:15 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 02:15:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2754, &(0x7f00000000c0)={0x40}) 02:15:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x890b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:16 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, r3, 0xbda5b000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2854, &(0x7f00000000c0)={0x40}) 02:15:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x8912, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x1001000000f0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:16 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) [ 502.331950][ T3836] usb 4-1: new high-speed USB device number 87 using dummy_hcd 02:15:16 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 502.524655][ T27] audit: type=1804 audit(1591064116.322:196): pid=18132 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/223/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 502.611430][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 502.732161][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 502.745029][ T3836] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 502.755737][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 502.766164][ T3836] usb 4-1: config 0 has no interface number 0 [ 502.773758][ T3836] usb 4-1: config 0 has no interface number 1 [ 502.780115][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 502.793383][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 502.807543][ T3836] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 502.819342][ T3836] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 502.833860][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 502.840708][ T3836] usb 4-1: config 0 interface 89 has no altsetting 0 [ 502.849442][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 502.866108][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.875632][ T3836] usb 4-1: config 0 descriptor?? [ 503.162102][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 503.182263][ T3836] usb 4-1: Could not set interface, error -71 [ 503.199566][ T3836] usb 4-1: USB disconnect, device number 87 [ 503.901850][ T3834] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 504.141875][ T3834] usb 4-1: Using ep0 maxpacket: 8 [ 504.261929][ T3834] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 504.270138][ T3834] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 504.278771][ T3834] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 504.287989][ T3834] usb 4-1: config 0 has no interface number 0 [ 504.294184][ T3834] usb 4-1: config 0 has no interface number 1 [ 504.300261][ T3834] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 504.311031][ T3834] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 504.324351][ T3834] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 504.335438][ T3834] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 504.348772][ T3834] usb 4-1: config 0 interface 143 has no altsetting 0 [ 504.355603][ T3834] usb 4-1: config 0 interface 89 has no altsetting 0 [ 504.362497][ T3834] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 504.371511][ T3834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.385348][ T3834] usb 4-1: config 0 descriptor?? 02:15:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x8933, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2954, &(0x7f00000000c0)={0x40}) 02:15:18 executing program 4: unshare(0x20040880) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:18 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 02:15:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000190) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:18 executing program 3: setuid(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0) [ 504.671137][ T3834] usb 4-1: string descriptor 0 read error: -71 [ 504.702192][ T3834] usb 4-1: Could not set interface, error -71 02:15:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2f4b, &(0x7f00000000c0)={0x40}) 02:15:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xae01, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 504.741203][ T3834] usb 4-1: USB disconnect, device number 88 02:15:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x304b, &(0x7f00000000c0)={0x40}) 02:15:18 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c55f26b71385446, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x9d0000, 0x0, 0x7ff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x99096c, 0x9, [], @string=&(0x7f0000000000)=0x20}}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000200)=0x8) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000140)=0x2) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) [ 504.836643][ T27] audit: type=1804 audit(1591064118.632:197): pid=18189 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/224/cgroup.controllers" dev="sda1" ino=16374 res=1 02:15:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x315040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x41002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xae41, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x314b, &(0x7f00000000c0)={0x40}) [ 504.998536][T18204] device bridge20 entered promiscuous mode [ 505.033801][T18211] bridge20: port 1(bridge_slave_0) entered blocking state [ 505.050078][T18211] bridge20: port 1(bridge_slave_0) entered disabled state [ 505.086207][T18211] device bridge_slave_0 entered promiscuous mode 02:15:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xae80, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x324b, &(0x7f00000000c0)={0x40}) [ 505.118726][T18211] bridge20: port 1(bridge_slave_0) entered blocking state [ 505.126056][T18211] bridge20: port 1(bridge_slave_0) entered forwarding state 02:15:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r5, 0x6}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000100), 0x0) sendfile(r3, r6, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x1ff, 0x6, 0x1, 0x1, 0x1}, 0x8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x1001000001f3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x400454ca, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000000)={0x7fffffff, 0xcd, 0x4, 0x3ff, 0x4000000}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045007, 0x0) 02:15:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x334b, &(0x7f00000000c0)={0x40}) 02:15:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000340)={r7}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x0) 02:15:19 executing program 1 (fault-call:1 fault-nth:0): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x3389, &(0x7f00000000c0)={0x40}) 02:15:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4004550a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:19 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) [ 505.457231][T18240] device bridge18 entered promiscuous mode [ 505.500042][ T27] audit: type=1804 audit(1591064119.292:198): pid=18238 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/225/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 505.508577][T18246] device bridge_slave_0 left promiscuous mode [ 505.538845][T18249] FAULT_INJECTION: forcing a failure. [ 505.538845][T18249] name failslab, interval 1, probability 0, space 0, times 0 [ 505.551668][T18249] CPU: 1 PID: 18249 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 505.559980][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.560286][T18246] bridge6: port 1(bridge_slave_0) entered disabled state [ 505.570020][T18249] Call Trace: [ 505.570062][T18249] dump_stack+0x1e9/0x30e [ 505.570078][T18249] should_fail+0x433/0x5b0 [ 505.570166][T18249] ? __sigqueue_alloc+0x2d1/0x4b0 [ 505.570182][T18249] should_failslab+0x5/0x20 [ 505.598714][T18249] kmem_cache_alloc+0x53/0x2d0 [ 505.603477][T18249] __sigqueue_alloc+0x2d1/0x4b0 [ 505.608347][T18249] __send_signal+0x288/0xcb0 [ 505.612940][T18249] force_sig_info_to_task+0x24e/0x2e0 [ 505.618316][T18249] force_sig_fault+0xbb/0x130 [ 505.622999][T18249] page_fault+0x39/0x40 [ 505.627146][T18249] RIP: 0033:0x4566cf [ 505.631034][T18249] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f 02:15:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40049409, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x344b, &(0x7f00000000c0)={0x40}) [ 505.650632][T18249] RSP: 002b:00007f946d7847a8 EFLAGS: 00010283 [ 505.656686][T18249] RAX: 00007f946d784850 RBX: 0000000000509400 RCX: 0000000000000000 [ 505.664646][T18249] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f946d784850 [ 505.672623][T18249] RBP: 000000000078bf00 R08: 00000000000003ff R09: 0000000000000000 [ 505.680585][T18249] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000004 [ 505.688549][T18249] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 02:15:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40085503, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 505.782595][T18246] bridge18: port 1(bridge_slave_0) entered blocking state [ 505.801930][ T3836] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 505.823379][T18246] bridge18: port 1(bridge_slave_0) entered disabled state [ 505.851392][T18246] device bridge_slave_0 entered promiscuous mode [ 505.876242][T18246] bridge18: port 1(bridge_slave_0) entered blocking state [ 505.883497][T18246] bridge18: port 1(bridge_slave_0) entered forwarding state [ 506.075931][ T3836] usb 4-1: device descriptor read/64, error 18 02:15:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x1001000001fe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x354b, &(0x7f00000000c0)={0x40}) 02:15:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40095505, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:20 executing program 1 (fault-call:1 fault-nth:1): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) [ 506.306813][ T27] audit: type=1804 audit(1591064120.102:199): pid=18279 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/226/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 506.310507][T18284] FAULT_INJECTION: forcing a failure. [ 506.310507][T18284] name failslab, interval 1, probability 0, space 0, times 0 [ 506.350289][T18284] CPU: 1 PID: 18284 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 506.358612][T18284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.368659][T18284] Call Trace: [ 506.371950][T18284] dump_stack+0x1e9/0x30e [ 506.376287][T18284] should_fail+0x433/0x5b0 [ 506.381056][T18284] ? getname_flags+0xb8/0x610 [ 506.385729][T18284] should_failslab+0x5/0x20 [ 506.390228][T18284] kmem_cache_alloc+0x53/0x2d0 [ 506.394991][T18284] getname_flags+0xb8/0x610 [ 506.399492][T18284] ? __local_bh_enable_ip+0x133/0x230 [ 506.404930][T18284] do_sys_openat2+0x40d/0x770 [ 506.409792][T18284] __x64_sys_open+0x1af/0x1e0 [ 506.414477][T18284] do_syscall_64+0xf3/0x1b0 [ 506.418984][T18284] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 506.425409][T18284] RIP: 0033:0x416861 [ 506.429395][T18284] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 506.449078][T18284] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 506.457474][T18284] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 506.465430][T18284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 506.471822][ T3836] usb 4-1: device descriptor read/64, error 18 [ 506.473379][T18284] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 506.473387][T18284] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 506.473393][T18284] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 [ 506.781790][ T3836] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 507.051869][ T3836] usb 4-1: device descriptor read/64, error 18 [ 507.441852][ T3836] usb 4-1: device descriptor read/64, error 18 [ 507.562037][ T3836] usb usb4-port1: attempt power cycle [ 508.271808][ T3836] usb 4-1: new high-speed USB device number 91 using dummy_hcd 02:15:22 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 02:15:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40186366, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x369222, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044085}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="37c7a0693521e8d2d3c0fde53a5fea25bce5850d3df1f348319ef3f9e00b8f6c0357339f8985d42e8328b0ec836614c68bfa0f6ebbce8872c33c1bf5323be9543200"/76], 0x28}}, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)=@v1={0x2, "d6955e55b6349edaec0f8c18d3ee08"}, 0x10, 0x2) r7 = socket(0x9, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r10, @ANYRES16=r10, @ANYBLOB="01012cbd7000fedbdf2502000000080005000a08000500000000002600070073797374656d5f753a6f626a6563745f723a6b736d5f64657669636d5f743a73300002001f00070073797374656d5f753a6f626a6563745f723a7661725f743a733000000a000500e000000214000200ff010000000000000000000000000001c9e9ec7d6498581a69b900", @ANYRES32=0x0, @ANYRES64=r8], 0x88}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ba2fe498", @ANYRES16=r10, @ANYBLOB="010025bd7000ffdbdf25020000002b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f743a7330000014000200fe8000000000000000000000000000aa140006000000000000000000000000000000000014000300fe880000000000000000000000000001050001000100000014000300ff020000000000000000000000000001"], 0x98}, 0x1, 0x0, 0x0, 0x4004420}, 0x88c0) 02:15:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x364b, &(0x7f00000000c0)={0x40}) 02:15:22 executing program 1 (fault-call:1 fault-nth:2): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000211) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 508.415892][T18305] FAULT_INJECTION: forcing a failure. [ 508.415892][T18305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.421914][ T3836] usb 4-1: device descriptor read/8, error -71 [ 508.429123][T18305] CPU: 1 PID: 18305 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 508.443551][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.453619][T18305] Call Trace: [ 508.456909][T18305] dump_stack+0x1e9/0x30e [ 508.461238][T18305] should_fail+0x433/0x5b0 [ 508.465681][T18305] prepare_alloc_pages+0x28c/0x4a0 [ 508.472275][T18305] __alloc_pages_nodemask+0xbc/0x5e0 [ 508.477571][T18305] kmem_getpages+0x49/0x900 [ 508.482074][T18305] cache_grow_begin+0x7b/0x2e0 [ 508.486843][T18305] cache_alloc_refill+0x359/0x3f0 [ 508.491867][T18305] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 508.497588][T18305] ? check_preemption_disabled+0xb0/0x240 [ 508.503304][T18305] ? debug_smp_processor_id+0x5/0x20 [ 508.504317][T18309] device bridge_slave_0 left promiscuous mode [ 508.508580][T18305] ? getname_flags+0xb8/0x610 [ 508.508592][T18305] kmem_cache_alloc+0x2b5/0x2d0 [ 508.508607][T18305] getname_flags+0xb8/0x610 [ 508.508618][T18305] ? __local_bh_enable_ip+0x133/0x230 [ 508.508634][T18305] do_sys_openat2+0x40d/0x770 [ 508.508652][T18305] __x64_sys_open+0x1af/0x1e0 [ 508.543331][T18305] do_syscall_64+0xf3/0x1b0 [ 508.545496][T18309] bridge20: port 1(bridge_slave_0) entered disabled state [ 508.547848][T18305] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 508.547859][T18305] RIP: 0033:0x416861 [ 508.547870][T18305] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 508.547876][T18305] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 508.547887][T18305] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 508.547894][T18305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 508.547900][T18305] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 02:15:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4020940d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 508.547911][T18305] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 508.624783][T18305] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 02:15:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x374b, &(0x7f00000000c0)={0x40}) 02:15:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4020ae46, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 508.675047][ T3836] usb 4-1: device descriptor read/8, error -71 02:15:22 executing program 1 (fault-call:1 fault-nth:3): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000212) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 508.820609][T18329] FAULT_INJECTION: forcing a failure. [ 508.820609][T18329] name failslab, interval 1, probability 0, space 0, times 0 [ 508.869383][T18329] CPU: 1 PID: 18329 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 508.877757][T18329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.888066][T18329] Call Trace: [ 508.891354][T18329] dump_stack+0x1e9/0x30e [ 508.895685][T18329] should_fail+0x433/0x5b0 [ 508.900107][T18329] ? __alloc_file+0x26/0x390 [ 508.904695][T18329] should_failslab+0x5/0x20 [ 508.909195][T18329] kmem_cache_alloc+0x53/0x2d0 [ 508.913961][T18329] __alloc_file+0x26/0x390 [ 508.918411][T18329] ? alloc_empty_file+0x49/0x1b0 [ 508.923345][T18329] alloc_empty_file+0xa9/0x1b0 [ 508.928109][T18329] path_openat+0xa8/0x38b0 [ 508.932524][T18329] ? __lock_acquire+0x116c/0x2c30 [ 508.937585][T18329] ? lock_acquire+0x169/0x480 [ 508.942277][T18329] do_filp_open+0x191/0x3a0 [ 508.946779][T18329] ? do_raw_spin_unlock+0x134/0x8d0 [ 508.951982][T18329] ? _raw_spin_unlock+0x24/0x40 [ 508.956883][T18329] ? __alloc_fd+0x566/0x600 [ 508.961408][T18329] do_sys_openat2+0x463/0x770 [ 508.966090][T18329] __x64_sys_open+0x1af/0x1e0 [ 508.970800][T18329] do_syscall_64+0xf3/0x1b0 [ 508.975313][T18329] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 508.981199][T18329] RIP: 0033:0x416861 [ 508.985091][T18329] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 509.004687][T18329] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 509.013091][T18329] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 509.021056][T18329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 509.029022][T18329] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 509.036989][T18329] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 509.044957][T18329] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 [ 509.073549][ T27] audit: type=1804 audit(1591064122.872:200): pid=18333 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/228/cgroup.controllers" dev="sda1" ino=15778 res=1 [ 509.172142][ T3836] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 509.262207][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 509.381781][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 509.389996][ T3836] usb 4-1: config 0 has an invalid interface number: 7 but max is 4 [ 509.399366][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 509.409588][ T3836] usb 4-1: config 0 has no interface number 0 [ 509.416443][ T3836] usb 4-1: config 0 has no interface number 1 [ 509.423447][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 509.434952][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 509.448660][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 509.456348][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 509.465950][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.478318][ T3836] usb 4-1: config 0 descriptor?? [ 509.762044][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 509.782053][ T3836] usb 4-1: Could not set interface, error -71 [ 509.800870][ T3836] usb 4-1: USB disconnect, device number 92 [ 510.491747][ T3836] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 510.731799][ T3836] usb 4-1: Using ep0 maxpacket: 8 [ 510.851953][ T3836] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 510.860199][ T3836] usb 4-1: config 0 has an invalid interface number: 7 but max is 4 [ 510.869466][ T3836] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 510.879100][ T3836] usb 4-1: config 0 has no interface number 0 [ 510.885809][ T3836] usb 4-1: config 0 has no interface number 1 [ 510.892835][ T3836] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 510.905725][ T3836] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 510.919396][ T3836] usb 4-1: config 0 interface 143 has no altsetting 0 [ 510.927184][ T3836] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 510.937053][ T3836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.946534][ T3836] usb 4-1: config 0 descriptor?? 02:15:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x41015500, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x3754, &(0x7f00000000c0)={0x40}) 02:15:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x105) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:25 executing program 1 (fault-call:1 fault-nth:4): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:25 executing program 3: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) [ 511.251875][ T3836] usb 4-1: string descriptor 0 read error: -71 [ 511.275585][ T3836] usb 4-1: Could not set interface, error -71 [ 511.277201][T18377] FAULT_INJECTION: forcing a failure. [ 511.277201][T18377] name failslab, interval 1, probability 0, space 0, times 0 [ 511.335036][ T3836] usb 4-1: USB disconnect, device number 93 [ 511.370501][T18377] CPU: 1 PID: 18377 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 511.378646][T18386] device bridge19 entered promiscuous mode [ 511.379015][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.394866][T18377] Call Trace: [ 511.398157][T18377] dump_stack+0x1e9/0x30e [ 511.402487][T18377] should_fail+0x433/0x5b0 [ 511.406907][T18377] ? security_file_alloc+0x32/0x200 [ 511.412105][T18377] should_failslab+0x5/0x20 [ 511.416605][T18377] kmem_cache_alloc+0x53/0x2d0 [ 511.421393][T18377] security_file_alloc+0x32/0x200 [ 511.426418][T18377] __alloc_file+0xd7/0x390 [ 511.430864][T18377] alloc_empty_file+0xa9/0x1b0 [ 511.435629][T18377] path_openat+0xa8/0x38b0 [ 511.440065][T18377] ? __lock_acquire+0x116c/0x2c30 [ 511.445099][T18377] ? lock_acquire+0x169/0x480 [ 511.449788][T18377] do_filp_open+0x191/0x3a0 [ 511.454295][T18377] ? do_raw_spin_unlock+0x134/0x8d0 [ 511.459492][T18377] ? _raw_spin_unlock+0x24/0x40 [ 511.464340][T18377] ? __alloc_fd+0x566/0x600 [ 511.472263][T18377] do_sys_openat2+0x463/0x770 [ 511.476945][T18377] __x64_sys_open+0x1af/0x1e0 [ 511.481657][T18377] do_syscall_64+0xf3/0x1b0 [ 511.486166][T18377] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 511.492071][T18377] RIP: 0033:0x416861 [ 511.495957][T18377] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 511.515567][T18377] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 511.523974][T18377] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 02:15:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x3a4b, &(0x7f00000000c0)={0x40}) 02:15:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80044945, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x3b4b, &(0x7f00000000c0)={0x40}) 02:15:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045432, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 511.531934][T18377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 511.539904][T18377] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 511.547872][T18377] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 511.555842][T18377] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 02:15:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x432f02, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) [ 511.583034][ T27] audit: type=1804 audit(1591064125.382:201): pid=18388 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/229/cgroup.controllers" dev="sda1" ino=16306 res=1 [ 511.616458][T18389] device bridge_slave_0 left promiscuous mode 02:15:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x3c4b, &(0x7f00000000c0)={0x40}) 02:15:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000500) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 511.654176][T18389] bridge18: port 1(bridge_slave_0) entered disabled state 02:15:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045440, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:25 executing program 1 (fault-call:1 fault-nth:5): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80085502, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 511.834404][T18389] bridge19: port 1(bridge_slave_0) entered blocking state [ 511.835725][T18423] FAULT_INJECTION: forcing a failure. [ 511.835725][T18423] name failslab, interval 1, probability 0, space 0, times 0 [ 511.859220][T18389] bridge19: port 1(bridge_slave_0) entered disabled state [ 511.861885][ T3836] usb 4-1: new high-speed USB device number 94 using dummy_hcd 02:15:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x3d4b, &(0x7f00000000c0)={0x40}) [ 511.895360][ T27] audit: type=1804 audit(1591064125.692:202): pid=18424 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/230/cgroup.controllers" dev="sda1" ino=16274 res=1 [ 511.948421][T18423] CPU: 0 PID: 18423 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 511.956761][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.966811][T18423] Call Trace: [ 511.970105][T18423] dump_stack+0x1e9/0x30e [ 511.974462][T18423] should_fail+0x433/0x5b0 [ 511.978883][T18423] ? tomoyo_realpath_from_path+0xd8/0x630 [ 511.980608][T18389] device bridge_slave_0 entered promiscuous mode [ 511.984602][T18423] should_failslab+0x5/0x20 [ 511.984614][T18423] __kmalloc+0x74/0x330 [ 511.984628][T18423] ? tomoyo_realpath_from_path+0xcb/0x630 [ 511.984643][T18423] tomoyo_realpath_from_path+0xd8/0x630 [ 511.984656][T18423] ? memset+0x1f/0x40 [ 511.984673][T18423] tomoyo_check_open_permission+0x1b6/0x900 [ 511.984712][T18423] security_file_open+0x50/0xc0 [ 512.025496][T18423] do_dentry_open+0x35d/0x10b0 [ 512.028462][T18389] bridge19: port 1(bridge_slave_0) entered blocking state [ 512.030265][T18423] path_openat+0x2790/0x38b0 [ 512.030309][T18423] do_filp_open+0x191/0x3a0 [ 512.038447][T18389] bridge19: port 1(bridge_slave_0) entered forwarding state [ 512.041960][T18423] ? _raw_spin_unlock+0x24/0x40 [ 512.041973][T18423] ? __alloc_fd+0x566/0x600 [ 512.041994][T18423] do_sys_openat2+0x463/0x770 [ 512.042014][T18423] __x64_sys_open+0x1af/0x1e0 [ 512.072381][T18423] do_syscall_64+0xf3/0x1b0 [ 512.076883][T18423] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 512.083220][T18423] RIP: 0033:0x416861 [ 512.087114][T18423] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 512.106715][T18423] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 512.115120][T18423] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 512.123086][T18423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 512.131054][T18423] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 512.139044][T18423] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 512.147011][T18423] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 [ 512.238742][T18423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 512.362247][ T3836] usb 4-1: device descriptor read/64, error 18 [ 512.616681][ T27] audit: type=1804 audit(1591064126.412:203): pid=18422 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/230/cgroup.controllers" dev="sda1" ino=16274 res=1 [ 512.761758][ T3836] usb 4-1: device descriptor read/64, error 18 [ 513.033730][ T3836] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 513.301782][ T3836] usb 4-1: device descriptor read/64, error 18 [ 513.691799][ T3836] usb 4-1: device descriptor read/64, error 18 [ 513.812671][ T3836] usb usb4-port1: attempt power cycle 02:15:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x404b, &(0x7f00000000c0)={0x40}) 02:15:28 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x403, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80086301, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:28 executing program 1 (fault-call:1 fault-nth:6): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:28 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x400400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000000)=0x5) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000140)) 02:15:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x414b, &(0x7f00000000c0)={0x40}) 02:15:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80105014, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 514.454199][T18459] FAULT_INJECTION: forcing a failure. [ 514.454199][T18459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.467449][T18459] CPU: 1 PID: 18459 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 514.475788][T18459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.485839][T18459] Call Trace: [ 514.489126][T18459] dump_stack+0x1e9/0x30e [ 514.493455][T18459] should_fail+0x433/0x5b0 [ 514.497876][T18459] prepare_alloc_pages+0x28c/0x4a0 [ 514.502987][T18459] __alloc_pages_nodemask+0xbc/0x5e0 [ 514.508270][T18459] ? __lock_acquire+0x116c/0x2c30 [ 514.513327][T18459] kmem_getpages+0x49/0x900 [ 514.517833][T18459] cache_grow_begin+0x7b/0x2e0 [ 514.522625][T18459] cache_alloc_refill+0x359/0x3f0 [ 514.527648][T18459] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 514.533366][T18459] ? check_preemption_disabled+0xb0/0x240 [ 514.539084][T18459] ? debug_smp_processor_id+0x5/0x20 [ 514.544372][T18459] __kmalloc+0x30c/0x330 [ 514.548625][T18459] ? tomoyo_realpath_from_path+0xd8/0x630 [ 514.554343][T18459] tomoyo_realpath_from_path+0xd8/0x630 [ 514.559891][T18459] ? memset+0x1f/0x40 [ 514.563882][T18459] tomoyo_check_open_permission+0x1b6/0x900 [ 514.569799][T18459] security_file_open+0x50/0xc0 [ 514.574657][T18459] do_dentry_open+0x35d/0x10b0 [ 514.579431][T18459] path_openat+0x2790/0x38b0 [ 514.584051][T18459] do_filp_open+0x191/0x3a0 [ 514.588564][T18459] ? _raw_spin_unlock+0x24/0x40 [ 514.593416][T18459] ? __alloc_fd+0x566/0x600 [ 514.597924][T18459] do_sys_openat2+0x463/0x770 [ 514.602604][T18459] __x64_sys_open+0x1af/0x1e0 [ 514.607288][T18459] do_syscall_64+0xf3/0x1b0 [ 514.611792][T18459] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 514.617680][T18459] RIP: 0033:0x416861 [ 514.621570][T18459] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 514.641168][T18459] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 02:15:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4154, &(0x7f00000000c0)={0x40}) 02:15:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x41ae, &(0x7f00000000c0)={0x40}) 02:15:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x444b, &(0x7f00000000c0)={0x40}) [ 514.649574][T18459] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 514.657555][T18459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 514.665535][T18459] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 514.673500][T18459] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 514.681464][T18459] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 02:15:28 executing program 4: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045007, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) 02:15:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 514.778648][ T27] audit: type=1804 audit(1591064128.572:204): pid=18460 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/231/cgroup.controllers" dev="sda1" ino=16322 res=1 02:15:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x454b, &(0x7f00000000c0)={0x40}) 02:15:28 executing program 1 (fault-call:1 fault-nth:7): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 514.981735][ T3836] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 515.006755][T18493] FAULT_INJECTION: forcing a failure. [ 515.006755][T18493] name failslab, interval 1, probability 0, space 0, times 0 02:15:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000700) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 515.078844][T18493] CPU: 1 PID: 18493 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 515.087175][T18493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.097222][T18493] Call Trace: [ 515.100510][T18493] dump_stack+0x1e9/0x30e [ 515.104841][T18493] should_fail+0x433/0x5b0 [ 515.109357][T18493] ? snd_card_file_add+0x57/0x260 [ 515.114406][T18493] should_failslab+0x5/0x20 [ 515.118903][T18493] kmem_cache_alloc_trace+0x57/0x300 [ 515.124238][T18493] ? snd_rawmidi_open+0x1e7/0xa10 [ 515.129263][T18493] ? __mutex_unlock_slowpath+0x12d/0x580 [ 515.134895][T18493] snd_card_file_add+0x57/0x260 [ 515.139746][T18493] snd_rawmidi_open+0x20a/0xa10 [ 515.144610][T18493] ? snd_open+0x213/0x390 [ 515.148945][T18493] ? __mutex_unlock_slowpath+0x12d/0x580 [ 515.154577][T18493] ? snd_open+0x304/0x390 [ 515.158907][T18493] chrdev_open+0x498/0x580 [ 515.163322][T18493] ? cd_forget+0x150/0x150 [ 515.167735][T18493] do_dentry_open+0x82e/0x10b0 [ 515.172505][T18493] path_openat+0x2790/0x38b0 [ 515.177126][T18493] do_filp_open+0x191/0x3a0 [ 515.181636][T18493] ? _raw_spin_unlock+0x24/0x40 [ 515.186503][T18493] ? __alloc_fd+0x566/0x600 [ 515.191020][T18493] do_sys_openat2+0x463/0x770 [ 515.195702][T18493] __x64_sys_open+0x1af/0x1e0 [ 515.200383][T18493] do_syscall_64+0xf3/0x1b0 [ 515.204889][T18493] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 515.210776][T18493] RIP: 0033:0x416861 [ 515.214674][T18493] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 515.234271][T18493] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 515.242672][T18493] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 515.250635][T18493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 515.258626][T18493] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 515.266590][T18493] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 515.274578][T18493] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 [ 515.283328][ T27] audit: type=1804 audit(1591064128.872:205): pid=18506 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/232/cgroup.controllers" dev="sda1" ino=16338 res=1 [ 515.314963][T18506] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 515.332213][T18506] File: /root/syzkaller-testdir875291760/syzkaller.dEqCal/232/cgroup.controllers PID: 18506 Comm: syz-executor.2 [ 515.392054][ T3836] usb 4-1: device descriptor read/8, error -61 [ 515.681801][ T3836] usb 4-1: device descriptor read/8, error -61 [ 515.951692][ T3836] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 516.121806][ T3836] usb 4-1: device descriptor read/8, error -61 [ 516.391941][ T3836] usb 4-1: device descriptor read/8, error -61 [ 516.513312][ T3836] usb usb4-port1: unable to enumerate USB device 02:15:31 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670805007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x3674}) 02:15:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4601, &(0x7f00000000c0)={0x40}) 02:15:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0085504, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:31 executing program 1 (fault-call:1 fault-nth:8): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000900) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x9, 0xa, 0xe57) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r3}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r3, 0x0, 0x5, [0x0, 0x100, 0x2, 0x0, 0x0]}, 0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x2, 0x4, 0x400, 0xac8b356bac584d24, 0x5, 0x4}, 0x9c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r4, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000000)=0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000340)={0x9e0000, 0x8, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9a0904, 0x2, [], @string=&(0x7f00000002c0)=0x3}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={r3, 0x80, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x2df4fe01, @dev={0xfe, 0x80, [], 0x3f}}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x1ff, @private2, 0x800}, @in6={0xa, 0x4e23, 0xaf, @private0, 0x7fff}, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x22}, 0xffff5b71}]}, &(0x7f0000000440)=0x10) [ 517.473940][T18529] FAULT_INJECTION: forcing a failure. [ 517.473940][T18529] name failslab, interval 1, probability 0, space 0, times 0 [ 517.524307][T18529] CPU: 0 PID: 18529 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 517.532639][T18529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.542776][T18529] Call Trace: [ 517.546066][T18529] dump_stack+0x1e9/0x30e [ 517.550400][T18529] should_fail+0x433/0x5b0 [ 517.554836][T18529] ? open_substream+0xb0/0x6a0 [ 517.559601][T18529] should_failslab+0x5/0x20 [ 517.564103][T18529] kmem_cache_alloc_trace+0x57/0x300 [ 517.569393][T18529] open_substream+0xb0/0x6a0 [ 517.574008][T18529] rawmidi_open_priv+0x99/0x900 [ 517.580944][T18529] ? snd_ctl_get_preferred_subdevice+0x155/0x170 [ 517.587270][T18529] snd_rawmidi_open+0x414/0xa10 [ 517.592191][T18529] ? do_task_dead+0xb0/0xb0 [ 517.596702][T18529] chrdev_open+0x498/0x580 [ 517.601117][T18529] ? cd_forget+0x150/0x150 [ 517.605531][T18529] do_dentry_open+0x82e/0x10b0 [ 517.610305][T18529] path_openat+0x2790/0x38b0 [ 517.614931][T18529] do_filp_open+0x191/0x3a0 [ 517.619446][T18529] ? _raw_spin_unlock+0x24/0x40 [ 517.624295][T18529] ? __alloc_fd+0x566/0x600 [ 517.628805][T18529] do_sys_openat2+0x463/0x770 [ 517.633499][T18529] __x64_sys_open+0x1af/0x1e0 [ 517.638178][T18529] do_syscall_64+0xf3/0x1b0 [ 517.642682][T18529] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 517.648916][T18529] RIP: 0033:0x416861 [ 517.652805][T18529] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 02:15:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x26, 0x2, 0x2, "dfde09474d562b09fe516c626590c93b", "783fe783b9f957dd08149e692f3ae6ca34"}, 0x26, 0x3) 02:15:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc020660b, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x464b, &(0x7f00000000c0)={0x40}) [ 517.672408][T18529] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 517.680818][T18529] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 517.688782][T18529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 517.696753][T18529] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 517.704717][T18529] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 517.712686][T18529] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 [ 517.741350][ T27] audit: type=1804 audit(1591064131.532:206): pid=18536 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/233/cgroup.controllers" dev="sda1" ino=16368 res=1 02:15:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc028564d, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) 02:15:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x9, 0x2, 0x67, 0x0, 0x1, 0x3}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1ff, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) [ 517.932544][T18557] device bridge21 entered promiscuous mode [ 517.946057][T18557] bridge21: port 1(bridge_slave_0) entered blocking state [ 517.953628][T18557] bridge21: port 1(bridge_slave_0) entered disabled state [ 517.963808][T18557] device bridge_slave_0 entered promiscuous mode [ 517.971359][T18557] bridge21: port 1(bridge_slave_0) entered blocking state [ 517.978610][T18557] bridge21: port 1(bridge_slave_0) entered forwarding state [ 518.007954][T18562] device bridge_slave_0 left promiscuous mode [ 518.014664][T18562] bridge21: port 1(bridge_slave_0) entered disabled state [ 518.032768][ T2709] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 518.271719][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 518.311814][ T2709] usb 4-1: too many configurations: 34, using maximum allowed: 8 [ 518.431880][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 518.439509][ T2709] usb 4-1: can't read configurations, error -61 [ 518.591638][ T2709] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 518.831684][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 518.871800][ T2709] usb 4-1: too many configurations: 34, using maximum allowed: 8 [ 518.991742][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 518.999355][ T2709] usb 4-1: can't read configurations, error -61 [ 519.006043][ T2709] usb usb4-port1: attempt power cycle [ 519.642693][ T0] NOHZ: local_softirq_pending 08 [ 519.731776][ T2709] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 519.821740][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 519.861782][ T2709] usb 4-1: too many configurations: 34, using maximum allowed: 8 [ 519.981714][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 519.989439][ T2709] usb 4-1: can't read configurations, error -61 [ 520.143669][ T2709] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 520.252876][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 520.291981][ T2709] usb 4-1: too many configurations: 34, using maximum allowed: 8 02:15:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x3ff, 0x7, 0x40, 0x2}, {0x7, 0x3, 0x9, 0x6c}, {0x1, 0x7, 0x1, 0x2}, {0x8, 0x4, 0x3b, 0x4}, {0x8001, 0xe1, 0x0, 0xf2}, {0x0, 0x3, 0x81}, {0xda, 0x7, 0xcf, 0xddf}, {0x1, 0x0, 0x0, 0x6}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x6000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) 02:15:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000a00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:34 executing program 1 (fault-call:1 fault-nth:9): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x2, 0x0, 0xb7d2, 0x8}) 02:15:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x474b, &(0x7f00000000c0)={0x40}) 02:15:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) r1 = socket(0x10, 0x3, 0x8f) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x35, 0x0, "3923c5af9751131589ec0df0cc90f1b7e892cbebe56aea841bad7272c7e0f2e6b920dc7cd769878d76970c954831f6b2f4b24cc8675279b450bcb8cf299313fd2d6800ee370c49a674813ba96b6b4e14"}, 0xd8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 520.411851][ T2709] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 520.419602][ T2709] usb 4-1: can't read configurations, error -61 [ 520.426659][ T2709] usb usb4-port1: unable to enumerate USB device 02:15:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x16fa, 0x0, 0xb7d2, 0x8}) [ 520.515707][T18576] FAULT_INJECTION: forcing a failure. [ 520.515707][T18576] name failslab, interval 1, probability 0, space 0, times 0 02:15:34 executing program 4: ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000140)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x2, 0x100) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0x6, {0x40, 0x1, 0x6}}) [ 520.594736][T18576] CPU: 1 PID: 18576 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 520.603084][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.613135][T18576] Call Trace: [ 520.616425][T18576] dump_stack+0x1e9/0x30e [ 520.620758][T18576] should_fail+0x433/0x5b0 [ 520.625185][T18576] should_failslab+0x5/0x20 [ 520.629688][T18576] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 520.635399][T18576] ? __kmalloc_node+0x37/0x60 [ 520.640088][T18576] __kmalloc_node+0x37/0x60 [ 520.644588][T18576] kvmalloc_node+0x81/0x100 [ 520.649093][T18576] open_substream+0x2aa/0x6a0 [ 520.653776][T18576] rawmidi_open_priv+0x99/0x900 [ 520.658627][T18576] ? snd_ctl_get_preferred_subdevice+0x155/0x170 [ 520.664955][T18576] snd_rawmidi_open+0x414/0xa10 [ 520.669815][T18576] ? do_task_dead+0xb0/0xb0 [ 520.674327][T18576] chrdev_open+0x498/0x580 [ 520.678741][T18576] ? cd_forget+0x150/0x150 [ 520.683157][T18576] do_dentry_open+0x82e/0x10b0 [ 520.688017][T18576] path_openat+0x2790/0x38b0 [ 520.692641][T18576] do_filp_open+0x191/0x3a0 [ 520.697151][T18576] ? _raw_spin_unlock+0x24/0x40 [ 520.701998][T18576] ? __alloc_fd+0x566/0x600 [ 520.706507][T18576] do_sys_openat2+0x463/0x770 [ 520.711189][T18576] __x64_sys_open+0x1af/0x1e0 [ 520.715873][T18576] do_syscall_64+0xf3/0x1b0 [ 520.720377][T18576] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 520.726264][T18576] RIP: 0033:0x416861 [ 520.730150][T18576] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 520.749746][T18576] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 520.758330][T18576] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 520.766295][T18576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 520.774264][T18576] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 520.782228][T18576] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 02:15:34 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x101440) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x101, 0x2}) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, {0xa, 0x4e24, 0x9, @loopback, 0xfff}, 0x6, [0x1, 0x1, 0x5, 0x0, 0x8, 0xffffff81, 0x3, 0x7fff]}, 0x5c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) 02:15:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x484b, &(0x7f00000000c0)={0x40}) [ 520.790196][T18576] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 [ 520.798900][ T27] audit: type=1804 audit(1591064134.412:207): pid=18579 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/234/cgroup.controllers" dev="sda1" ino=16366 res=1 02:15:34 executing program 1 (fault-call:1 fault-nth:10): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) [ 520.839677][T18579] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 520.869937][T18579] File: /root/syzkaller-testdir875291760/syzkaller.dEqCal/234/cgroup.controllers PID: 18579 Comm: syz-executor.2 02:15:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x0, 0xb7d2, 0x8}) [ 520.998963][T18602] FAULT_INJECTION: forcing a failure. [ 520.998963][T18602] name failslab, interval 1, probability 0, space 0, times 0 [ 521.055224][T18602] CPU: 1 PID: 18602 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 521.063563][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.073609][T18602] Call Trace: [ 521.076901][T18602] dump_stack+0x1e9/0x30e [ 521.081236][T18602] should_fail+0x433/0x5b0 [ 521.085658][T18602] ? open_substream+0xb0/0x6a0 [ 521.090426][T18602] should_failslab+0x5/0x20 [ 521.094928][T18602] kmem_cache_alloc_trace+0x57/0x300 [ 521.100214][T18602] open_substream+0xb0/0x6a0 [ 521.104806][T18602] rawmidi_open_priv+0x99/0x900 [ 521.109658][T18602] ? snd_ctl_get_preferred_subdevice+0x155/0x170 [ 521.115981][T18602] snd_rawmidi_open+0x414/0xa10 [ 521.120836][T18602] ? do_task_dead+0xb0/0xb0 [ 521.125337][T18602] chrdev_open+0x498/0x580 [ 521.129926][T18602] ? cd_forget+0x150/0x150 [ 521.134337][T18602] do_dentry_open+0x82e/0x10b0 [ 521.139108][T18602] path_openat+0x2790/0x38b0 [ 521.143731][T18602] do_filp_open+0x191/0x3a0 [ 521.148252][T18602] ? _raw_spin_unlock+0x24/0x40 [ 521.153095][T18602] ? __alloc_fd+0x566/0x600 [ 521.157604][T18602] do_sys_openat2+0x463/0x770 [ 521.162287][T18602] __x64_sys_open+0x1af/0x1e0 [ 521.166959][T18602] do_syscall_64+0xf3/0x1b0 [ 521.171479][T18602] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 521.177352][T18602] RIP: 0033:0x416861 [ 521.181352][T18602] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 521.201028][T18602] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 521.209408][T18602] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 521.217393][T18602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 521.225338][T18602] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 521.233378][T18602] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 521.241333][T18602] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 [ 521.336242][ T8708] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 521.611628][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 521.751786][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 521.760043][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 521.769380][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 521.779099][ T8708] usb 4-1: config 0 has no interface number 0 [ 521.785845][ T8708] usb 4-1: config 0 has no interface number 1 [ 521.793554][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 521.804962][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 521.818724][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 521.830455][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 521.844314][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 521.851064][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 521.859582][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 521.869255][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.879419][ T8708] usb 4-1: config 0 descriptor?? [ 522.161697][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 522.181691][ T8708] usb 4-1: Could not set interface, error -71 [ 522.197769][ T8708] usb 4-1: USB disconnect, device number 102 02:15:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x400) 02:15:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000000)={0x3399, 0x40004, "7ab3943d53ee2ed25e748d7797791aa3b481890a2c0448b4", {0xfffffffd, 0x8d8}, 0x4}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045007, 0x0) 02:15:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x494b, &(0x7f00000000c0)={0x40}) 02:15:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x2, 0xb7d2, 0x8}) 02:15:36 executing program 1 (fault-call:1 fault-nth:11): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000b00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x3, 0xb7d2, 0x8}) [ 522.730237][T18641] FAULT_INJECTION: forcing a failure. [ 522.730237][T18641] name failslab, interval 1, probability 0, space 0, times 0 02:15:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4a4b, &(0x7f00000000c0)={0x40}) [ 522.796663][T18641] CPU: 0 PID: 18641 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 522.805002][T18641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.815086][T18641] Call Trace: [ 522.818381][T18641] dump_stack+0x1e9/0x30e [ 522.822711][T18641] should_fail+0x433/0x5b0 [ 522.827151][T18641] should_failslab+0x5/0x20 [ 522.831657][T18641] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 522.837385][T18641] ? __kmalloc_node+0x37/0x60 [ 522.842066][T18641] __kmalloc_node+0x37/0x60 [ 522.846569][T18641] kvmalloc_node+0x81/0x100 [ 522.851099][T18641] open_substream+0x2aa/0x6a0 [ 522.855781][T18641] rawmidi_open_priv+0x99/0x900 [ 522.860635][T18641] ? snd_ctl_get_preferred_subdevice+0x155/0x170 [ 522.866968][T18641] snd_rawmidi_open+0x414/0xa10 [ 522.871831][T18641] ? do_task_dead+0xb0/0xb0 [ 522.876343][T18641] chrdev_open+0x498/0x580 [ 522.880777][T18641] ? cd_forget+0x150/0x150 [ 522.885218][T18641] do_dentry_open+0x82e/0x10b0 [ 522.889993][T18641] path_openat+0x2790/0x38b0 02:15:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x4, 0xb7d2, 0x8}) [ 522.894805][T18641] do_filp_open+0x191/0x3a0 [ 522.899329][T18641] ? _raw_spin_unlock+0x24/0x40 [ 522.904179][T18641] ? __alloc_fd+0x566/0x600 [ 522.908690][T18641] do_sys_openat2+0x463/0x770 [ 522.913385][T18641] __x64_sys_open+0x1af/0x1e0 [ 522.918069][T18641] do_syscall_64+0xf3/0x1b0 [ 522.922583][T18641] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 522.928472][T18641] RIP: 0033:0x416861 02:15:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6209) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x301b, 0x2000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0xffb) ioctl$KDSETLED(r3, 0x4b32, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000013c6ad0ed23cefd7cc5c91e59c25b225d6e79bc9d7fbce6ceee863b48ef16f945c7a20814f86ef718959a5f8f34f6bd91623116cd275f144357676f7e3257b5e069c248f7bfd3a643db9aecec48517394f27324311a6762987cc432be77fc45716dcf2e9ccb14eb30645a84aecd0c638a0415e84d4f9dced39da7a432a69b3003d058578", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250900000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00,\x00\b\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x480d1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045007, 0x0) [ 522.932362][T18641] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 522.951960][T18641] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 522.960398][T18641] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 522.968363][T18641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 522.978330][T18641] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 [ 522.986308][T18641] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 522.994281][T18641] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 02:15:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x5, 0xb7d2, 0x8}) [ 523.062254][T18657] device bridge22 entered promiscuous mode 02:15:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f00000000c0)={0x40}) [ 523.165974][ T2709] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 523.451666][ T2709] usb 4-1: device descriptor read/64, error 18 [ 523.851692][ T2709] usb 4-1: device descriptor read/64, error 18 [ 524.141618][ T2709] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 524.411605][ T2709] usb 4-1: device descriptor read/64, error 18 [ 524.801598][ T2709] usb 4-1: device descriptor read/64, error 18 [ 524.921683][ T2709] usb usb4-port1: attempt power cycle [ 525.631583][ T2709] usb 4-1: new high-speed USB device number 105 using dummy_hcd 02:15:39 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 02:15:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000b35) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x6, 0xb7d2, 0x8}) 02:15:39 executing program 1 (fault-call:1 fault-nth:12): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f00000000c0)={0x40}) [ 525.761681][ T2709] usb 4-1: device descriptor read/8, error -71 [ 525.773545][T18684] FAULT_INJECTION: forcing a failure. [ 525.773545][T18684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.786740][T18684] CPU: 0 PID: 18684 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 525.795052][T18684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.805105][T18684] Call Trace: 02:15:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b31, &(0x7f00000000c0)={0x40}) [ 525.808401][T18684] dump_stack+0x1e9/0x30e [ 525.812731][T18684] should_fail+0x433/0x5b0 [ 525.817154][T18684] prepare_alloc_pages+0x28c/0x4a0 [ 525.822265][T18684] __alloc_pages_nodemask+0xbc/0x5e0 [ 525.827562][T18684] kmem_getpages+0x49/0x900 [ 525.832098][T18684] cache_grow_begin+0x7b/0x2e0 [ 525.836865][T18684] cache_alloc_refill+0x359/0x3f0 [ 525.841891][T18684] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 525.847611][T18684] ? check_preemption_disabled+0xb0/0x240 [ 525.853324][T18684] ? debug_smp_processor_id+0x5/0x20 [ 525.858607][T18684] kmem_cache_alloc_node_trace+0x1bf/0x2b0 [ 525.864412][T18684] ? __kmalloc_node+0x37/0x60 [ 525.869089][T18684] __kmalloc_node+0x37/0x60 [ 525.873591][T18684] kvmalloc_node+0x81/0x100 [ 525.878098][T18684] open_substream+0x2aa/0x6a0 [ 525.882807][T18684] rawmidi_open_priv+0x99/0x900 [ 525.887659][T18684] ? snd_ctl_get_preferred_subdevice+0x155/0x170 [ 525.893984][T18684] snd_rawmidi_open+0x414/0xa10 [ 525.898873][T18684] ? do_task_dead+0xb0/0xb0 [ 525.903386][T18684] chrdev_open+0x498/0x580 [ 525.907815][T18684] ? cd_forget+0x150/0x150 02:15:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b32, &(0x7f00000000c0)={0x40}) [ 525.912233][T18684] do_dentry_open+0x82e/0x10b0 [ 525.917005][T18684] path_openat+0x2790/0x38b0 [ 525.921624][T18684] do_filp_open+0x191/0x3a0 [ 525.926139][T18684] ? _raw_spin_unlock+0x24/0x40 [ 525.930989][T18684] ? __alloc_fd+0x566/0x600 [ 525.935499][T18684] do_sys_openat2+0x463/0x770 [ 525.940617][T18684] __x64_sys_open+0x1af/0x1e0 [ 525.945302][T18684] do_syscall_64+0xf3/0x1b0 [ 525.949813][T18684] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 525.955702][T18684] RIP: 0033:0x416861 02:15:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b33, &(0x7f00000000c0)={0x40}) [ 525.959589][T18684] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 525.979189][T18684] RSP: 002b:00007f946d7847a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 525.987768][T18684] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416861 [ 525.995746][T18684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f946d784850 [ 526.003712][T18684] RBP: 000000000078bf00 R08: 00007f946d7847b0 R09: 000000000078bf00 02:15:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x7, 0xb7d2, 0x8}) [ 526.011675][T18684] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 526.019640][T18684] R13: 0000000000000c16 R14: 00000000004ce65c R15: 00007f946d7856d4 02:15:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x8, 0xb7d2, 0x8}) 02:15:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) write$smackfs_label(r2, &(0x7f0000000100)={'}vmnet0'}, 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) syncfs(r3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) [ 526.118818][ T27] audit: type=1804 audit(1591064139.912:208): pid=18696 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/236/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 526.135340][ T2709] usb 4-1: device descriptor read/8, error -71 [ 526.651566][ T2709] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 526.741673][ T2709] usb 4-1: Using ep0 maxpacket: 8 [ 526.781694][ T2709] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 526.861928][ T2709] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 526.870568][ T2709] usb 4-1: can't read configurations, error -22 [ 526.877320][ T2709] usb usb4-port1: unable to enumerate USB device 02:15:42 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000307670899511890f1e2000000010902240005007873000904020022ffcde00009048f020000000000090459155b00c041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145acff3c8d4c048323c1e6a1d9843dc5f9cbe8a805d304e7ba63dc451292bcc93797"], 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/bsg\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001400)=0xffffffff, 0x4) 02:15:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b34, &(0x7f00000000c0)={0x40}) 02:15:42 executing program 1 (fault-call:1 fault-nth:13): syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:15:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x9, 0xb7d2, 0x8}) 02:15:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "80361f795a9df14038a53f5efb77a40e80f22133f576b5c51dcb88a5e699c53f95b8726d0f555a3cbc35dc1366080b186510dbb1d2cc2a681d1f6c8b6411e6b99cfa31c3e663ed09074a12ea9b1ec1f3e8ec89944ab7ec1cb422e7454a302ef7d63f64a3bf831bf04958e31d6252e8b78ecf8c4413be7c9c6322ac6ba52abe3bee8b0325799f6023b492736469195c231ce1fc405909f4efd1eb9c70e36512745b4b41270e93b89ea1ce9cbf32a25ed8aa207079e31219655d6b1975edd92e4bb9ae709330cbf55c1d90bf3c48a75cbf76a9e858ad277218e7d4f9e7cc272c69"}, 0xe4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000200)=0x4) 02:15:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b35, &(0x7f00000000c0)={0x40}) 02:15:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xa, 0xb7d2, 0x8}) 02:15:42 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) [ 528.894699][ T27] audit: type=1804 audit(1591064142.692:209): pid=18729 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/237/cgroup.controllers" dev="sda1" ino=16373 res=1 02:15:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x80, {{0xa, 0x4e21, 0x32, @mcast2, 0x7}}}, 0x88) 02:15:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b36, &(0x7f00000000c0)={0x40}) 02:15:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xb, 0xb7d2, 0x8}) [ 529.151834][ T8708] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 529.421567][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 529.541587][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 529.549742][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 529.559212][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 529.569654][ T8708] usb 4-1: config 0 has no interface number 0 [ 529.576415][ T8708] usb 4-1: config 0 has no interface number 1 [ 529.583697][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 529.594782][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 529.607930][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 91, using maximum allowed: 30 [ 529.619132][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 91 [ 529.632340][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 529.639201][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 529.646049][ T8708] usb 4-1: New USB device found, idVendor=5199, idProduct=9018, bcdDevice=e2.f1 [ 529.655151][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.665607][ T8708] usb 4-1: config 0 descriptor?? [ 529.941663][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 529.951137][ T8708] usb 4-1: USB disconnect, device number 107 [ 530.671514][ T8708] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 530.922505][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 531.041594][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 531.049814][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 531.059366][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 531.069327][ T8708] usb 4-1: config 0 has no interface number 0 [ 531.076095][ T8708] usb 4-1: config 0 has no interface number 1 [ 531.083127][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 531.094836][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 531.108692][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 91, using maximum allowed: 30 [ 531.120254][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 91 [ 531.134129][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 531.140889][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 531.149618][ T8708] usb 4-1: New USB device found, idVendor=5199, idProduct=9018, bcdDevice=e2.f1 [ 531.159254][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.170273][ T8708] usb 4-1: config 0 descriptor?? 02:15:45 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00df2f5586145ac"], 0x0) 02:15:45 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) 02:15:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b37, &(0x7f00000000c0)={0x40}) 02:15:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xc, 0xb7d2, 0x8}) 02:15:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000d00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xd, 0xb7d2, 0x8}) [ 531.471620][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 531.503760][ T8708] usb 4-1: USB disconnect, device number 108 02:15:45 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x3, 0x0) 02:15:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3a, &(0x7f00000000c0)={0x40}) 02:15:45 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x35) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045007, 0x0) [ 531.619544][ T27] audit: type=1804 audit(1591064145.412:210): pid=18801 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/238/cgroup.controllers" dev="sda1" ino=16373 res=1 02:15:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xe, 0xb7d2, 0x8}) 02:15:45 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x4, 0x0) [ 531.941656][ T8708] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 532.191545][ T8708] usb 4-1: Using ep0 maxpacket: 8 [ 532.311633][ T8708] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 532.319841][ T8708] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 532.329367][ T8708] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 532.339039][ T8708] usb 4-1: config 0 has no interface number 0 [ 532.345775][ T8708] usb 4-1: config 0 has no interface number 1 [ 532.352802][ T8708] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 532.364009][ T8708] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 532.377033][ T8708] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 532.388567][ T8708] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 532.401837][ T8708] usb 4-1: config 0 interface 143 has no altsetting 0 [ 532.408589][ T8708] usb 4-1: config 0 interface 89 has no altsetting 0 [ 532.415362][ T8708] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 532.424471][ T8708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.441794][ T8708] usb 4-1: config 0 descriptor?? [ 532.721605][ T8708] usb 4-1: string descriptor 0 read error: -71 [ 532.741780][ T8708] usb 4-1: Could not set interface, error -71 [ 532.755248][ T8708] usb 4-1: USB disconnect, device number 109 [ 533.451534][ T17] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 533.711510][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 533.831561][ T17] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 533.839756][ T17] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 533.849632][ T17] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 533.859254][ T17] usb 4-1: config 0 has no interface number 0 [ 533.866015][ T17] usb 4-1: config 0 has no interface number 1 [ 533.873058][ T17] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 533.884463][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 533.898121][ T17] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 533.909771][ T17] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 533.923712][ T17] usb 4-1: config 0 interface 143 has no altsetting 0 [ 533.930455][ T17] usb 4-1: config 0 interface 89 has no altsetting 0 [ 533.938532][ T17] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 533.948342][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.961357][ T17] usb 4-1: config 0 descriptor?? 02:15:48 executing program 3: syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) 02:15:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3b, &(0x7f00000000c0)={0x40}) 02:15:48 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x129000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) 02:15:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x10, 0xb7d2, 0x8}) 02:15:48 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x0) 02:15:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000e00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 534.257452][ T17] usb 4-1: string descriptor 0 read error: -71 [ 534.282929][ T17] usb 4-1: Could not set interface, error -71 02:15:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x11, 0xb7d2, 0x8}) 02:15:48 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x6, 0x0) 02:15:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3c, &(0x7f00000000c0)={0x40}) [ 534.348710][ T17] usb 4-1: USB disconnect, device number 110 02:15:48 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x220841, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000032007a000c0002000100400000d2f0ff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000081) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe0f) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x20, r8, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2404200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7805}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x8c0) [ 534.408671][ T27] audit: type=1804 audit(1591064148.202:211): pid=18885 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/239/cgroup.controllers" dev="sda1" ino=16368 res=1 02:15:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x12, 0xb7d2, 0x8}) 02:15:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3d, &(0x7f00000000c0)={0x40}) [ 534.560923][T18900] device bridge23 entered promiscuous mode [ 534.605232][T18907] bridge23: port 1(bridge_slave_0) entered blocking state [ 534.628032][T18907] bridge23: port 1(bridge_slave_0) entered disabled state [ 534.648703][T18907] device bridge_slave_0 entered promiscuous mode [ 534.657172][T18907] bridge23: port 1(bridge_slave_0) entered blocking state [ 534.664437][T18907] bridge23: port 1(bridge_slave_0) entered forwarding state [ 534.751599][ T17] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 535.061541][ T17] usb 4-1: device descriptor read/64, error 18 [ 535.482520][ T17] usb 4-1: device descriptor read/64, error 18 [ 535.761575][ T17] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 536.031588][ T17] usb 4-1: device descriptor read/64, error 18 [ 536.431590][ T17] usb 4-1: device descriptor read/64, error 18 [ 536.551629][ T17] usb usb4-port1: attempt power cycle 02:15:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x25, 0xb7d2, 0x8}) 02:15:51 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x7, 0x0) 02:15:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b40, &(0x7f00000000c0)={0x40}) 02:15:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000ec0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x7957f000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa394ade7dfe439c6479605528726a068c"], 0x34}}, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x824c2, 0x0) splice(r4, &(0x7f0000000080)=0x50ce, r7, &(0x7f0000000100)=0x1, 0x190a, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045007, 0x0) [ 537.261494][ T17] usb 4-1: new low-speed USB device number 113 using dummy_hcd 02:15:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x5c, 0xb7d2, 0x8}) [ 537.346470][T18925] device bridge24 entered promiscuous mode 02:15:51 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x8, 0x0) 02:15:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b41, &(0x7f00000000c0)={0x40}) 02:15:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r5, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r6, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, r6, r7) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd71) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac", @ANYRESHEX=r1, @ANYRES16, @ANYBLOB="c403a07ff1131ca9cd798d4464da431f94b499cb0dd132b7a2fe89e0762403cc5eca8fb92d6cae149efa0784cdc44b2237d47f6e645bb6937a126b3ea2d3ff206523c0156d64e420a8cf51ec4206ae8f07485d1c4abc6fea392846e306893bce0250f93394b0523a4e20d9b9b2ec1016dfb5653cdf5f7b2f812aa44f9a40d0e7c1"], 0x0) [ 537.399875][ T27] audit: type=1804 audit(1591064151.192:212): pid=18929 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/240/cgroup.controllers" dev="sda1" ino=15788 res=1 02:15:51 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x9, 0x0) 02:15:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x300, 0xb7d2, 0x8}) 02:15:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b44, &(0x7f00000000c0)={0x40}) 02:15:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x500, 0xb7d2, 0x8}) 02:15:51 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0xa, 0x0) 02:15:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x125900, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 537.751498][ T17] usb 4-1: device not accepting address 113, error -71 02:15:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000f00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x600, 0xb7d2, 0x8}) 02:15:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b45, &(0x7f00000000c0)={0x40}) 02:15:51 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0xb, 0x0) 02:15:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04050000288ab0ead588520add22a29f9ce933e3d625ec", 0x21) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, 0x0) [ 537.882418][T18948] device bridge_slave_0 left promiscuous mode [ 537.899401][T18948] bridge19: port 1(bridge_slave_0) entered disabled state [ 538.022332][ T27] audit: type=1804 audit(1591064151.822:213): pid=18976 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/241/cgroup.controllers" dev="sda1" ino=15794 res=1 [ 538.141618][ T17] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 538.242074][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 538.371545][ T17] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 538.380000][ T17] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 538.389282][ T17] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 538.398966][ T17] usb 4-1: config 0 has no interface number 0 [ 538.405853][ T17] usb 4-1: config 0 has no interface number 1 [ 538.412788][ T17] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 538.424207][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 538.438134][ T17] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 538.449956][ T17] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 538.463853][ T17] usb 4-1: config 0 interface 143 has no altsetting 0 [ 538.470595][ T17] usb 4-1: config 0 interface 89 has no altsetting 0 [ 538.478568][ T17] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 538.488380][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.499637][ T17] usb 4-1: config 0 descriptor?? [ 538.791518][ T17] usb 4-1: string descriptor 0 read error: -71 [ 538.821653][ T17] usb 4-1: Could not set interface, error -71 [ 538.830802][ T17] usb 4-1: USB disconnect, device number 114 02:15:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f00000000c0)={0x40}) 02:15:53 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0xc, 0x0) 02:15:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x700, 0xb7d2, 0x8}) 02:15:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 02:15:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000fe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:15:53 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000003c0)=[{0x0, 0xffff}, {}], 0x2) semctl$GETPID(r0, 0x0, 0xb, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f00000011c0)=""/4096) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x2, 0x0) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000080)=""/203) 02:15:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 02:15:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b47, &(0x7f00000000c0)={0x40}) 02:15:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x900, 0xb7d2, 0x8}) 02:15:53 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0xd, 0x0) [ 539.395601][ T27] audit: type=1804 audit(1591064153.192:214): pid=19013 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/242/cgroup.controllers" dev="sda1" ino=15954 res=1 02:15:53 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0xe, 0x0) 02:15:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xa00, 0xb7d2, 0x8}) 02:15:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b48, &(0x7f00000000c0)={0x40}) 02:15:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xb00, 0xb7d2, 0x8}) 02:15:53 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x10, 0x0) 02:15:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f00000000c0)={0x40}) [ 539.731627][ T2479] usb 4-1: new high-speed USB device number 115 using dummy_hcd 02:15:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100001100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 539.981265][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 539.990911][ T27] audit: type=1804 audit(1591064153.782:215): pid=19053 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/243/cgroup.controllers" dev="sda1" ino=15810 res=1 [ 540.115967][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 540.124977][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 540.135750][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 540.146309][ T2479] usb 4-1: config 0 has no interface number 0 [ 540.159082][ T2479] usb 4-1: config 0 has no interface number 1 [ 540.166940][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 540.185835][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 540.214468][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 540.230567][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 540.244417][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 540.251787][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 540.258585][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 540.268929][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.283479][ T2479] usb 4-1: config 0 descriptor?? [ 541.407817][ T0] NOHZ: local_softirq_pending 08 02:15:56 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) 02:15:56 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x11, 0x0) 02:15:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xc00, 0xb7d2, 0x8}) 02:15:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f00000000c0)={0x40}) 02:15:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:15:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100001102) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 542.461589][ T2479] usb 4-1: string descriptor 0 read error: -71 02:15:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xd00, 0xb7d2, 0x8}) 02:15:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4c, &(0x7f00000000c0)={0x40}) [ 542.501934][ T2479] usb 4-1: Could not set interface, error -71 [ 542.528042][ T2479] usb 4-1: USB disconnect, device number 115 02:15:56 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x12, 0x0) [ 542.602625][ T27] audit: type=1804 audit(1591064156.402:216): pid=19080 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/244/cgroup.controllers" dev="sda1" ino=16113 res=1 02:15:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0xe00, 0xb7d2, 0x8}) 02:15:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4d, &(0x7f00000000c0)={0x40}) 02:15:56 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x21, 0x0) [ 543.001577][ T2479] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 543.241597][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 543.362562][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 543.370792][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 543.380340][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 543.390082][ T2479] usb 4-1: config 0 has no interface number 0 [ 543.397029][ T2479] usb 4-1: config 0 has no interface number 1 [ 543.404380][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 543.416089][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 543.429807][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 543.442543][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 543.456478][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 543.463970][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 543.470642][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 543.480821][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.491149][ T2479] usb 4-1: config 0 descriptor?? [ 543.771531][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 543.791984][ T2479] usb 4-1: Could not set interface, error -71 [ 543.801182][ T2479] usb 4-1: USB disconnect, device number 116 [ 544.511478][ T2479] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 544.751481][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 544.871715][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 544.879993][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 544.889434][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 544.899063][ T2479] usb 4-1: config 0 has no interface number 0 [ 544.906034][ T2479] usb 4-1: config 0 has no interface number 1 [ 544.912878][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 544.924646][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 544.938337][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 544.950382][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 544.964327][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 544.971076][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 544.978975][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 544.988653][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.007863][ T2479] usb 4-1: config 0 descriptor?? 02:15:59 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000307670899111890f1e2000000010902240005007873000904020022ffcde00009048f02000000000009045915806ac041af902dadc3a792bd62697b8ce4ab0ba82ef00dfaf5586145ac"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) 02:15:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x1100, 0xb7d2, 0x8}) 02:15:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)) 02:15:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4e, &(0x7f00000000c0)={0x40}) 02:15:59 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x25, 0x0) 02:15:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100001200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 545.291476][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 545.312516][ T2479] usb 4-1: Could not set interface, error -71 02:15:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x1200, 0xb7d2, 0x8}) [ 545.351744][ T2479] usb 4-1: USB disconnect, device number 117 02:15:59 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x5c, 0x0) 02:15:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f00000000c0)={0x40}) 02:15:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x1f) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) ioctl$FIONCLEX(r1, 0x5450) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000480)={0x0, 'wg0\x00', {0x3}, 0x400}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}, 0x1, 0xfffffff1}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff8001}]}, 0x4c}}, 0x400) read(0xffffffffffffffff, &(0x7f00000000c0)=""/56, 0x38) [ 545.448641][ T27] audit: type=1804 audit(1591064159.242:217): pid=19158 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir875291760/syzkaller.dEqCal/245/cgroup.controllers" dev="sda1" ino=16289 res=1 02:15:59 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x300, 0x0) 02:15:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x2500, 0xb7d2, 0x8}) [ 545.782300][ T2479] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 546.021936][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 546.142148][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 546.155022][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 546.170975][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 546.180340][ T2479] usb 4-1: config 0 has no interface number 0 [ 546.186945][ T2479] usb 4-1: config 0 has no interface number 1 [ 546.193625][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 546.211528][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 546.224581][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 546.235740][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 546.249043][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 546.255885][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 546.262657][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 546.271765][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.280634][ T2479] usb 4-1: config 0 descriptor?? [ 546.561586][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 546.581529][ T2479] usb 4-1: Could not set interface, error -71 [ 546.594947][ T2479] usb 4-1: USB disconnect, device number 118 [ 547.331459][ T2479] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 547.581477][ T2479] usb 4-1: Using ep0 maxpacket: 8 [ 547.721651][ T2479] usb 4-1: config 0 has an invalid interface number: 143 but max is 4 [ 547.730002][ T2479] usb 4-1: config 0 has an invalid interface number: 89 but max is 4 [ 547.738191][ T2479] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 5 [ 547.747250][ T2479] usb 4-1: config 0 has no interface number 0 [ 547.753390][ T2479] usb 4-1: config 0 has no interface number 1 [ 547.759491][ T2479] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 34, using maximum allowed: 30 [ 547.770242][ T2479] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 547.783294][ T2479] usb 4-1: too many endpoints for config 0 interface 89 altsetting 21: 128, using maximum allowed: 30 [ 547.794334][ T2479] usb 4-1: config 0 interface 89 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 547.808259][ T2479] usb 4-1: config 0 interface 143 has no altsetting 0 [ 547.815087][ T2479] usb 4-1: config 0 interface 89 has no altsetting 0 [ 547.821864][ T2479] usb 4-1: New USB device found, idVendor=1199, idProduct=9018, bcdDevice=e2.f1 [ 547.830865][ T2479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.844443][ T2479] usb 4-1: config 0 descriptor?? 02:16:01 executing program 3: ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) io_setup(0xa, &(0x7f0000000080)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}]) 02:16:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b60, &(0x7f00000000c0)={0x40}) 02:16:01 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$sndmidi(0x0, 0x500, 0x0) 02:16:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x40, 0x5c00, 0xb7d2, 0x8}) 02:16:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x1f) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) ioctl$FIONCLEX(r1, 0x5450) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000480)={0x0, 'wg0\x00', {0x3}, 0x400}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}, 0x1, 0xfffffff1}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff8001}]}, 0x4c}}, 0x400) read(0xffffffffffffffff, &(0x7f00000000c0)=""/56, 0x38) 02:16:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b1585000004000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100001202) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 548.121647][ T2479] usb 4-1: string descriptor 0 read error: -71 [ 548.151251][ T2479] usb 4-1: Could not set interface, error -71 [ 548.158360][T19240] ================================================================== [ 548.158501][T19240] BUG: KASAN: slab-out-of-bounds in fbcon_get_font+0x1de/0x910 [ 548.158513][T19240] Read of size 8 at addr ffff888089953710 by task syz-executor.0/19240 [ 548.158516][T19240] [ 548.158530][T19240] CPU: 0 PID: 19240 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 548.158536][T19240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.158542][T19240] Call Trace: [ 548.158557][T19240] dump_stack+0x1e9/0x30e [ 548.158578][T19240] print_address_description+0x74/0x5c0 [ 548.158590][T19240] ? vprintk_emit+0x342/0x3c0 [ 548.158606][T19240] ? printk+0x62/0x83 [ 548.158619][T19240] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 548.158637][T19240] __kasan_report+0x103/0x1a0 [ 548.158652][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.158666][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.158679][T19240] kasan_report+0x4d/0x80 [ 548.158695][T19240] ? check_memory_region+0x2b5/0x2f0 [ 548.158705][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.158718][T19240] ? memcpy+0x25/0x60 [ 548.158731][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.158753][T19240] ? con_font_op+0x664/0x1630 [ 548.158764][T19240] ? __kasan_slab_free+0x125/0x190 [ 548.158778][T19240] ? tomoyo_path_number_perm+0x525/0x690 [ 548.158789][T19240] ? security_file_ioctl+0x55/0xb0 [ 548.158801][T19240] ? __se_sys_ioctl+0x48/0x160 [ 548.158813][T19240] ? do_syscall_64+0xf3/0x1b0 [ 548.158823][T19240] ? cap_capable+0x23f/0x280 [ 548.158884][T19240] ? safesetid_security_capable+0x81/0xf0 [ 548.158911][T19240] ? vt_ioctl+0x179d/0x3eb0 [ 548.158948][T19240] ? rcu_lock_release+0x5/0x20 [ 548.158969][T19240] ? tomoyo_path_number_perm+0x58f/0x690 [ 548.158999][T19240] ? tty_jobctrl_ioctl+0x1e8/0xc20 [ 548.159016][T19240] ? tty_ioctl+0xee4/0x15c0 [ 548.159044][T19240] ? tty_do_resize+0x180/0x180 [ 548.159054][T19240] ? __se_sys_ioctl+0xf9/0x160 [ 548.159069][T19240] ? do_syscall_64+0xf3/0x1b0 [ 548.159085][T19240] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 548.159105][T19240] [ 548.159112][T19240] Allocated by task 16568: [ 548.159124][T19240] __kasan_kmalloc+0x114/0x160 [ 548.159134][T19240] __kmalloc+0x24b/0x330 [ 548.159145][T19240] fbcon_set_font+0x2c4/0x970 [ 548.159154][T19240] con_font_op+0xebc/0x1630 [ 548.159163][T19240] vt_ioctl+0x179d/0x3eb0 [ 548.159171][T19240] tty_ioctl+0xee4/0x15c0 [ 548.159180][T19240] __se_sys_ioctl+0xf9/0x160 [ 548.159189][T19240] do_syscall_64+0xf3/0x1b0 [ 548.159198][T19240] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 548.159202][T19240] [ 548.159208][T19240] Freed by task 0: [ 548.159212][T19240] (stack is not available) [ 548.159215][T19240] [ 548.159225][T19240] The buggy address belongs to the object at ffff888089953000 [ 548.159225][T19240] which belongs to the cache kmalloc-2k of size 2048 [ 548.159235][T19240] The buggy address is located 1808 bytes inside of [ 548.159235][T19240] 2048-byte region [ffff888089953000, ffff888089953800) [ 548.159241][T19240] The buggy address belongs to the page: [ 548.159253][T19240] page:ffffea00022654c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 548.159261][T19240] flags: 0xfffe0000000200(slab) [ 548.159276][T19240] raw: 00fffe0000000200 ffffea000260b7c8 ffffea0002a43dc8 ffff8880aa400e00 [ 548.159287][T19240] raw: 0000000000000000 ffff888089953000 0000000100000001 0000000000000000 [ 548.159292][T19240] page dumped because: kasan: bad access detected [ 548.159296][T19240] [ 548.159300][T19240] Memory state around the buggy address: [ 548.159308][T19240] ffff888089953600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.159315][T19240] ffff888089953680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.159323][T19240] >ffff888089953700: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 548.159327][T19240] ^ [ 548.159335][T19240] ffff888089953780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 548.159343][T19240] ffff888089953800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 548.159348][T19240] ================================================================== [ 548.159352][T19240] Disabling lock debugging due to kernel taint [ 548.174952][T19240] Kernel panic - not syncing: panic_on_warn set ... [ 548.174968][T19240] CPU: 0 PID: 19240 Comm: syz-executor.0 Tainted: G B 5.7.0-syzkaller #0 [ 548.174974][T19240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.174978][T19240] Call Trace: [ 548.174992][T19240] dump_stack+0x1e9/0x30e [ 548.175051][T19240] panic+0x264/0x7a0 [ 548.175065][T19240] ? trace_hardirqs_on+0x30/0x70 [ 548.175078][T19240] __kasan_report+0x191/0x1a0 [ 548.175091][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.175101][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.175112][T19240] kasan_report+0x4d/0x80 [ 548.175123][T19240] ? check_memory_region+0x2b5/0x2f0 [ 548.175132][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.175143][T19240] ? memcpy+0x25/0x60 [ 548.175153][T19240] ? fbcon_get_font+0x1de/0x910 [ 548.175165][T19240] ? con_font_op+0x664/0x1630 [ 548.175175][T19240] ? __kasan_slab_free+0x125/0x190 [ 548.175187][T19240] ? tomoyo_path_number_perm+0x525/0x690 [ 548.175197][T19240] ? security_file_ioctl+0x55/0xb0 [ 548.175207][T19240] ? __se_sys_ioctl+0x48/0x160 [ 548.175218][T19240] ? do_syscall_64+0xf3/0x1b0 [ 548.175226][T19240] ? cap_capable+0x23f/0x280 [ 548.175243][T19240] ? safesetid_security_capable+0x81/0xf0 [ 548.175259][T19240] ? vt_ioctl+0x179d/0x3eb0 [ 548.175283][T19240] ? rcu_lock_release+0x5/0x20 [ 548.175297][T19240] ? tomoyo_path_number_perm+0x58f/0x690 [ 548.175319][T19240] ? tty_jobctrl_ioctl+0x1e8/0xc20 [ 548.175332][T19240] ? tty_ioctl+0xee4/0x15c0 [ 548.175350][T19240] ? tty_do_resize+0x180/0x180 [ 548.175361][T19240] ? __se_sys_ioctl+0xf9/0x160 [ 548.175374][T19240] ? do_syscall_64+0xf3/0x1b0 [ 548.175387][T19240] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 548.176475][T19240] Kernel Offset: disabled [ 548.737228][T19240] Rebooting in 86400 seconds..