0x0, 0x1, [{0x0, 0x0}]}) 11:54:12 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 11:54:12 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:12 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0xa64c3) 11:54:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffd, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x157b01) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x6, 0x6]) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/112) 11:54:12 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x20800) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/15) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x1000, 0xf]) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/78) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000240)={0x56, 0x80, 0x4, {0x7, 0xff}, {0x3, 0xfff9}, @const={0x4, {0x8, 0x3, 0x40, 0xffec}}}) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/90) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/14) [ 2827.307716][T22565] usb 4-1: USB disconnect, device number 108 11:54:12 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0xa64c3) [ 2827.364565][ T33] audit: type=1800 audit(1625918052.119:1554): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15027 res=0 errno=0 11:54:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1f, 0x141200) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) write$char_usb(r3, &(0x7f0000000340)="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"/383, 0xffffffffffffff18) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0xb5fc) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/231) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000080)=""/90) 11:54:12 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:12 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) 11:54:12 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00000000000000, 0xa64c3) 11:54:12 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x20200) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000280)=""/260) [ 2827.643523][T28469] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 2827.833518][T22565] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 2828.073647][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2828.133653][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2828.193608][T22565] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2828.244190][T28469] usb 3-1: config 1 has an invalid descriptor of length 13, skipping remainder of the config [ 2828.254621][T28469] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2828.267555][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2828.363547][T22565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2828.372689][T22565] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2828.380898][T22565] usb 4-1: Product: syz [ 2828.385117][T22565] usb 4-1: Manufacturer: syz [ 2828.389722][T22565] usb 4-1: SerialNumber: syz [ 2828.434378][T22565] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2828.583476][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2828.589870][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2828.598934][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2828.644184][T22565] usb 4-1: USB disconnect, device number 109 [ 2828.646654][T28469] usb 3-1: bad CDC descriptors 11:54:13 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x0, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:13 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0xa64c3) 11:54:13 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9f26, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:13 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1ffffffffd, 0x2d6103) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x64, 0x7]) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) write$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000001c0)={0xb37, "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"}) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/154) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2000) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x14, 0xed, &(0x7f0000000140)="d6b9f9ea4a50ca50c45b05297396fe523e6fa721a3cb93b0ac92c6768a1bbec350a235bca79c8af70e1ece4c5d0fbcfc3b26a6c1d6a0cab0e21720d9e88f9058de60f6897cc080d0a67c72dd4b790262296433d66239630c57ea3599fa6e1c0efa67af427b1080bad1c9dbe4388bd17d57adc2d379d2ed1bba54cc0546e25761d9eedee9d3d49c6d14798b831876e13a29a0cea4d5509f49b2ff53b8a2d37281ee90fa7b4096e3ca8d7740021b3aadb459b3298afb366df8b0cf9f21f185c60dcc16f365311cbafb47fbaf4cdbcc15ec7636098629bc8239d3baa1aa68d1f336eb6671ad47f26d285b27c8722d"}) 11:54:13 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) [ 2828.854511][T28469] usb 3-1: USB disconnect, device number 86 11:54:13 executing program 5: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000140)={0xeac, "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"}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) 11:54:13 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0xa64c3) 11:54:13 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:13 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x7f, 0x7]) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x3, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:13 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:13 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0xff4d, &(0x7f0000002600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcf6}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000024c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r1, 0x7, 0x9b, &(0x7f0000002540)="1f9d154c461c6838c4e6b21cd76caae03e6504c7f840fd307eb6a1109e5a7ae934873d40fb260d9ed577edb6404d6f0f2908326bf546758af79a0803344fdbc6a234848ade335e6bb3e78090a2973fa9b83ae76e270c57406132a44726d9ea3edd5b531b0ff180702fde25c82e3561a3b9226d87243207b1ec82bdc581b0ea975bb6a30d8c9e695d7cc9c694bc9e707c377a70481e5d4657c24faa") syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000002480)=@ready={0x0, 0x0, 0x8, "f87e5535", {0x1, 0x8001, 0x4, 0x3f, 0x4}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x231c, &(0x7f0000002680)={[{0x1000, 0x4e00, "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"}, {0x23, 0x4e00, "a402da2721d993a77fc31fa13ea8c44e2aac68ed5b484c7eb56ea8eef159854970ec46"}, {0x1000, 0x4e00, "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"}, {0x98, 0x4e00, "5cf7ec82510a1d0fcfb9b15dd0230f5ce4fc5a26f52703b201dd26f448d37521352dac98366f87451f2c9dbdd563f31656282da144e7eee1d7a298f98853af7eb00544245b27f256368fdbdf12fe148a3f9e40f956bb761843ba0f3fa1e5af8d72a38665411d7212753a9612ba7a69839a99cd7f55a2a5e30aa8b2f9748b530c71fdc1ba547adc9235203170b9280990efb962268b1a758c"}, {0xa8, 0x4e00, "c61b1a6a6cb58de2c6c9b74a543e33495fb0e1da84388d08368506fbc41d2b116b9e98b840875bbde857fee5615479ea3e391e8762b6e1bceb75e0803f7c93f040f3bbc7edaf0cd928a91446093d9025958352e15d94315e0d648d202b27e0294b1c3ae09d88b6815be450c12cebae3ad5f75e15a2bf77b6636a48e53f64fa17425fcb3688d73fe76ac8dc25aeae81cbbb8cfa3dd114ce7ece0c0ec362151caf3d59ca7f638d82b8"}, {0xc6, 0x4e00, "11878672e4e21fe899a1f4fa4357ba2c5bef5eb9c20d6ab032fb61526d0cb7a268bbd1d477674467b6267014aa5767b547d3f30be2cbd1f07f7d7ccf5adb76796b2ff8f44613b9dd6f166baf8d16cbc0f004b85ad10e7783eb805e8070b68d84f3af4e387b878670d4b1e60229937c4921ba97f0fea228746ebd64613649cb5cad09323cbe181e53174b7ba775d0b7c54263c46973e0e709390afabd9ae07f8a9529c2fc42dd5e40ba3f07b3d2a6b3afcef74deb703bcc557757bdb1c5491adba98f05ea6037"}, {0xd3, 0x4e00, "075903b54fc56e716b2374e7267c0ec235ad47ff0d20b7b4f7cd312affa65f4f66f5b0bf6a5d51bdbdbbafd79afa63bfb309281cdbd0fa1c14d346e452b93d0c15b897eeb445b8703f09983ab5003cf36174d8256237ec9f4b79384629541b4a07cb57583ff05ec1c0788a8b85d5386776120a6c6fd14d8fb8fad4d032d613a565a0b2a97bf311e500b14e259204e81cd1866c93dc2e5ab3aed2dc5bf2cb97cb33693163c59511b5764ae5de135b9984855ef1854222e938c03afe51003e440d23fc2f07e89c8ae8cfc07e6dd2d0d398bd9be6"}]}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x280040) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x503, 0x2]) [ 2829.193523][T22565] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 2829.343403][T28469] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 2829.413385][T23877] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2829.573478][T22565] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2829.753614][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2829.764330][T22565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2829.773427][T22565] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2829.781512][T22565] usb 4-1: Product: syz [ 2829.785719][T22565] usb 4-1: Manufacturer: syz [ 2829.790313][T22565] usb 4-1: SerialNumber: syz [ 2829.793530][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2829.823380][T23877] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2829.831428][T23877] usb 6-1: can't read configurations, error -22 [ 2829.844288][T22565] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2829.873495][T28469] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 2829.881596][T28469] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 2829.890656][T28469] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2829.900537][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2829.993346][T23877] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2830.056487][ T6155] usb 4-1: USB disconnect, device number 110 [ 2830.173986][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2830.180283][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2830.189450][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.244095][T28469] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:15 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x2, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:15 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0xa64c3) 11:54:15 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/126) 11:54:15 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:15 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) [ 2830.423324][T23877] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2830.431234][T23877] usb 6-1: can't read configurations, error -22 [ 2830.438680][T23877] usb usb6-port1: attempt power cycle [ 2830.455353][T28469] usb 3-1: USB disconnect, device number 87 11:54:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x6, 0x7fffffff, 0x7, 0x1, 0x4ab, 0x9}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:15 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0xa64c3) 11:54:15 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x590d3e8cef3f5af1) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:15 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xa64c3) 11:54:15 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2830.803382][ T6155] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2830.903269][T23877] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2830.973253][T28469] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2831.183312][ T6155] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2831.196700][T23877] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2831.204687][T23877] usb 6-1: can't read configurations, error -22 [ 2831.353320][T23877] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2831.364050][ T6155] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2831.373074][ T6155] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2831.381299][ T6155] usb 4-1: Product: syz [ 2831.385531][ T6155] usb 4-1: Manufacturer: syz [ 2831.390199][ T6155] usb 4-1: SerialNumber: syz [ 2831.433435][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2831.441834][ T6155] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2831.473341][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2831.553317][T28469] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2831.562274][T28469] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2831.572012][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2831.623247][T23877] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2831.631161][T23877] usb 6-1: can't read configurations, error -22 [ 2831.639101][T23877] usb usb6-port1: unable to enumerate USB device [ 2831.652374][T22565] usb 4-1: USB disconnect, device number 111 [ 2831.813214][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2831.819465][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2831.828584][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2831.874052][T28469] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:16 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffffffff00, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x19000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/114) 11:54:16 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x40140) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/156) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000001c0)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0xfffffffd, 0x3ff, 0xff, 0x7fffffff, 0x80000000, 0xbc81}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:16 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:16 executing program 4: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xff, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000040)=ANY=[@ANYBLOB="610000009aaedf7eba0a0a1935ce08ee6d07ddb8a533090eb4aff6facfd70eaebe546a699b3d7127ffe47c113059d4cd401cc8f79356e424f73ef11bbac9482f0fb0155d986182454e7b88a1f93948ca2b8286e1d2ab1522040a020a667500000000000000"]) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x100000000, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000100)={0x3, 0x1, 0x6}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x4, 0x82e41) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000180)={0x1000, "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"}) 11:54:16 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/126) 11:54:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x3, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2832.085579][T28469] usb 3-1: USB disconnect, device number 88 11:54:17 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x0, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2832.191362][ T33] kauditd_printk_skb: 20 callbacks suppressed [ 2832.191377][ T33] audit: type=1800 audit(1625918056.949:1575): pid=13492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14712 res=0 errno=0 11:54:17 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x10003, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/92) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x3, 0x8]) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x11, 0xff, &(0x7f00000001c0)="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"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:17 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:17 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x53, 0x7, 0x400, {0x1, 0x7}, {0x20, 0x2}, @const={0x40, {0xbe7, 0x2, 0x20, 0x3}}}) [ 2832.285302][ T33] audit: type=1800 audit(1625918056.949:1576): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14714 res=0 errno=0 11:54:17 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x1) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/206) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="d96a6b50ed0dde82c2b2099f3f032127a8d4e83467583cd0a38d75959b6b90e01c8dfe697c78434441680c4ad37c1ae632c34744440062927f9083c67d2caca28346e2010b0e4ae01c1e9668b4e69b79dc73c071393ae0df03b76be200fb3a", 0x5f) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:17 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:17 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x65, {0x65, 0x22, "b52da5470925661a082be594b0647f898f4b214b858dac3bd004e9e70e9c5c9273aaea3717b19ccb99f4f8b7ec65454acca6befd3b977175d8e7d186dd25b867c38f09ba3c329992ebdaccf754e29d3ec6913a526fd7b5d4682b1d859073c38cae10d5"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500deff050f050000"], &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x72, 0x1, "04d3440a", "24295efd"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x3f, 0x1, 0x8, 0x0, 0x5}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x20, 0x5, 0xd4, "bcef58510d7a7b8000e73eca74b0bc83db5d851f7b725c055968661c05743a4fecb73e11bab15826fe556e565925240e72e5ebe96fdcc04a596444aabe0cbeffbbacdd0fe6e6a8ed31e38b38307c3db426ac9d7ac2652ca4581374eec4fe2f44b85ea4cc389d05e3fb302fb37df5a36b73c42bcb6c790a7143a663525e47b22f2d6d361e588b2fb698fe2134bb73e29bb6394d1f5c9519f4b10cd42b0519e311aa6f6a7dba2a8046cc073d839790690294a62984f80143a7c506e9bc66c624b799a0b336286106c7afa8a5260d46e5253a80ffe8"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x120, 0x2, [0xf87f]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000480)={0x40, 0xb, 0x2, "0288"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "9458"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) [ 2832.398381][ T33] audit: type=1800 audit(1625918056.989:1577): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14713 res=0 errno=0 11:54:17 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000080)={0x3, 0x2, 0x4ee5ba16}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x48802) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x1, 0x5]) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2832.464440][ T33] audit: type=1800 audit(1625918057.029:1578): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14704 res=0 errno=0 11:54:17 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x0, 0x4, 0x1, 0x200, 0x0, 0x3}) 11:54:17 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2832.508630][ T33] audit: type=1800 audit(1625918057.119:1579): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14696 res=0 errno=0 [ 2832.563836][T28469] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 2832.576231][ T33] audit: type=1800 audit(1625918057.129:1580): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14711 res=0 errno=0 [ 2832.598804][ T33] audit: type=1800 audit(1625918057.149:1581): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14713 res=0 errno=0 [ 2832.620863][T23877] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 2832.630487][ T33] audit: type=1800 audit(1625918057.259:1582): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14696 res=0 errno=0 [ 2832.652892][ T33] audit: type=1800 audit(1625918057.259:1583): pid=13521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14712 res=0 errno=0 [ 2832.674920][ T33] audit: type=1800 audit(1625918057.269:1584): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14715 res=0 errno=0 [ 2832.983126][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2833.023363][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2833.034140][T23877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2833.073353][T23877] usb 4-1: not running at top speed; connect to a high speed hub [ 2833.103149][T28469] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2833.112127][T28469] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2833.122036][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2833.163172][T23877] usb 4-1: config 1 has an invalid interface number: 0 but max is -1 [ 2833.171271][T23877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 2833.181321][T23877] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2833.191020][T23877] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2833.383131][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2833.389421][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2833.398480][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2833.463128][T23877] usb 4-1: string descriptor 0 read error: -22 [ 2833.470499][T28469] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2833.479234][T23877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2833.488367][T23877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2833.554151][T23877] cdc_ether: probe of 4-1:1.0 failed with error -22 11:54:18 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x4, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2833.674733][T22565] usb 3-1: USB disconnect, device number 89 11:54:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000191c0)=""/102400) 11:54:18 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/217) 11:54:18 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:18 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x3, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:18 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x2000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000140)=""/4096) [ 2833.771847][ T2628] usb 4-1: USB disconnect, device number 112 11:54:18 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x880) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x400000) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) 11:54:18 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x14, 0xf3, &(0x7f0000000000)="0a0aeb8a577ae38db6193b978b1ed322cbc2228f5b9c293b080af4f18c113edcdaf634d5429c06286e1565ad431106057f90e0af5c22448e3062d85898f6c06c7f3669f9b1d80d305b839c14dcbcfad87de2f5c7cedbf41601e54e9a8ac7ce7dd49126cf760a393a6f417e58285a4604a2559de2c7f8b2d5abf6ce92fbe5af8b5f52c8e91c77faa7dd23ce0fc59f5f9e9bf97af444b250cf6e816c8398735cfddc89803f9dfa937839fcd87f85f755b177660d4eff71d4e16c8c7b2775684e9961a486aab8568612137105ea3407bff14563b5840a7a1aa617e0e0e882ead5f4c730aa7a8a93a26912a47d2c93c7bebcb8faf1"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/9) 11:54:18 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x60841) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x5, 0x38, &(0x7f0000000040)="9efc337ad298a4f1bf067e22652915b0b3f86ef37a2f6dcfc3cd29d0bb6616ccdf8219e1fb0f2ec663ff2ba3bf88479dc437532959ecf400"}) 11:54:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x9) [ 2834.162967][T22565] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 2834.262976][ T2628] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 2834.583165][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2834.623159][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2834.663020][ T2628] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2834.703170][T22565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 2834.712032][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2834.721726][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2834.728413][ T2628] usb 4-1: not running at top speed; connect to a high speed hub [ 2834.812969][ T2628] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2834.821830][ T2628] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2834.831509][ T2628] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2835.002979][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2835.009203][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2835.018264][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.084050][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2835.132962][ T2628] usb 4-1: string descriptor 0 read error: -22 [ 2835.139337][ T2628] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2835.148535][ T2628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.203684][ T2628] cdc_ether: probe of 4-1:1.0 failed with error -22 11:54:20 executing program 0: syz_usb_connect$uac1(0x4, 0x10e, &(0x7f00000001c0)={{0x12, 0x1, 0xdcbc428b1ea5d561, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x7, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x1}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0xab, 0x1, "1c5be7"}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x3, 0x5, [0x5, 0x1, 0x9, 0x4, 0x3], 0xf7}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x4, 0x1, 0x20}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x5, 0x7, 0x0, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x6, 0xc1, "962c2a2b10"}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x5, "87d8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x3}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0xda, 0x5, "f64d", "37d9e4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7f, 0x7f, "88bab2c61a481b56"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xff, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x3f, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x48, 0x1, 0x0, 0x2, "46a8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4b, 0x9, 0x2, {0x7, 0x25, 0x1, 0x80, 0x4, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0xc9, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xff, 0x4, 0x2, "535641f823"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x5, 0x3f, "d3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1f, 0x4, {0x7, 0x25, 0x1, 0x1, 0x11, 0x8}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x20, 0x7, 0x7f, 0xff, 0x7f}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB="8c23b0d75694b1325764e1137ead09ef1f644ec0bef6e530a96b234e4f4ffe8bcc8145f4a235425337498e3725bc3567f458e72d8a36c002ed4a6bfa1f983ad8121d7b2b7676a0987f3c9e04e1fd47fc0091008687ea480789581b72da3495040000000000000019e8c41074d78960a66d2f8459216cd614238b243fc8abba2faa8e16deca9c04271dd8a9e9"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x6070}}, {0x9b, &(0x7f00000003c0)=@string={0x9b, 0x3, "e429715724a970aff4c1fbd6307f6f0f771c10b0bbea32e28380c6b8335fc35b9fadadd841cfacfe8c1b0ea786188431c1b705af5f1360dd40384b5ad0816ee8d2d2593816b503264af13219ad72cf1485ac30e26464a6c0779bd22d84f6c985cc42affcf4850f7dd597108a02d005c8cfe3ce18d971d4a21b7ad62fb544eb0704a2fc32d56a1db5416492ca66b0634d2f26eb783654bd85d6"}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/26) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/109) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:20 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x5, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:20 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:20 executing program 4: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001000)=""/186) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2835.296498][T23877] usb 3-1: USB disconnect, device number 90 11:54:20 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x0, 0x4, 0x1, 0x200, 0x0, 0x3}) 11:54:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x1, 0x4, {0x8, 0x1}, {0xffff}, @period={0x5d, 0x9, 0x3, 0x2, 0x1, {0x0, 0x5, 0x4, 0xcf}, 0x3, &(0x7f0000000000)=[0x3, 0x6, 0x4]}}) 11:54:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7ff, 0x109803) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:20 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2835.439357][ T2628] usb 4-1: USB disconnect, device number 113 11:54:20 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x75, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x17, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "99884e863590"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfc2, 0x6, 0x81}, [@obex={0x5, 0x24, 0x15, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x9, 0xc}, @dmm={0x7, 0x24, 0x14, 0x0, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x48, 0x1f, 0x81, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3f, 0x5a, 0xff}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x2, 0x1, 0x59, 0x20, 0x1}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0xe, 0x200}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x24a7}}]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4d, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xd91}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x45, 0x8, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x0, 0x73}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x0, 0x7f, 0x5, 0xff, 0xc0}, 0x5a, &(0x7f0000000380)={0x5, 0xf, 0x5a, 0x2, [@generic={0x41, 0x10, 0xb, "d5e52981969bd0a050c23e9b9fb241eab111dec59d8a694a39c6f93a152b2355f495ee6b6b053e749a32726da0c44659f2973e18a53c99ee4ec5b41d8cfc"}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x3, 0xf00, 0x400, [0xf, 0x3f00]}]}, 0x9, [{0xad, &(0x7f0000000400)=@string={0xad, 0x3, "ec484122b7a7404f4b108d5b6e6d17536f72595731ffc446cd1c7fe59ee02053b7528820d6c613a036f4d9db293b709c1fa7d531935addd147b4bcd64a48407f400d6d265f67f2eccedec2f60ad737ed3df08ccc8401d55d23c518f8e315f2361b2eb6030607d8ebb07b7b1d8731cc2a0f7e1cacc0ebd5a8f21ba25de6d3959d8627b4b6be46689ae31683edb043e6fda1347916c6cf9b01128d4fecbce028d0f917df30dab46727eb7d2f"}}, {0x40, &(0x7f00000004c0)=@string={0x40, 0x3, "96b5fd302e36a2b8249a91b3867025ac153f18e491469b9c7b1a32a11803eaa6362baac5174d5d3c2d718680f68c071c019bfe8a4d1e241a8abb3a7b1c28"}}, {0x6b, &(0x7f0000000500)=@string={0x6b, 0x3, "db800013038b1c795c0c865b0d594af72a7e370dfcf04ac0f63efe870019d9e2ccd85aa1f86e6200372f84a208b7e5edd0b4d840e0a291b9d4c199ed9357a4bdb2582bb104fc4971a34e0c37090cbf1f2a02765391ae346477b26a3ec87436d4ef28131360402fd91a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x812}}, {0x6, &(0x7f0000000600)=@string={0x6, 0x3, "592b1d14"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41a}}]}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000280)=""/85) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000240)=""/55) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/98) 11:54:20 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x9) 11:54:20 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x10003, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/92) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x3, 0x8]) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x11, 0xff, &(0x7f00000001c0)="32c16a9dcb793e64304f44ded7ef248ed95fe4a63772f10e005a535a689c7910800a99bb88e18b37384aded01893ec521247ef99245cf7a32bfb97a9e45d974761527287086b8e33f7ad82c46d511c29065fa117acfb6c60afd8e597cd2baf5cac58f9992a57d604f8c7b6d1ed65eabd2b818252cf3ab7dbb08aab0c08071a9a688a6c2fdf62db66c717432f6127c90963148d17cc9f6554773398aeefc619678fbf2f98b583e83304a4e2dc0bcddae7440388872179335c8441bd44bab31c1607b93e30597f0f54637bc96f8e064b53166b188760bf2b6dfd38f871115af63f38ae95bbfbe1e6d10394184065d46419b104242f9a50665b9dc6e0dd2daa4b"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2835.772875][T23877] usb 3-1: new full-speed USB device number 91 using dummy_hcd 11:54:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xefd0, 0x80000) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x40100) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000001c0)=""/145) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/5) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x94f, 0x616c, 0x3, 0x100, 0x0, 0x5}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2835.872858][T22565] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 2836.122792][T22565] usb 6-1: Invalid ep0 maxpacket: 512 [ 2836.172891][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2836.232888][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2836.272836][T22565] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 2836.312963][T23877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 2836.321908][T23877] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2836.331595][T23877] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2836.512788][T22565] usb 6-1: Invalid ep0 maxpacket: 512 [ 2836.518273][T22565] usb usb6-port1: attempt power cycle [ 2836.612876][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2836.619138][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2836.628207][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2836.673550][T23877] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:21 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x7, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:21 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:21 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x80000001, 0xc0c2) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000140)=""/62) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000000c0)={0x5, 0x6, 0x3, 0x6}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80800) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000240)={0x40, 0x5, 0x2, 0xfffffffe, "61c3bd55f305ebf9ffffff000040000000007d4874760000000400"}) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x6, 0x8, 0x7, 0xa47d, 0x81, 0x20}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/116) r3 = syz_open_dev$hiddev(&(0x7f0000000180), 0x100, 0x100) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000280)=""/77) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000001c0)={0x1, 0x1, 0x7e0b, 0x8, 0x1000, 0x7}) 11:54:21 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:21 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x26cc3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x12, 0x47, &(0x7f0000000000)="861c43f6be32cb8bd3511933446dd2ba94f7d6f41498fa6a519bbcda524cad3b5e013cf915b3266dd0297da4513603d173dfb0dfb82eb78bc5ce25bbd44a9a1de7846c3bfed562"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x22400) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) [ 2836.883820][T23877] usb 3-1: USB disconnect, device number 91 [ 2836.934176][T22565] usb 6-1: new full-speed USB device number 46 using dummy_hcd 11:54:21 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20a200) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2837.023436][T22565] usb 6-1: Invalid ep0 maxpacket: 512 [ 2837.172760][T22565] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2837.263118][T22565] usb 6-1: Invalid ep0 maxpacket: 512 [ 2837.268593][T22565] usb usb6-port1: unable to enumerate USB device [ 2837.372747][T23877] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 2837.782772][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2837.822863][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2837.902842][T23877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2837.911758][T23877] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2837.921589][T23877] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2838.242791][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2838.249003][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2838.258113][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2838.313869][T23877] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x90080) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000140)={0x6, 0x5, 0xdf, 0x200, 0x8, 0x2}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/199) 11:54:23 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3ff, 0x513e03) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/13) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000005c0)=[0x6, 0x10000]) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000003c0)=""/95) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000001c0)=""/206) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x4000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000140), 0x79c, 0x6000) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x80521) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000540)=""/85) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/7) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000440)=""/229) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000002c0)=""/255) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0xfffffeff, 0xfffffc01, 0x8, 0x1023, 0x6, 0x8}) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000080)=0x1) 11:54:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x9) 11:54:23 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x2a8000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/144) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000280)=[0x2, 0x10001]) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/82) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000100)=""/223) 11:54:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x9, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2838.524666][T23877] usb 3-1: USB disconnect, device number 92 [ 2838.654582][ T33] kauditd_printk_skb: 24 callbacks suppressed [ 2838.654606][ T33] audit: type=1800 audit(1625918063.420:1609): pid=13703 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15663 res=0 errno=0 11:54:23 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/36) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000003c0)=""/142) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000002c0)=""/252) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/103) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x400) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x800, 0x400002) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f00000001c0)=""/226) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000480)={0x401, 0x44, 0x20, 0x53b4, 0x19, 0x7}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000040)=0xfffffff7) 11:54:23 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xff, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000040)=ANY=[@ANYBLOB="610000009aaedf7eba0a0a1935ce08ee6d07ddb8a533090eb4aff6facfd70eaebe546a699b3d7127ffe47c113059d4cd401cc8f79356e424f73ef11bbac9482f0fb0155d986182454e7b88a1f93948ca2b8286e1d2ab1522040a020a667500000000000000"]) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x100000000, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000100)={0x3, 0x1, 0x6}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x4, 0x82e41) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000180)={0x1000, "d39da386922bb04e63e435054d9429fb7cec2d7d393eacecef5e3a3f3029020de81b04c04daf6b50b244c4e773e3e4af67e7dcb46418b4e88762730a494f5b93317567f606dc3d7898f8c3aa893f95d64d21f624dd90ee92e34e0431743a0ed8ae24ad0b74a1f4032d1a3da2d640e4a0a9d164a017d12fa6ea2244383820e6e9e0afdd7aeb7dbe265e9b0939205d774e889595e667a74f01592d347f17346c4c4b5d748f6c9ad8fea19e5646482b3065f34a81cf734a3ac47aa18338393dcffa39a9316a6b6bb228f025f1c9c01ae91341008cd1becdbfa41e46509888d32f7af8aa47e896a619d74171aa0635e0b3b54b66e5fe7468260a274346b5f26348af5fc7f250e6747031284416cdebb7935a9372f037337f19bd04ee0d45a980a20b197f7373cd34f3fff6ceab90eb3655cd53a53b148ed77417d85eaef367f56e53424b4496cee09913c6ab29f72110aef189b21461720872bf74418a8152ef9074d753cfb715082855337f24966477faaaa79bd8bc393a7e0a0c550b711b70ebde98fe1ecb389860db412d95f2aba86ba54a7a5ebcf8a687c93f946912288d6554072ec99ef41b5746fc2905432ed589d7b6e79ae6b66c7e540fd1f82a138848f85d86a066f46b882ce0346acc6849eee557d10ab4b0b7e73bc9ea5f3a94eb9d70f514aca1f402d7c2af84581a63c3dfe77a6eea8cf682f7c10d97a9010e2af6049badd8d433983f5ff502b0795a298386941b8adaaf6282ee564874b4b6786ac2f84e8fe03a7ed0f79ec7bbade20c5c29287211feaa85fe66b93d3cabeeb1212a18167f7421903797b263282d15ca82f9fa1d529cbd7ed042045ac223f3c76f818e2c38a68d2357d6a4a947d7157beb0c6005d008f6c2f517b46dbf55c06784e2c5ac5b266ca48a314fd03c7e55ff2052c574b382e4ed80e73eb537df42063c9d1bb1716498351f20c2023ff351bd63b276fe52a72fe3ae3a94005a797d3cad38fb63f20e88aa6fac6f4d74cf6bf829f1cac226b8372312734e246da2ec4e32ce94344cf6316fdd46d6d3247f970c3925068afa1349430431efe4046f4fd0102a44effd5626ce81986063ddf22c3e90ea4e1d7c4b1e6e5db900793be9b62923bd2fc686f646618a7314481234cfa08cabc2841f4eadf923ee3eee604380118654d36f5aa7a5c35c40d76443728ba1666d91fe14f4dd479b5fdbf8191b915e79e2c1ed6d39112eb0f8871a28aeda862202f47f636b26a6e05bc4b2eff158b886048cd3799e3de9c2ece660feaa8c1635d88700c1eafde1bc6390fdc4a474c352639e0a0b81637d01469367ad59f0f0f7c54f3013e46d0bf593614c8491e3e2313b0545b568af5738e2bab997bef178e655d3d4202c4807b57b017abf8f3f57d6c1f0e88e5f5097ff53a0e417194b58f47c49f3f0459db9381dda3fe54c0dfd614054cf28ef2fa089015af4273245d9a7c611ded5b3c2a523916a588ef17a7436ed70ef8371b6a79a3dee6a45a333a50e7a8e3a7a37ad2d9c545d7382a71f6c1081bf6e26135185bbd2739609c4075ff900c2befc512a9c846ad88165519c82a5021a69d3488c1da690628c72734414e40efe4cc71c9b941d0641fbcfde2644491b5184609eeaf69d7e23805fd1fdb4e2af779dd223243c507c29220bec5cad404dee0775e27a35786fc7b92bda6ef6bd4d80f1a7c8ff33c005a1568aa0205f7286f188d7a008c4e19a3ca9249a0dceef9141d64eab2ba56fec507a0e5826765bab022ffb8cd1d339054c3df9158f60a99c36a36a724cd17f3d09d8c3591f87f6102ebb58897bbcd9fa1f1a32370971afd73ea77658d2dddb1e01b56ea56ff211a32a04ec5e5e315193dfde27fae9a46600b097a7bb94c81ae9625c0d32f26573a3afdb30aba68b73722881f31ab35892160bb9816f5756b7abb67706589417893defbf142320ab35e5ceb67392902d6cf42097b5f1b6ead6a60a9d76289d67d114d484420d7e2607314e542f9e7fb3f00b9f70d20e980de4dc6d83c3dfe38309b51ed14577e7807c28e16d95968dc21bd24b03fb522915955467e1d4bc38e8d87e3aee2ab8f7b02c471fc90465274362660655f3fd47e81fa54c2c9a7c5293d37b64ba748c95ed91564c4e259a6e5b4ee2acc319f96d8d37ca0311e26ed9e2c348a74124cef04d1712a4b631b34a174c4540419fc59471503b47a3ac15193aadb51df40f26b00ac096d799745f1d5548e4784a30356513ad530d9f6e6751c06656e83ef6f752941cbbcd7975588ae6e2bc97a020ce65dfa84eb20dcd01171499e6e634a8b110e15712a0ddaa4b313cde9b1bc572d7c8433d9f3d5ca7ee07c61bdde3a3086c995127c5114f41a9cdace2604e4fbcf03a1a7a64a5d1fb4e0a8f34af79c684239354e057737648cb3fdc84cb741b236f146ceb55a946bf321833c4353c1e4b8870cfa6f7e0da5419d11df6d6cb020bc54c14b66d42eea82ba9705eb3eb66f4def4e4674225acfd973134424a1936de98c8e669ba79583a8148afa83cea21a5942ee6fdff832eeb5064962f44394e0a2401b052b9682f565213bc9d3ecd18e2a789750b8de46b3db9e408ccee8b6ca03bcb1ff71010e6f19ad678014a1373d701089f18f99107b4fdc7fb5c9cf953b043c8d2d2259490d395e081f61077ef2a9b8a3edac868e545d773c7ecd88d5c8d7a8eecff58c70f83193e42df099f0824d1091ad61c7e655691926dc7cb758b5f9d35b43a8a211e82330e414f923c7ffb637cad8da2e699ebaea79ca64068fb35dc794bff97cf79cedde3c919748a893e431b4951b90b1dd94f5f8528e5cdf11002724676b1955602f281a331cb5b0d1089eb534505c1728c27de9a7bfe24bd748cebd9c1d4c6e98ce01b3aea611c5eaec519450e4a270eeec8436381f440e574cfaac43a64e058eb24383d156a33630701d42df872836d947d957523a493c1162990a91b58b97fe8904db78431a900f835285c75445f358060f5245bad0e2d6c448f40691c0b73758ddf8b4304de1e21a190e0e577dcc5441dac2cc6375217b4be0cda79216c15fb5e12207c09cd9d823d844f82d7f23b6fa06f86275753d03d8ae4b66de4bbeccda851f8c4af096c82b2315170070397770c1af1fee6325c4e604325fc40b0b49a03c241838c7510ac46bdd05da0757ac50019c164353afd60068758e98f16b30be1157b620c89d55eaa539a0c8701d6ffd09e6304801a18fe4ba466b8ebd6bcc097b71349f5c4a9e008e0cc30344b0eb4cbbd9f065e7c3fcdc231059ab891e64007fc0899be128c6de49f51bb1a3f3571bc412f14e06d3e2953168a9b3b602b983eedf4280e0b879f0a0ef8ec4104b6171ac48f029d678799c01b9217ee9c9ab6c80f9d6145ceb4c29b2a8c40ed4af7c4da230fd07d53e9422352e39a4ea6321858da4a6a944f34bf3e3418675e8da9cedf66de0f08756dd84e5d7c6092bde3d6451870d13acb2bd24629fdb0ffec6fea95a3ae95be03baaf4b8404770498d62c578d100176d65cf8d89e1ded6425f58b0dcbae1910e8028b3b32bd2925aff8940343f9ca043d5ecf69205e7467f46d449e4fdd46d797e873935e8e242ea6830a0e12eef64000157b7af932089e84c26b68345d53b1f1f9855a53e06300ad1aeb9894d61490e8bb83e80c82bfa6d56b36a08c24ed66af238ee02b150250704127f26073fa70ee7dc815a75b905caded5376d869f24dcc7f148be3cfccb22a91973355aff11efb164db3062adc3ffd8a63fa2c9192a12a42836d5f65f12045351bfd18397a03e15aeb17504a551dbb3ab0aecdfeeefe56655e50e7507020de763a1b97eb0fb9086ea301abd2c0bfc83e44cb69731ddf68376f6187931abc7362fdca21e7b274dd255b3f2c697b53caddf4d9845447548d8a1b04b3183f597a20539d2e47b8e7ae6b3f108bb4941b611f98038a6a501ed47ae8b3208e433054c2159597138c5043199aa4e5ce9628c61e8f24ff10d5289d4e75be9ff572b8521ec62ea9b7e9c8c29e3f422ab180d97a721a0559f90c4e8e48c10a41f511d55ae14c4b1bee30763c0dcde27a379d03277012c65664f31588ecc96c7b604766196e850a89215eb6f6ac88f458140318c1df5d55d35b0e6e5ec9d97eb8a1e26e253e925f02c54fa42d982722be1b7f3056b6f25d2d2c1ae7420aae01a2eb86b64953799ea2f60cf986f66f6c48d39175d7f591feab99887741a22fbe93c2c15d597e065369cab9ec932ad39aeec78064b3373c21daf164055d2048ae23c6b82186e236ce23eee997894dc8501c1b76cc0348ffba7b3d502e5487b99c8ceb4752ff3764b1735ca51c49a6c112b1d18e2f9f3f57b9442cd2900bf2651fa95cd22ffff2761d350186ab85952714dc8c5a97aede2c91dcc3c8d2ca4dda71ff54d730d10e765efe24fd49ac5db2e268b55d06439e7f9b2862c6c75fafa12c709f654486327e25b44ca5f42b0467c29e83ffcb2885d6b968ddd350b07b07dcd4bc14b032ad77f22be7ecf629e1b2e5017848b8d95cde1e84f02bffc8bc795238c16cf0727da852d0279c08650a1f565d324833a49dca51079444d9799a82533b1586bc076f29e6ae9db7848d8e5535e97001bfe8bc7832e5fb6ce42f179733ffe0e7c59acf35545a54f44560483799f978e3735c379003cc11ed40fce79db0a08d3b55433d6497a58af6589cf788646f4dab0f904303ce24913b0d53b90848a5cb8d01919d0978a0f6a0afb66732918924b09c0cf3cbfa727c551435a09ada2c1be6d4b7027b5ad994aa763d095d6526946f3850691200c84f43d2c39511d371abe5b2c9583417aeb5b309e1f95486fa07c82b6316577d358a754242a0c306b8113c52e9eeb37f7051a595eeefbe328d55958f234db2d1eb37357b3eeaebf3db134da29a25a7fa0db566680d959ff489d6c594608544feb7c43d25f52f779ab6a49862a129a75473664b3a86018edb673f2d479b64c4fc41bc0b154d660d0ed7cbde27fd7a1c7bf835a09a7d563a564e7f113d7c8d2c6281743c36500e4ad9847f2f2dc7d5d533fad90b73366c54e6833202134bd43c10302e0137fbccb61b2731aa058e97976c99de7ecf382754f70f26304038cdbee46a05fcfecffe1556584146367f42c2efe95c14de62fef1b6f5a3e8e91db7bcf79729c3fefdf7a5ea516de66f70b41b865d6d6b8d7985a7c3a4ffda85f1211178438146befc4719fde2cd36c71eda348c7ebc35fad769b59f9312a8ea3016808f43382370e3c861be866485669e9aabb1f6e981e2d9f1cd53a9391a91401ac0d05dd37cc517aec11093ef1b4cc6dfaaf84a5cb868295cf1151eb56fc1e777e2103246b6fbb58ddd62977cf05ff51356f0e32db234f6004c0e861f84b883db99a06b24356856f6a87317ba7083bb24e0fd8a1e7da2406f64a70bcdb2d3ca9227ddc83eb2840db9bf8ffb0aee098274baeaade7b28fc550029f8c29f092c106ca7d6805c2ade7d05a54d7f6ebcb0f6e2218395e4b5c4606970ece3cb5a26d10468f01d69c10c6ffae914431f82b26824e62818e8260f6865c1537fc7d77b373833f17997bbf4782cd4d8f31006c22fb99b26fe430fc252fd9a221936a43bbead4a709d4d06b9b7144e1ba79e660ecac705924edae6179412e8852f69dd5d0b19b730039bb4577eac43eff8eebe3ea75316f8610dd5ebf6b34bc175c1b7e631e5ce082bf9efb09ec62a9265b0759b09af75261d8dca5eb74bf6bb82c0c13aca8e4422818a8f11ee2f32721d4c11ede2bd6a655d28c42"}) 11:54:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0xa, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2838.728201][ T33] audit: type=1800 audit(1625918063.460:1610): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15670 res=0 errno=0 11:54:23 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0x7, 0x1d0300) 11:54:23 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:23 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/103) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2838.769543][ T33] audit: type=1800 audit(1625918063.480:1611): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15671 res=0 errno=0 11:54:23 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/86) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2838.889827][ T33] audit: type=1800 audit(1625918063.590:1612): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14640 res=0 errno=0 11:54:23 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0xffff) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/113) [ 2838.921272][ T33] audit: type=1800 audit(1625918063.660:1613): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15669 res=0 errno=0 [ 2838.944531][ T33] audit: type=1800 audit(1625918063.700:1614): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14640 res=0 errno=0 11:54:23 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x4c280) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/102) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x2000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/240) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:23 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x100) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/134) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/127) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000001c0)=""/177) [ 2839.004909][ T33] audit: type=1800 audit(1625918063.740:1615): pid=13729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15659 res=0 errno=0 [ 2839.031488][ T33] audit: type=1800 audit(1625918063.770:1616): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15671 res=0 errno=0 11:54:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffdfffffffe, 0x216480) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/38) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/60) [ 2839.092642][T22565] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 2839.135466][ T33] audit: type=1800 audit(1625918063.870:1617): pid=13739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15657 res=0 errno=0 11:54:23 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x7f, 0x7]) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x3, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2839.187451][ T33] audit: type=1800 audit(1625918063.900:1618): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15662 res=0 errno=0 [ 2839.502631][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2839.542684][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2839.622698][T22565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 10 [ 2839.631646][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2839.641343][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2839.912575][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2839.918835][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2839.927900][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2839.976145][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:24 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0xf, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:24 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x40) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/55) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x180000000, 0x2000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x16, 0x4c, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:24 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1f, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/60) 11:54:24 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:24 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0xa64c3) [ 2840.184309][T22565] usb 3-1: USB disconnect, device number 93 11:54:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) 11:54:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/193) 11:54:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/196) 11:54:25 executing program 0: syz_open_dev$hiddev(&(0x7f0000000000), 0x20, 0x400) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0xe, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:25 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9f260000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/47) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/221) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x3, 0xe8, 0x1, 0x3f, "0171ebef725406dd251702d7afc056f127cd6de36f9fd6db9d15430c484810ad"}) [ 2840.662435][T22565] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 2841.062492][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2841.102547][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2841.182504][T22565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 2841.191564][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2841.201269][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2841.442464][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2841.448659][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2841.457737][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2841.513338][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:26 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:26 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/49) 11:54:26 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x40) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/55) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x180000000, 0x2000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x16, 0x4c, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:26 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:26 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x5, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/18) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000080)=""/31) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x80, 0x0, 0x1, 0x70, "00cf343225e0012785ec989cb18546138f6ca2c68688a24f7c92790594767a2c"}) 11:54:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0xa8a00) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/4096) [ 2841.723291][ T6155] usb 3-1: USB disconnect, device number 94 11:54:26 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x11, 0x71, &(0x7f0000000040)="78701ad8c6cda8c03e7bcfeb51cde5c2e1b8f69bce607485942ba38812db010b7d010b08309e91cf3982346bff8b3423e262b6ce6b37c96e232f264157fc30b86ce10dcbdba7998405a6993b3fc674ad1b5c00df0acd6ef41baacda6f78907ce392ab979d06a955824806d10c282bb14b6"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:26 executing program 5: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x6, 0x905c]) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) 11:54:26 executing program 3: syz_open_dev$hiddev(&(0x7f0000000000), 0x20, 0x400) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0xe, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x2082) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0xc43, 0x4]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000002c0)=""/139) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/49) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000001c0)=""/245) 11:54:26 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:26 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffe, 0x0) [ 2842.202336][ T6155] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 2842.602391][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2842.652433][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2842.732380][ T6155] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2842.742111][ T6155] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2842.982327][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2842.988561][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2842.997659][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2843.009406][ T6155] usb 3-1: config 0 descriptor?? [ 2843.052980][ T6155] cdc_ether: probe of 3-1:0.0 failed with error -22 11:54:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x2, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:28 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x20, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x81, {{0x6, 0x24, 0x6, 0x0, 0x0, "a3"}, {0x5, 0x24, 0x0, 0xc3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x1, 0x3c}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x0, 0xe6, 0x7f, 0x81, 0x81}, @country_functional={0xc, 0x24, 0x7, 0x2d, 0x8000, [0x925, 0x1, 0x1ff]}, @mbim={0xc, 0x24, 0x1b, 0x7ff, 0x0, 0x4, 0x6, 0x8, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x3, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0xff, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xed, 0x7, 0x1, 0x20, 0x2}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0xff, 0x4816}, @ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x826d, 0xf000, 0x7ff, [0xff0000, 0x30, 0xc000, 0xc030]}, @ptm_cap={0x3}]}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x202800) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000001c0)=""/252) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:28 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:28 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x80000) 11:54:28 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/51) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/17) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x18582) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/211) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x15, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2843.267104][ T6155] usb 3-1: USB disconnect, device number 95 11:54:28 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x269f, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:28 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/35) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/94) 11:54:28 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0x36940) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/4096) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/24) 11:54:28 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x260402) 11:54:28 executing program 0: r0 = syz_usb_connect$uac1(0x4, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x2, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x2, 0xff, "336db6383dd3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x91, 0x4, "af63bf"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfff, 0x1, 0xff, "41b0fec7299e16"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xb, 0x5, 0x1a, {0x7, 0x25, 0x1, 0x80, 0xc1, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x20}, @as_header={0x7, 0x24, 0x1, 0x80, 0x7, 0x3}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x3, 0x5, {0x7, 0x25, 0x1, 0x80, 0x10}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x40, 0x6, 0x8, 0xff}, 0x42, &(0x7f0000000100)={0x5, 0xf, 0x42, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7, 0x9, 0x1800}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xf, 0x4bfb}, @generic={0x21, 0x10, 0x3, "fc6cda52ce1e819791d0e02fb90b7aeacb34b67fbe08fe868f507375ebe8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0xff, 0x2, 0x2}]}, 0x6, [{0x1e, &(0x7f00000001c0)=@string={0x1e, 0x3, "ad8fb9628886cccbed75200fff9573c0e2b3812aaff44d6470da0141"}}, {0x7e, &(0x7f0000000200)=@string={0x7e, 0x3, "ac6baacbc2c115364c314d5abd0147b2962a889a4bba231701461476ea950279b31271b8b209772aed68b1679867309a99486061fbf2b1bc3fccb22a8e429b2afc6e6c48143ced50a3d43d985a67d3ac403e1963aa0ea0a6ac83b2ebbf3e7ffc7bd6c5f02545fd67c08af683a12ac0378cf151ebc54e8a60bd6163a5"}}, {0x9c, &(0x7f0000000280)=@string={0x9c, 0x3, "9c903ad47d9c789363de730a47e20ce9145d0897be8197282bf21981eeb549ba5f0449362e772247869b3d25b7efe27a83c5a3bd4943383ee8a1047289b4517c26c80d87232151ce307c509abc42fe16ded809102c7737bad9868264abce2fe7a157ce228e61a531f226b5f7c0e743154ffa12864df66a0408342d416ba2ef4a8309304c81c068fbdc4006126eb7f1ea14ba3777ba0a563954a6"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "3d3524c5774c9e9c01ffee639cfef7ae80b752a576c63368666d2a7246a89c9b817981cda1c75f42395c418de51efbb5f00b9c1f1f16c2bace"}}, {0x9e, &(0x7f0000000380)=@string={0x9e, 0x3, "47d06807578909db2905b984a58290c7fe366c0b72fe2603a761fb3c4ab29bfb10472f5491e59718234a5d706924028a945a62d902f5786c435c345e7d9145e92cc3f86a65f687634145fcf81d5e3683a4a3139e31c4614543fc351eecc5fdbbee62fc337660238e95b9b67d2a4e222e5ac1587a5659f792c13c0e3ba6be03254258c4b3726f27359f2d3b638f42c6b6f294bd4a6ad4af8bbb2fac2e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x480e}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x40, 0x30, 0x98, {0x98, 0x21, "29d128a744a7dacab1411f65e31bc5801d43c82130218169dc518d88b81381e8217e797b4354ab8667e240d87242b4a888756cc0e6078b4f1dac28761b063839437b4f478033e5a8219bd75ee0344d0fec1b8fa656ae9cdefaf0a2a2442df22b4ccefa8f179240b148dec325079d2d94c9ada4e319cb96aa8f90b68cd849d46216109af7669db490c9cf22173265bde73071f6d7f918"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x20, 0x3, 0xd0, "d98f56095ead04872ba18df0bdf37b544d1e3cafaeee531b1a2383b934ca9c5de9b52bd6940a559fecaeb105e6312b6c21bb0a2da9ccc8582d7d11317c00adf4c194a00226ad03b5486c85b8f7a859eca04adc2585789759f6d4af746151efc73fe85a9fc889377ba521c26486a5f0a8894a30915a53805aa4c52dcdfe50690b331faf161ab9b3da4733703b2b97c0d562f4c62669acb9b1bda2ae2c88f7d5d326dc75f8db6f3316848161b53724cfbcdcd34e19eb8b876393f999529c8ed9131eb51aefe3c9f42a3a31968e0f40c169"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "115e"}, &(0x7f0000000800)={0x20, 0x82, 0x1, "0e"}, &(0x7f0000000840)={0x20, 0x83, 0x3, "166253"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "412df420"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "5ec140"}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2843.622226][T22565] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 2843.762222][ T6155] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 2844.022518][T22565] usb 5-1: not running at top speed; connect to a high speed hub [ 2844.102264][T22565] usb 5-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2844.115206][T22565] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2844.202250][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2844.242332][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2844.292206][T22565] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2844.301272][T22565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2844.309293][T22565] usb 5-1: Product: syz [ 2844.313486][T22565] usb 5-1: Manufacturer: syz [ 2844.318065][T22565] usb 5-1: SerialNumber: syz [ 2844.322294][ T6155] usb 3-1: config 2 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2844.332311][ T6155] usb 3-1: config 2 interface 0 has no altsetting 0 [ 2844.572257][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2844.578552][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2844.587680][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2844.643162][ T6155] cdc_ether: probe of 3-1:2.0 failed with error -22 [ 2844.662845][T22565] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2844.673573][T22565] usb 5-1: USB disconnect, device number 91 11:54:29 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x3, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:29 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x3, 0x1000, 0x8000, 0x9, 0x9, 0xfff}) 11:54:29 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:29 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffe, 0x600001) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x8000) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/4096) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000001080)=""/59) 11:54:29 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/115) 11:54:29 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x8000) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x6001c0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080)=[0x6a681789, 0x20]) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x400) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x3, 0x0, 0x8, 0x4, 0x45d, 0x1}) [ 2844.852629][ T2628] usb 3-1: USB disconnect, device number 96 [ 2844.930301][ T33] kauditd_printk_skb: 25 callbacks suppressed [ 2844.930324][ T33] audit: type=1800 audit(1625918069.690:1644): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14947 res=0 errno=0 11:54:29 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:29 executing program 0: ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000000)=""/221) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x4020940d, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/142) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) [ 2844.960231][ T33] audit: type=1800 audit(1625918069.720:1645): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14915 res=0 errno=0 [ 2844.990737][ T33] audit: type=1800 audit(1625918069.720:1646): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14963 res=0 errno=0 11:54:29 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21c301) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x9, 0x8a1e, 0x2, 0xff, 0x8, 0x6}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/125) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000804000, 0xa64c3) 11:54:29 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:29 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)) [ 2845.097618][ T33] audit: type=1800 audit(1625918069.860:1647): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14744 res=0 errno=0 [ 2845.195962][ T33] audit: type=1800 audit(1625918069.890:1648): pid=13938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14884 res=0 errno=0 [ 2845.218003][ T33] audit: type=1800 audit(1625918069.900:1649): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14963 res=0 errno=0 [ 2845.241463][ T33] audit: type=1800 audit(1625918069.920:1650): pid=13941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14979 res=0 errno=0 [ 2845.263880][ T33] audit: type=1800 audit(1625918069.960:1651): pid=13944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14637 res=0 errno=0 [ 2845.352102][ T2628] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 2845.772135][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2845.812201][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2845.892148][ T2628] usb 3-1: config 3 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2845.901916][ T2628] usb 3-1: config 3 interface 0 has no altsetting 0 [ 2846.142159][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2846.148443][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2846.157514][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.202861][ T2628] cdc_ether: probe of 3-1:3.0 failed with error -22 11:54:31 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x4, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:31 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x809, 0x4000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x8) 11:54:31 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:31 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x200100) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/138) 11:54:31 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:31 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1a933f5b, 0x30102) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/109) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2846.413885][ T6155] usb 3-1: USB disconnect, device number 97 [ 2846.483524][ T33] audit: type=1800 audit(1625918071.251:1652): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15139 res=0 errno=0 11:54:31 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000002, 0x4b6081) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000001c0)=""/4096) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:31 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x40000) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x8c001) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)=""/14) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000080)=""/91) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0x1, 0x42, 0x7, 0x402, 0x18, 0x7}) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x8, 0x18, 0x9, 0x3, "ca257167213f25d93d0bd8a4138395ee5c021e87dbc5bf788e061d019658f024"}) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f00000001c0)=""/156) [ 2846.532856][ T33] audit: type=1800 audit(1625918071.251:1653): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15157 res=0 errno=0 11:54:31 executing program 5: syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffb, 0x8842) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8001, 0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x80000001, 0x9b3]) 11:54:31 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xefc5, 0xa64c3) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/99) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/90) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x17, 0xd3, &(0x7f00000001c0)="c872291478442d34a622d58a3227b7e47a6ae4e81e223e4631a6256ed3c4f39e6e721a8e9355d4720c76d5b62fdc9d0ef94ae764bed8ba037d25beec1163834ecab0a5abb6bbf1915c6672232fb81322b28b721f0bf98cfee93588cc01350be16f7df39402f35911a93097d8f70cef110ab9b9af3d806e19e02e29a2eb2f2a33dcb091c9474fd235f13ff9e1e46af3c2b2c85b988b3d93447f825e4d9678d495a5c9ed13f26ffd57847d05ea285e9e2eb582a3921d11b5d378ecd491e259aace2666b96778531f461e2fdcc1e12de0fe632ceb"}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x5aa) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:31 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:31 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1f00000000000, 0x252400) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/235) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000280)=""/112) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/189) [ 2846.991970][ T6155] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 2847.392022][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2847.432042][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2847.511999][ T6155] usb 3-1: config 4 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2847.521638][ T6155] usb 3-1: config 4 interface 0 has no altsetting 0 [ 2847.781917][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2847.788123][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2847.797302][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2847.855933][ T6155] cdc_ether: probe of 3-1:4.0 failed with error -22 11:54:32 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:32 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0xffffffff) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x6a01) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/140) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/79) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000000c0)={0x2, 0xffffffff, 0x8, 0x61, 0x5, 0x1f}) 11:54:32 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:32 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x5, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:32 executing program 5: ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000080)={{0x3, 0x202, 0x5cd0, 0x8, 0x7, 0xffffffff}, 0x2e8, [0xd0e, 0x400, 0x0, 0xe6, 0x2, 0x2, 0x20, 0x8f, 0x7fffffff, 0x400000, 0xffffffff, 0x10001, 0x8, 0x8, 0x2, 0x49, 0x3, 0x8fe5, 0x7fff, 0x5, 0x4, 0x2, 0x9c, 0x90000000, 0x5b0c, 0x80000001, 0xffffffff, 0x5, 0x1, 0x8, 0x13, 0xfffffff7, 0x7, 0x10000, 0x1ff, 0xfffffffd, 0x140, 0xff, 0x0, 0x5, 0x7abc, 0x2, 0x0, 0x5b, 0x800, 0x5, 0x7, 0x1a2000, 0x1000, 0x8, 0x6, 0x7f, 0x9, 0x1ac, 0x4, 0x401, 0xff, 0x20, 0xf5, 0x8, 0xffff, 0x8, 0x1, 0x8000, 0x1, 0x6, 0x80, 0x0, 0xfff, 0xc1, 0x3, 0x7b, 0xa5, 0x4, 0x6, 0xffffffe5, 0x1ff, 0x4, 0x7fff, 0x8447, 0x5, 0x7fff, 0x4, 0x9, 0xb84, 0x6, 0x1, 0x4, 0x7, 0x5, 0x0, 0x1f, 0xffffffff, 0x1000, 0x3, 0x5, 0x6, 0xe1c7, 0x800, 0x1, 0x4d0, 0x401, 0x80000000, 0x2, 0x5, 0x1, 0x200, 0x9, 0x3, 0x8001, 0xffff, 0x3, 0x9, 0xfffffffd, 0x1c, 0x1, 0x62d7, 0xff, 0x67b, 0x2, 0x6, 0x8001, 0x8, 0x3, 0x398, 0x4, 0x7, 0xc44, 0x9, 0x5, 0x0, 0x6, 0x2, 0x0, 0x5084a864, 0x0, 0xfffff800, 0x5, 0x8, 0x6, 0x2, 0x1, 0xfffff001, 0x3, 0x4, 0x4e46100b, 0x3, 0xfffffff9, 0x5, 0x0, 0x3, 0x7, 0xa20, 0xffffffff, 0x400, 0x6, 0x5, 0x9, 0xdd, 0x6, 0x8, 0x20, 0x2, 0x7fffffff, 0x4, 0x7, 0x8, 0x32, 0x7, 0x1, 0x8, 0xfffffffd, 0x5, 0xfffffffa, 0x1, 0x1baacf14, 0xcd6, 0x1, 0x1, 0x1fe, 0x2, 0x5, 0x5, 0x6, 0x5, 0x3f, 0x5fcf, 0x1, 0x0, 0x0, 0x400, 0x3, 0x1, 0x40, 0xffff, 0x400, 0xffffff81, 0xeec, 0x4, 0x9, 0x0, 0x2, 0xfffffffc, 0xf54, 0x36, 0x2, 0x6, 0x9f, 0xffffffff, 0x3ff, 0x323, 0x0, 0x80000000, 0x800, 0x8, 0x6, 0x5, 0x5af9, 0x2a6, 0x3, 0x6, 0x2, 0x2, 0x0, 0x2, 0x9, 0x6, 0x7, 0x100, 0x8, 0x8, 0x3, 0x8, 0x14, 0x8000, 0xffff, 0x9, 0xdd53, 0x7, 0x1, 0x80000001, 0x1000, 0x3236, 0x5, 0xd47, 0x10000, 0x0, 0x20, 0x5, 0x2, 0x8001, 0x2, 0x6, 0x6cc, 0x48e3574d, 0x6, 0x8, 0x8, 0x5, 0xc23, 0x80, 0x2, 0x9eef, 0x8000, 0x3, 0x1, 0x2, 0x3, 0x7ff, 0x0, 0xffffffff, 0x1381b95, 0x7fff, 0x1ff, 0x7ff, 0x2, 0x7, 0x9, 0x3ff, 0xef10, 0x9, 0x2, 0x5, 0x3aa, 0x1, 0x0, 0x5, 0x4, 0xffff5614, 0x2, 0x2, 0x3, 0x1, 0x0, 0x68b, 0x65, 0x800, 0x1f, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x101, 0x8, 0x1ff, 0x1, 0x7, 0x8, 0x14, 0x4d85, 0xa6, 0x7, 0x4, 0x1, 0x3, 0x0, 0x2, 0x2, 0x1, 0x4, 0x100, 0xfff, 0x6a6, 0x4, 0x0, 0xd1, 0x3, 0xde93, 0x3, 0x6, 0x7, 0x4, 0x8, 0x9719, 0x2, 0xfa18, 0x7, 0x60c, 0x1d, 0x3, 0x7, 0x800, 0x101, 0xff, 0xffff8001, 0x8000, 0x8, 0xfffffffd, 0x7, 0x6, 0x400, 0x0, 0x1000, 0x7fff, 0x0, 0x0, 0x3ff, 0x7, 0x6, 0x9a5, 0x36, 0x0, 0xfff, 0xffff2d1a, 0x380, 0x9, 0x1ce, 0x7, 0x5, 0x3, 0x1000, 0x5, 0x13ce7c05, 0xffffffff, 0x8001, 0x8000, 0x0, 0x2, 0x2, 0xfffeffff, 0x7, 0x1, 0x350, 0x1, 0x2, 0x5, 0x1b, 0x4, 0x98d, 0x80000000, 0x6, 0xffffffff, 0x4, 0x1, 0x9, 0x2, 0xbbf, 0x1000, 0x8, 0x101, 0x80000000, 0x7, 0x3f, 0x5, 0xffffff00, 0x0, 0x0, 0x800000, 0xa85, 0x10001, 0xfffff000, 0xc1, 0x5, 0x1ff, 0x5, 0x20, 0x8, 0x80000000, 0xfffffc00, 0x4, 0x8, 0xfffffffd, 0x8001, 0x2, 0x3, 0x4, 0x45d0, 0x2, 0x2, 0x56d89f11, 0x9c, 0x3, 0xed3, 0x5, 0x40, 0x9, 0x0, 0x5, 0x4, 0x7, 0x2a53e3d7, 0x2, 0x10000, 0x3, 0x800, 0x2, 0x502, 0x80, 0xe66f, 0xd0, 0xdf, 0x7, 0x4, 0x2, 0x1000, 0x5, 0x401, 0x40, 0x9, 0x7, 0x8, 0xfff, 0x6, 0x8, 0x194, 0x699, 0x8001, 0xad8, 0x800, 0x1, 0x8, 0x7fff, 0x6, 0x1, 0x8, 0x5a, 0x8, 0x1, 0x3, 0x4912c3f4, 0x80e, 0x48000000, 0xfffffe01, 0x85dc, 0x77f, 0x17, 0xffffffe1, 0x9, 0x7f, 0x401, 0x40, 0x400, 0x3ff, 0x41, 0x1, 0x8000, 0x7, 0x4, 0xfffffff8, 0x7, 0x1000, 0x20, 0x3f800, 0x1, 0x1, 0x6, 0x1f, 0xfff, 0x6, 0x9, 0x1000, 0x7fff, 0xfa, 0x7, 0x8, 0xd7, 0x6, 0x800, 0x8, 0x1, 0x8001, 0x5, 0x8, 0x3f36, 0x3, 0x400, 0x5, 0xca47, 0x5, 0xfffffffd, 0x200, 0xbd, 0x1000, 0x6, 0x1, 0x0, 0x80000001, 0x8000, 0x8, 0x9, 0x0, 0x6, 0x0, 0xfffffff8, 0x81, 0x8, 0x2, 0xffffffff, 0x4, 0xffd, 0xff, 0x7, 0x3, 0x400, 0x25, 0x80000000, 0x0, 0x2d97, 0x8, 0x1, 0x0, 0x3, 0x400, 0xbd, 0x667933f0, 0x2, 0x1000, 0xfffffffb, 0x9, 0x6, 0xfffffffb, 0x1ff, 0x8, 0x89, 0x8001, 0x1, 0x80000001, 0x996, 0x7, 0x9, 0x101, 0x1f, 0x7, 0x5be08185, 0x819, 0xffffffff, 0x200, 0x97c3, 0x0, 0x9, 0x7, 0x8, 0x5, 0x0, 0x6c, 0x1, 0x1bfe4be3, 0x3, 0x8, 0x4, 0x101, 0x7, 0x7f, 0x79a, 0x101, 0x6, 0x3e0d, 0x55, 0x401, 0x7, 0x7, 0x8, 0x74a, 0x6, 0x140000, 0x4, 0x4, 0x5, 0x8001, 0x1, 0x0, 0x2, 0x1000, 0x2, 0x5, 0x5, 0x7, 0x9, 0x2, 0x20, 0x3, 0x101, 0x4, 0x5, 0x1, 0x7f, 0x144, 0x5828, 0x9, 0x500000, 0x3, 0x1, 0x3f00, 0xff, 0x1, 0x7, 0x1, 0x589, 0x9, 0x2b, 0x4, 0x4, 0x5, 0x5, 0x6, 0x6, 0x80, 0xfff, 0x5, 0x1f, 0x7, 0x6, 0x4, 0x5, 0xfffffffb, 0x0, 0x7, 0x0, 0xab, 0x9, 0x10000, 0x1, 0xffffffa2, 0x5, 0x6, 0x7, 0x7, 0x43, 0x1, 0x5, 0x7, 0x80, 0x800, 0x9, 0x5917, 0x66f7, 0x4, 0x2e, 0x1bbe, 0x1, 0x2, 0x6, 0x4d9, 0x7ff, 0x1000, 0x6, 0x0, 0x1, 0x8, 0x0, 0x23e, 0x8bd, 0x9a4f, 0x8, 0x8, 0x5, 0x8e, 0x5, 0xba, 0x7, 0x101, 0x2424, 0x9, 0xfff, 0x2ca, 0x9, 0x4, 0x4, 0x10001, 0xffffffff, 0x7, 0x71, 0xfffffffa, 0x1, 0x8, 0x4b, 0x2, 0x8, 0x3ff, 0x3f, 0x2, 0x4, 0x5, 0xf3, 0x7ff, 0x5, 0x85, 0x20, 0xfffffbff, 0x97, 0x4093, 0xfffffffe, 0x9, 0x5, 0xb156, 0x6e38, 0x2, 0xffffffff, 0x8, 0x5, 0xc7, 0x6, 0xe7, 0x4, 0x142d60fa, 0x6, 0x6, 0x7, 0x5, 0x4, 0x7ff, 0x3, 0x0, 0x2, 0x9, 0x1, 0x80000000, 0x8, 0x58, 0xfffff800, 0xfff, 0xe0, 0x9, 0x20, 0x825, 0x80000001, 0x3, 0x7, 0x7fff, 0xfffffffc, 0x0, 0x4287, 0xfffffe01, 0x1, 0x3cc, 0x1ff, 0xffffa593, 0x4, 0x7a, 0x7, 0x1, 0x800, 0x8, 0x6, 0x7f, 0xc4, 0x200, 0x6, 0x0, 0x7, 0x4, 0x7ff, 0xffff, 0x4, 0x1, 0x20, 0xfffff9c3, 0x7, 0x5, 0x5, 0x6, 0x0, 0x1ca, 0xfffffffc, 0x8, 0x10001, 0x6, 0x2, 0x1ff, 0xfffffffc, 0x7ff, 0x0, 0x1, 0x710b, 0x10001, 0x4, 0x0, 0x6, 0x0, 0x200, 0x3, 0x8, 0x400, 0x8, 0x3, 0x1, 0x800, 0x3, 0x8, 0x6, 0x4, 0x2, 0x3, 0x5, 0x80000000, 0x6, 0x4, 0x0, 0x5, 0x6, 0x3, 0x8, 0x8, 0x80000001, 0x8, 0x9, 0x3ff, 0x1ff, 0x800, 0x6, 0x2, 0x5, 0x8001, 0x3f, 0x2, 0x7, 0x4, 0x20, 0x81, 0x6, 0x8, 0x0, 0x80, 0x1ff, 0x7ab9, 0x11, 0x4, 0x2, 0xffff, 0x1, 0x79d2, 0x8, 0x8, 0xf0, 0x7, 0x1000, 0xffff0000, 0x3, 0x61c, 0x7, 0x800, 0xfffffff7, 0x3f, 0x0, 0x4, 0x9, 0x9, 0x1000, 0x10001, 0xe3, 0x0, 0x800, 0xff, 0xffffffd3, 0x0, 0xff, 0x7925, 0x6, 0x3, 0x4, 0x4, 0x400, 0x80000000, 0x8, 0x7, 0x80000000, 0x5, 0x31, 0x6b5d, 0x9, 0xa02, 0x10001, 0x81, 0x25, 0x7fffffff, 0x1, 0x9, 0x1, 0x200, 0x7, 0xa, 0x3, 0x400, 0x3, 0x0, 0x8, 0x8, 0x10000, 0x80000000, 0x1, 0x7, 0xff, 0x8, 0x0, 0xffff, 0x8001, 0x0, 0x2, 0x4, 0x7d7, 0xf6, 0x1, 0x3, 0x8001, 0x8000, 0x3, 0x6, 0x7fff, 0x800, 0x6, 0x1, 0x2, 0x81, 0x4, 0x20, 0x856, 0x9, 0x3, 0x6, 0x5, 0x9, 0x1, 0x7, 0x4, 0xffffff80, 0xaf3b, 0x8, 0x46c, 0x2, 0x351, 0x400, 0x2916, 0x101, 0x6, 0x2, 0x1000, 0x343c, 0x8, 0x1ff, 0xff, 0x7f, 0x4, 0x7, 0x6, 0x6, 0x2, 0x198b, 0x1, 0x9, 0x6, 0xffff, 0x9, 0x4, 0x2, 0x4, 0xfffffffb, 0x2, 0x6, 0x8, 0xfc7, 0xa147, 0xcb90, 0x2, 0x9, 0xabb, 0x80000000, 0x760c, 0x1, 0x3ea, 0x67, 0x9, 0x0, 0xffffffff]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffb, 0x4c0c01) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x128, 0x8]) [ 2848.063680][ T6155] usb 3-1: USB disconnect, device number 98 11:54:32 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x101680) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x109540) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/131) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x51, 0x9, 0xff, {0x5, 0x25}, {0xfff8, 0x6}, @ramp={0x1f, 0x5, {0xfff9, 0x88, 0x9a, 0x4e2}}}) 11:54:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3b, 0x82) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/194) 11:54:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x7, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:33 executing program 4: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x10000200) 11:54:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x6a01) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/140) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/79) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000000c0)={0x2, 0xffffffff, 0x8, 0x61, 0x5, 0x1f}) 11:54:33 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:33 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffdfffffb, 0x0) 11:54:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x8000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/220) 11:54:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x1ef403) 11:54:33 executing program 3: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x10000200) 11:54:33 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x3f, 0x6, 0x1f, 0x4, 0xc3, 0x3}) 11:54:33 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0xa6cc3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1, 0x0, 0x5, 0xffff0001, 0xfffffffe, 0x1}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffff9, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2848.612028][ T2628] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 2849.042163][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2849.081943][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2849.161864][ T2628] usb 3-1: config 7 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2849.171531][ T2628] usb 3-1: config 7 interface 0 has no altsetting 0 [ 2849.411826][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2849.418082][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2849.427161][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2849.472823][ T2628] cdc_ether: probe of 3-1:7.0 failed with error -22 11:54:34 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x9, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:34 executing program 5: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000100), 0x100, 0x0) 11:54:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0xa64c3) 11:54:34 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:34 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x17, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/84) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/12) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x22e203) 11:54:34 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2849.683275][ T2628] usb 3-1: USB disconnect, device number 99 11:54:34 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x400000) 11:54:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x80000001) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffff9, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:34 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x9ca00) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x4, 0x2f, &(0x7f0000000040)="6d23421f0faacc11a9043281916fa67b21a3ecc8101d2864030e36ae65dbea1deef65eedd8f50b24cfa5ac24669a47"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:34 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:34 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7f, 0x2200) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0xc5, &(0x7f0000000140)="a5dee798f5e2c4aeb1307781da68a76b9cb49522679ad4b595da030d52975f91b832c63088c2b4514b0553116e455305af055cc32c1e9ac86769d6855ad80830cf3d784ae12d60c9c6380a5d1232505ef0892363dbee3a3ec8f09ed796aa28cde7576aae091e0b2a0a6dcea6e87069158acf98f5f205135e4fc8e0aa8e1ddde0d0a78d8abc4bbd72a338f64a00e5a2785989e16fa461b33bb0a9091fc085b51f5334683be477dff1a4bd1722f7e9c0a9cb136fb2677d1ed29d201c4872e1ca893e88155ae5"}) [ 2849.951886][ T33] kauditd_printk_skb: 23 callbacks suppressed [ 2849.951902][ T33] audit: type=1800 audit(1625918074.711:1677): pid=14093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15678 res=0 errno=0 [ 2850.022478][ T33] audit: type=1800 audit(1625918074.751:1678): pid=14095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15686 res=0 errno=0 [ 2850.075426][ T33] audit: type=1800 audit(1625918074.771:1679): pid=14096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=13840 res=0 errno=0 [ 2850.211708][ T2628] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 2850.611760][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2850.651778][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2850.751720][ T2628] usb 3-1: config 9 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2850.761369][ T2628] usb 3-1: config 9 interface 0 has no altsetting 0 [ 2851.001686][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2851.007974][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2851.017093][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2851.062824][ T2628] cdc_ether: probe of 3-1:9.0 failed with error -22 11:54:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0xa, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffff9, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:36 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5819, 0x208000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x4) syz_open_dev$evdev(&(0x7f0000000080), 0x800000000, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/8) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)) 11:54:36 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffbff, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:36 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:36 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x40a000) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x10000) [ 2851.271414][ T6155] usb 3-1: USB disconnect, device number 100 11:54:36 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0x100000000, 0x290000) [ 2851.335607][ T33] audit: type=1800 audit(1625918076.101:1680): pid=14120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14760 res=0 errno=0 11:54:36 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/190) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0xffffffff) 11:54:36 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2851.406941][ T33] audit: type=1800 audit(1625918076.131:1681): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14743 res=0 errno=0 11:54:36 executing program 0: syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x401) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000300)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/45) 11:54:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x9, 0x22942) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000180)=[0x1, 0x9]) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/227) [ 2851.458564][ T33] audit: type=1800 audit(1625918076.141:1682): pid=14121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14752 res=0 errno=0 11:54:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffff9, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2851.551436][ T33] audit: type=1800 audit(1625918076.301:1683): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14759 res=0 errno=0 [ 2851.574039][ T33] audit: type=1800 audit(1625918076.301:1684): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14760 res=0 errno=0 [ 2851.641149][ T33] audit: type=1800 audit(1625918076.311:1685): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14761 res=0 errno=0 [ 2851.821585][ T6155] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 2852.221780][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2852.261672][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2852.341671][ T6155] usb 3-1: config 10 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2852.351402][ T6155] usb 3-1: config 10 interface 0 has no altsetting 0 [ 2852.601607][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2852.607809][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2852.616893][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2852.662384][ T6155] cdc_ether: probe of 3-1:10.0 failed with error -22 11:54:37 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0xf, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:37 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x80009, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x80200) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/219) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/177) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x80000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000280)=""/117) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/17) syz_open_dev$evdev(0xfffffffffffffffc, 0x4f0, 0x0) 11:54:37 executing program 5: r0 = syz_usb_connect(0x0, 0x571, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0xa3, 0xfb, 0x37, 0x20, 0x1bbb, 0x52, 0x693, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55f, 0x3, 0x5, 0x0, 0xca5da9f4ce3823d7, 0x1f, [{{0x9, 0x4, 0x7b, 0x7, 0x5, 0x43, 0x40, 0x70, 0x1, [@hid_hid={0x9, 0x21, 0xff8, 0x6, 0x1, {0x22, 0x195}}, @generic={0x7, 0xe, "e3fb8c28f8"}], [{{0x9, 0x5, 0x4, 0x11, 0x40, 0x51, 0x0, 0x5, [@generic={0xc7, 0x8, "cd3511b2b3e485e4489e196ef612dca243dcd7111a8fd32042bb1ed29cc5187b3a263f909fe9cd6d749f79f5afa97b7e80be3f6a88dd8987e2df4da75e5e01de9b2e53dddc917ecb41d92c9033ca99743a1a7388b2a5d138e417977deefb29e726077a754690dcba36e8a78b601018ab784c54d6211da55b3ec2b0bd2850f18eceb406c6b3779fee6b72705af9c1d94dd0300c847511b149d2b5e374bf2d6411feea36cb5a9a37c28d7cf9f668e9a784c911308529b5bd5b1255eceb993c9f6addaf528808"}, @generic={0xbb, 0x31, "efc96eca945846911ec48277f1cca671314782508c238a9e15298c2ad964d350df49a69348f2118b3978d9af8795182211e9a11df07ef8b12fbfe2b4e6f8d212588c27810686dbf1adc4a2558cac72e0b117bdaa8cfd6ba0ef7341853668e57f19f2364aea803e0a26664ea98563fd41ff6edce96f93c0ef0d875b48967a47d9dea90b9b763786898f940e2c587c471a0501cf1bf4dc8e4cbc66c4f69e675925ed35f541434b32da8d618a085a2848d2f68087b6e2dbe11c38"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x208, 0x50, 0x9, 0x1f}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3f, 0xff, 0x1, [@generic={0x3f, 0x30, "57a87f143aa714a0c3edd783e0a1643d721509a1f490c46b5a507aa7da8cb70b8e24aae84a1e3a8a2dc6c5e9a5a456d1e0718dbcbaad6b7c6fe7f74fac"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x1, 0x0, 0x3f, [@generic={0x1b, 0xd, "aa8e546b552560007ea2a0dda626d012d66416d596a08b33f9"}, @generic={0x63, 0x6, "5f3359d1c66c03d0108756757640ac29ea6a0e73dcad45c77259f7a745acf306f71d20dda8801471031f3e68701c80d4eb1ca8fad629824fd7f24d740045f54c63bfa5c0ada3812262868d481db6d2410c779ee123df2d6c1933315a66f125ad82"}]}}, {{0x9, 0x5, 0x3, 0x2ea29d472545e56c, 0x3ff, 0x3, 0x3d, 0x1}}]}}, {{0x9, 0x4, 0x92, 0x4, 0x3, 0xc9, 0xba, 0x8b, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x8c, 0x3f}, [@selector_unit={0x5, 0x24, 0x5, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x4, 0x9, "0358680823"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x1, 0x4, [0x5, 0xa, 0x7, 0x7], 0x4}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x70, 0x40, 0x3, "", "cf8ff2"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x5, 0xf7, "c96859b7a7"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x8, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x3, "d9b53c", '\b'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x25b3, 0x3ff, 0x80, "5bceb3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x8, 0x37}]}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7f, 0x75, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x7}]}}, {{0x9, 0x5, 0x80, 0xc, 0x1e7, 0x63, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x1, 0x1f, 0x4, [@generic={0xc6, 0x30, "8363b16a0a7c38b2123cb6c2635d8b9acec33845c63000d5b3a82382d756cd5980aac8f0bd8d38e995420c6d0b142e4f52b6a6d98fbcd8c2d90fe85a5343cece7dc67aad6961c5d01a1c54a4752cfec0199dbc2752d668eabc1f3c262dece095e3e23a19d27cc66927b6f9e4bc9ce53010538fa4aa332b6b3103250530ed1820c4fc4179a8822457ae847bcbe1b4e5d8e053d33873d65d65de740cbabad329980239d22faa620f6ba8bae8876bfc1de9432e70c0cfa91934dded5bdb82b286f3e9addfdc"}, @generic={0xe6, 0x33, "cfdcc536668cc23b062596456261595bfc35263f722ba02cda25898215e6fb453f9be49d482e4314de1949ff0467d1399409111d9a56164daae1f27e434cc5db300abcb587372c0e8452fda709e9929e6462ee4ba324731f1d119a2036155dc7dcd1c8b8d2e1f79763d0ac23a017d770f18ad951b40beaf33f32184c57c809ac607c7e348d6f1d1cd18e5017c312b47a6db3c398b3ad7db7f60e40a9f388b837b028bf3c028498265fa937229102fec777de12a161a4743655c5729c485b7c6303d2e436c7828f1925ec25d5b441ea81cada1fa8c25e6a96d2d716029154e305b7e8f563"}]}}]}}, {{0x9, 0x4, 0x93, 0x1, 0x3, 0xdc, 0x45, 0xd, 0x81, [@generic={0x3, 0x7, '\v'}, @hid_hid={0x9, 0x21, 0x6014, 0x0, 0x1, {0x22, 0x65b}}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x7, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4, 0x2, 0xfc}}, {{0x9, 0x5, 0x5, 0xd, 0x400, 0x32, 0x20, 0x6, [@generic={0x4c, 0x2d, "f2fdcf73dcfe0d2c967f58765963c642a9b6e21378ab1d2ba7a007004d95a3f34e780df1e97e58be0abcb0ccb100f0468f7cead5b0940a2f6c3f5c0821cbf29109260fead937a491d339"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x0, 0x2, 0x4, 0x80, 0x40, 0x9}, 0x80, &(0x7f00000008c0)={0x5, 0xf, 0x80, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x36, "abb9cd6f5d3efe73fafc1ffe09d38e03"}, @generic={0x3, 0x10, 0x3}, @ptm_cap={0x3}, @generic={0x4c, 0x10, 0x3, "dc83d84204a76bd028414678ab79100bc4e7ab34d855226a9fd44b57b1193ce56c6fbbc34f486edf6f8e6bab25a5cbc519bd278d3eddb1dd00db624dca11ddd9bf61a1240ffcdf3513"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x81, 0xd30}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x1, 0x0, 0x0, 0x4}]}, 0x4, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xa}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44a}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, &(0x7f0000001080)={0x40, 0x21, 0x102, {0x102, 0x7, "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"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000000c00)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0xa, "a3a351e0"}, @main=@item_012={0x1, 0x0, 0x9, "9c"}, @local=@item_012={0x2, 0x2, 0x9, "1775"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_012={0x2, 0x0, 0xb, "1c77"}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0xc7e}}}}, &(0x7f0000000f40)={0x2c, &(0x7f0000000cc0)={0x40, 0x0, 0xa7, "ec6e9087e7387e9952597557ab1224f08de500ab1e9d3d5daad810e9c32c3cc869f9366c54b871c28b45999f2793c21716070cfdc3da86a264c25696972f260928917376ab319a675ca3d1a6574ffa9958616466177bd512e2a1e52228da1fbd3163c8721ab47b740a40d2681fb259c27b05be5126c3ab2bf8fa4ffab5327278d0349f435f6a4567799b66667cc55002d2ef9d00ab38e0287c8b61017ffa0ffc1192317a174d8d"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000000)=ANY=[@ANYBLOB="2001e20000009fceea1f1efec093cb076bbdf1d62620b88890c9830533a54da131f488c8423e7cd5df59a3ab2ccc58ba7128b3bceb573cd30d19b1faee5e85792040a213d3a71b4246a4741cc4a64a3b49f3e32433bdd973f1814c573416e50fbca4289d8d7131a6b90b0829525d76eef7ab40d5056cd609dc0dc5f10100000000000000ba15122af3443ce5bb286d533d5d20a672f6ab38d3c82f42084fe399be331c775aaf4348a91f768cebd4bfce11eef77d663bd4ea27d33e25689f1ebc5b771167498c0355e59eab9fa4656a2666ec53ca3549bc8ce7d8485893ce78c26d8c843b475932cfba4d9b8d13ac2a3c5229451b54f5f3019cbd01ca89b1db"], &(0x7f0000000f00)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000e80)={0x24, &(0x7f0000000ac0)={0x20, 0x22, 0x9d, {0x9d, 0x21, "51d7ad7ee27d6f787f9df70a36e438b6d6aeb5d5a11cec83885898f67cb19e43ddac372ac173a6285b7e902bd428573d3301ef136ac3e10353bdbeb0736f17a828cff911d472bced1dd0800e2c0b514f77fdae875d1342db7890c877c4bbdd3070c319ea9f0293f5118a120b5040e4007ef9a0b81c2c2f051de601c860728373bc74c09e59a3e0d8d0a2f6a307bc551c159965aa5ae6089876af02"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000e00)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0x9, "55854ed0"}, @global=@item_012={0x2, 0x1, 0x4, "febe"}, @global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x3, "072cda3f"}, @main=@item_4={0x3, 0x0, 0xa, "39f8f652"}, @main=@item_012={0x2, 0x0, 0xc, "1de6"}, @local=@item_012={0x2, 0x2, 0x1, "cdc3"}]}}, &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x21f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000000ec0)={0x40, 0x14, 0x1c, "24fd10814711c078c86337b53e525b936519f65ff518a8d7584727a9"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001240)={0x20, 0x1, 0x3a, "a2e690a0c93656d5b216628668bde3259cc7394cf2e45be0ea1dca4fbc9693ee9bb14798a8a9cd241c91a1011c0da813fe8cc37885f99f6a68ec"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0xe2}}) syz_usb_connect$uac1(0x4, 0xe9, &(0x7f0000000f80)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902d700030103000309040000000101000019240101000302010206240506012f0c2402020502060602003f060c2408010000045e8d167a070c24020400010409030008c40a240505006811834fe609040100000102000009040101010102000009050109ff03d801020725010206fcff0904020000010200000904020101010200000d24020104034004314453f7520a2402019a5589db517e4d3bc1030301f3d16e072401002003000b240201080301ceb1febd1124020200008ebc80d931c23996059e690a2402010501ff8280dc09058209ff031f1ff90725018000000a"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x20, 0x81, 0x8, 0xff}, 0xdd, &(0x7f0000000180)={0x5, 0xf, 0xdd, 0x2, [@generic={0xd5, 0x10, 0x4, "4d588dae330cf349f7958201644c77f0a7e718d7c24caaea3950c93ef9e01d70430e5971bb05e0074920938ed5e46e64f4acc6ac7d2c1dceaf59ff79867c803b10c3834c50c4616aeed5818585a9d1c0b39bf9317f4a0abcda0832abb3038f6117a31a89d13636a6bac21ac40ac0f3bdba4fc2a7fe3acc5a1c44b86547d0ad4e2340a14795706f0a698e8d4516ad1fd83c4177cf413095ef957ae059636a67117073f73eec69fe64549f9309bb25cb6664a33777e869c40ec6653cc98d71c0f1ab9ab13e13ea93efc5893250810cff762623"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) 11:54:37 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:37 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xdf, 0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x200) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2852.871228][ T2628] usb 3-1: USB disconnect, device number 101 11:54:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2852.963326][ T33] audit: type=1800 audit(1625918077.731:1686): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15765 res=0 errno=0 11:54:37 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x12, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/203) 11:54:37 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa2d83) 11:54:37 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xc00000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:37 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4ec081) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x6, 0x40000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000001040)=0x1f3) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000001080)=0x8) [ 2853.221529][T22565] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2853.401427][ T2628] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 2853.471439][T22565] usb 6-1: Using ep0 maxpacket: 32 [ 2853.671833][T22565] usb 6-1: config 5 has an invalid interface number: 123 but max is 2 [ 2853.679992][T22565] usb 6-1: config 5 has an invalid interface number: 146 but max is 2 [ 2853.688205][T22565] usb 6-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 2853.696992][T22565] usb 6-1: config 5 has an invalid descriptor of length 118, skipping remainder of the config [ 2853.707291][T22565] usb 6-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 2853.716278][T22565] usb 6-1: config 5 has no interface number 0 [ 2853.722379][T22565] usb 6-1: config 5 has no interface number 1 [ 2853.728527][T22565] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has an invalid bInterval 81, changing to 7 [ 2853.739703][T22565] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x8 has invalid maxpacket 520, setting to 64 [ 2853.750650][T22565] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2853.761728][T22565] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2853.772808][T22565] usb 6-1: config 5 interface 146 altsetting 4 endpoint 0x5 has invalid maxpacket 1036, setting to 64 [ 2853.783826][T22565] usb 6-1: config 5 interface 146 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2853.796875][T22565] usb 6-1: config 5 interface 123 has no altsetting 0 [ 2853.803682][T22565] usb 6-1: config 5 interface 146 has no altsetting 0 [ 2853.851475][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2853.891528][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2853.961404][T22565] usb 6-1: New USB device found, idVendor=1bbb, idProduct=0052, bcdDevice= 6.93 [ 2853.970631][T22565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2853.978696][T22565] usb 6-1: Product:  [ 2853.982929][T22565] usb 6-1: Manufacturer: ф [ 2853.987420][T22565] usb 6-1: SerialNumber: ъ [ 2853.992006][ T2628] usb 3-1: config 15 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2854.001796][ T2628] usb 3-1: config 15 interface 0 has no altsetting 0 [ 2854.241376][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2854.247859][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2854.256990][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2854.294831][T22565] option 6-1:5.123: GSM modem (1-port) converter detected [ 2854.317514][ T2628] cdc_ether: probe of 3-1:15.0 failed with error -22 [ 2854.342652][T22565] option 6-1:5.146: GSM modem (1-port) converter detected [ 2854.356845][T22565] usb 6-1: USB disconnect, device number 48 [ 2854.365033][T22565] option 6-1:5.123: device disconnected [ 2854.380410][T22565] option 6-1:5.146: device disconnected 11:54:39 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:39 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x8001, 0x2, 0x80000000, 0x8, 0x8000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/113) 11:54:39 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:39 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:39 executing program 4: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/94) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:39 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x3f, 0x7, 0x7fff, 0x6, "8750fc0cb7593105f8a16a54220abf87b4a4fe75e2f4d32c462a3afd78c8549c"}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x63c180) syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/16) [ 2854.522233][ T6155] usb 3-1: USB disconnect, device number 102 11:54:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0xffe0000) 11:54:39 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x17, 0x87, &(0x7f0000000000)="22f808832464ad231746aefbb92de1d0cc31ff5fa4b2b73d9025be43ee0f237fb82158b48507638b473be270566723f988f9a3ffc15734343602dc601cc08fbc85adf36732e54cc68ff7fd68b9af49eb5500885d675f886c59adc1ea816d80b6ce2fefe4b32753bcfbb5f06a906756fe7e8905582d9590704c3ed600a02a1acc1ea99d403032a7"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:39 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/218) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x501002) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/62) 11:54:39 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:39 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1200000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:39 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0xe64, 0x70842) [ 2855.041307][ T6155] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 2855.441373][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2855.481377][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2855.561357][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2855.570996][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2855.821346][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2855.827597][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2855.836682][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.882194][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:40 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:40 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/32) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x4) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/213) 11:54:40 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x5, 0x3, 0x3, 0x1, "a0152c52d465fbbe5ccdaa61016a0a08b85cc900"}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x5, 0x8]) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/240) 11:54:40 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:40 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/133) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x53, 0x8001, 0xd3a2, {0x5, 0x3376}, {0x6, 0x7}, @rumble={0x1, 0x9}}) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000001c0)=""/103) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2c0, 0x440c0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000000c0)=""/22) [ 2856.091464][T22565] usb 3-1: USB disconnect, device number 103 11:54:40 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2856.142909][ T33] kauditd_printk_skb: 12 callbacks suppressed [ 2856.142924][ T33] audit: type=1800 audit(1625918080.911:1699): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14162 res=0 errno=0 11:54:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x4e9d, 0xa5b1, 0xffffff81, 0x10001, 0x7fff, 0xe0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/69) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:41 executing program 4: syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x4200) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/36) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/49) 11:54:41 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:41 executing program 5: syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x10, 0x80, [{{0x9, 0x4, 0x0, 0x2f, 0x1, 0x7, 0x1, 0x1f, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x2b, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1f, 0x9, 0x11}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x80, 0xff, 0x3, 0x20, 0x92}, 0x58, &(0x7f0000000080)={0x5, 0xf, 0x58, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc8, 0x9a, 0x5d, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x9, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x2, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "b5df9477dda762a4c8ae8153bb4e2fc7"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x5, 0x1e000, 0x9, [0x3f30, 0xff0000, 0x1feffc0, 0x0, 0xc00f]}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c62}}]}) syz_open_dev$evdev(&(0x7f0000000100), 0x13b2, 0x200b43) [ 2856.257335][ T33] audit: type=1800 audit(1625918080.911:1700): pid=14278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14195 res=0 errno=0 11:54:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000, 0x28e683) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2856.327907][ T33] audit: type=1800 audit(1625918080.911:1701): pid=14279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14209 res=0 errno=0 [ 2856.361481][ T33] audit: type=1800 audit(1625918080.941:1702): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14145 res=0 errno=0 [ 2856.383068][ T33] audit: type=1800 audit(1625918081.051:1703): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14002 res=0 errno=0 [ 2856.404723][ T33] audit: type=1800 audit(1625918081.071:1704): pid=14290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14162 res=0 errno=0 [ 2856.426469][ T33] audit: type=1800 audit(1625918081.091:1705): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14305 res=0 errno=0 [ 2856.488928][ T33] audit: type=1800 audit(1625918081.251:1706): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=13923 res=0 errno=0 [ 2856.621245][ T2628] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 2856.651608][T22565] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 2857.021253][ T2628] usb 6-1: config 1 interface 0 altsetting 47 endpoint 0x1 is Bulk; changing to Interrupt [ 2857.031236][ T2628] usb 6-1: config 1 interface 0 altsetting 47 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2857.044389][ T2628] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2857.081160][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2857.131337][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2857.231177][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2857.240874][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2857.521155][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2857.527417][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2857.536486][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.581866][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:42 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:42 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 11:54:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x102) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/158) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x4, 0x200, 0x81, 0x8, 0x3, 0x2}) 11:54:42 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:42 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/174) [ 2857.792918][ T6155] usb 3-1: USB disconnect, device number 104 11:54:42 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2857.858528][ T33] audit: type=1800 audit(1625918082.622:1707): pid=14325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14449 res=0 errno=0 11:54:42 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x803, 0x490001) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/183) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x10000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x81, 0x10000) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000240)=""/250) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000340)=""/250) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/113) 11:54:42 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:42 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xe65c3) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0x7, &(0x7f0000000000)="2f8a12c1a8475d"}) 11:54:42 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2857.958653][ T33] audit: type=1800 audit(1625918082.622:1708): pid=14328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14514 res=0 errno=0 [ 2858.241045][ T6155] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 2858.641202][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2858.691096][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2858.781063][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2858.790818][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2859.031034][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2859.037294][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2859.046377][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2859.091897][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x880) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000040)={0x3, 0x200, 0x9, 0x7, 0x6, 0x3ff}) 11:54:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/40) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x70c52ee5) syz_open_dev$evdev(0xfffffffffffffffc, 0x200, 0x18f843) 11:54:44 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:44 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000001c0)=""/4096) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000000), 0xb90000000, 0x2100) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/16) 11:54:44 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x8001, 0x2, 0x80000000, 0x8, 0x8000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/113) 11:54:44 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0xf, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2859.301536][ T6155] usb 3-1: USB disconnect, device number 105 11:54:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/18) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:44 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:44 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x200300) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f00000000c0)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x400000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/21) 11:54:44 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000001c0)=""/4096) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000000), 0xb90000000, 0x2100) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/16) 11:54:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/192) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x9) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x0, 0xe9]) 11:54:44 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9f26000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2859.491069][ T2628] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2859.500191][ T2628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 11:54:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfbfffffffffffffc, 0x8001) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1, 0xc, 0x1f, 0x9, 0xfffffcff, 0x8}) [ 2859.581292][ T2628] usb 6-1: can't set config #1, error -71 [ 2859.593656][ T2628] usb 6-1: USB disconnect, device number 49 11:54:44 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:44 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:44 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x3) 11:54:44 executing program 0: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/52) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/184) 11:54:44 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2859.821826][ T6155] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 2860.221034][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2860.260908][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2860.340982][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2860.350727][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2860.590934][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2860.597311][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2860.606375][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2860.651781][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:45 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x2, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:45 executing program 4: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000140)=""/137) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x12, 0x81, &(0x7f0000000000)="37aa9d45a706e13709632fc67e87e73e090d3cde0b8118a534fee8a87cf26b23ae9ab06dffb46767231c6168de2eec113107e921100a03a71049295e2e269c0db61f62bb2b2fe678537be9b54459a68f4767e117acc3ad9b063b8c1912c83072449f24d532a22fbe0ead7eeab3cb64d5202d9467d085046f2552a0523ece64a2a8"}) 11:54:45 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/18) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/31) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0xfffffffffffffffc, 0x294200) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f00000002c0)=""/74) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x5, 0x8, 0x80000001, 0x40, 0x6, 0x40b80}) write$char_usb(r2, &(0x7f0000000140)="75479d6debd2d8ad5b688e0ae96c0619d5f126204a9ea01e02fa530e7fa3646c5fdc8c58c624757dfd4063ec0fad040452e311886453ac36a692a87b7664a415644633209e87c0631f72", 0x4a) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x5, 0x1, 0xff, 0xffff, "faa47572742c7808149f8544a85b66e26542b89dd6daefdfeeffe5e17f3a0ccf"}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0xff, 0x6, {0xbf00, 0xa8f7}, {0x7, 0x40}, @cond=[{0x2, 0x8, 0x853, 0x4, 0x8002, 0x8000}, {0xfff9, 0x200, 0x7, 0x8, 0x5, 0x400}]}) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x10001, 0x200004) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000240)={0x4, 0x19, 0xfff7, 0x1, "ce5cda1e089cb6825b94c31a9e49716ecc0241a0b3257558057f1cec4bb12fd1"}) r5 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000340)={0x1, 0x9, 0x5, 0x3, 0xffffffff, 0x3}) 11:54:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1d9, 0x400800) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/57) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x5a, 0xd, 0x200, 0x71c, "41eb449ab1dadd934aac1a4392fd1063ba7eebb0d5d84b097ccb53b91479aa58"}) 11:54:45 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2860.871381][ T2628] usb 3-1: USB disconnect, device number 106 11:54:45 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x18981) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/153) 11:54:45 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x1) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x52, 0x7, 0xe6, {0x0, 0x5}, {0x3, 0x5}, @cond=[{0x8001, 0x7, 0x6, 0x3ff, 0x8, 0x8}, {0x7, 0x0, 0x5, 0x23, 0x9c92, 0x4}]}) 11:54:45 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:45 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa67c3) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/4096) 11:54:45 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2861.170299][ T33] kauditd_printk_skb: 24 callbacks suppressed [ 2861.170314][ T33] audit: type=1800 audit(1625918085.932:1733): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14775 res=0 errno=0 [ 2861.370779][ T2628] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 2861.770823][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2861.810855][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2861.890836][ T2628] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2861.900634][ T2628] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2862.140814][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2862.147017][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2862.156077][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2862.221584][ T2628] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:47 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x3, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:47 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x80) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/237) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000240)={0x15, 0x60, &(0x7f00000001c0)="ae396e043dbb3d07c13fe5e9e63fd8c300c50809881969e7886c829719506b3815622521f81abed00b4e8b4b4d1179d9d39ab66e9ce77c6fa043d453898d1367d8b6ba528e3543bcc52ce3dfe320e311cfc898d760068ea52a29ff7f08687c3b"}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x80000001, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/16) 11:54:47 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/47) 11:54:47 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x3) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20000) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x842) r2 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x4, 0x4a0140) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000012c0)=""/148) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000200)={{0x3, 0x1, 0x100, 0x2, 0x9, 0x4}, 0x144, [0x40, 0x40, 0x9, 0x3, 0x7f, 0xfffffffb, 0x3, 0x7ff, 0x1dff, 0x7, 0x9, 0xffffff00, 0x1, 0x9, 0x9, 0x5506, 0x2, 0x132, 0x1, 0x5, 0x8001, 0x7842, 0x10000, 0xffffffff, 0xac7, 0x7, 0x8, 0x2, 0x1, 0x9, 0x3, 0x400, 0x6, 0x6, 0x0, 0x4d1b, 0x2, 0x8, 0x1ff, 0x9, 0x5, 0x6, 0x4, 0x7fffffff, 0x1f, 0xa9fc, 0xd2, 0x3f, 0x3, 0x4, 0x1, 0x8, 0x9, 0x7, 0x9, 0x2, 0x59, 0x81, 0x2, 0x8, 0x400, 0x1200, 0xfff, 0x80000000, 0x40000, 0x6, 0x1, 0x0, 0x9, 0x8d0, 0x400, 0xff, 0x1, 0x3, 0x1, 0x4dc, 0x9, 0x5f, 0x1ff, 0x6, 0x3, 0x1, 0x4, 0x5, 0x10000, 0x400, 0x18000000, 0xd95b, 0x9, 0x2, 0xfffffffd, 0xffff, 0x8, 0x1000, 0x7, 0x4, 0x30, 0x3379, 0x40, 0x6, 0x0, 0x2, 0x6, 0x9, 0x7, 0x5, 0x1, 0x9, 0x100, 0x100, 0x0, 0x1ff, 0xe4, 0x2, 0x1, 0xffff, 0x1, 0x80, 0x6, 0x5, 0x2, 0x2, 0x83c3, 0x3, 0x1, 0x9, 0x0, 0x7f, 0x3, 0x0, 0x2, 0x81, 0x7f, 0x6, 0x5, 0x1, 0xf1, 0x4, 0x2, 0x2, 0x9, 0xffffffff, 0x6, 0x0, 0x100, 0x8, 0x3f, 0x800, 0x3, 0x2, 0x3, 0x5, 0xfffffff9, 0x1ff, 0x6, 0x400, 0x91db, 0x3f, 0x6, 0x2, 0x0, 0x1, 0x8001, 0x7, 0x8, 0x3ff, 0x59, 0x3, 0x80, 0x45, 0x3, 0x100, 0x0, 0x7, 0x2, 0x4380, 0x7, 0x4, 0x10001, 0xea, 0xffffffff, 0xd3ad, 0x2, 0x9, 0x7, 0x400, 0x7c68, 0x7ff, 0x8001, 0x5, 0x6, 0x7000000, 0xf3, 0x7, 0x5, 0x7, 0x3, 0x800, 0x7c, 0x846, 0xfffffff7, 0x1ff, 0x4, 0x2f, 0x8, 0x1ff, 0x8, 0x0, 0x3, 0x0, 0x5, 0x7f, 0x1, 0x9, 0xffffffff, 0x1e3d, 0x1, 0x81, 0x0, 0x2, 0x8b, 0x1, 0xff, 0x80000000, 0x58c, 0x1, 0x8, 0x1, 0x5, 0x7, 0x4, 0x2, 0x8, 0x7f, 0x5, 0xd0, 0x7, 0x1, 0x3, 0xec, 0x8, 0xfffffffe, 0xf7, 0x7, 0x73e, 0x7fff, 0x30, 0x1, 0x7bf4, 0x2, 0x7, 0x8000, 0x1, 0x8000, 0x3, 0x6, 0x9, 0x2, 0x401, 0x80, 0x758, 0xe6a7, 0x100, 0x93fc, 0x4425, 0x41, 0x80000000, 0x5f4, 0x3, 0x58, 0x7, 0x9, 0x1, 0xffff5617, 0x2, 0x3, 0x97d, 0x1, 0xffff, 0x101, 0x6, 0x6, 0x1, 0x0, 0x1, 0x7fff, 0x1000, 0x7, 0x1000, 0x0, 0x6cd6a35e, 0x8, 0x45, 0x40, 0x1f, 0x609, 0xfff, 0x9, 0x8, 0x6, 0x8000, 0x40, 0x1, 0x48, 0x6, 0xffffffe1, 0x0, 0x1, 0x0, 0xffffff2d, 0x1, 0x7fff, 0x401, 0x80000001, 0xb99, 0x5, 0x365e, 0x7fffffff, 0x4923, 0x7, 0x4, 0x8, 0x19c00, 0x387, 0x4, 0x7, 0x6, 0x800, 0x3, 0x84, 0x2, 0x3, 0x4, 0x7f, 0x5, 0xfff, 0x796, 0x200, 0x1, 0x0, 0x5, 0x40, 0x5, 0x1b33, 0x2, 0xffffffe1, 0x0, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x29, 0x3, 0x8, 0x3, 0x7694, 0x57, 0x6, 0x3, 0xffffffff, 0x0, 0x400000, 0x100, 0x4, 0xab58, 0x800, 0x7ff, 0x400, 0x8, 0x2, 0x5, 0x4, 0x5, 0x200, 0x2, 0x7, 0x4, 0x1, 0x4, 0x8, 0xb77b, 0x81, 0x3f3, 0xffffffff, 0x3, 0x2, 0x5, 0x7fffffff, 0x2, 0x2, 0x6, 0x0, 0x2861, 0x8, 0x1, 0x3, 0x4, 0x6, 0xbfaa, 0xfff, 0x2, 0x1, 0x9, 0x9, 0x0, 0x9, 0xa25, 0x4, 0x0, 0x4e6, 0x2, 0x400, 0x10000, 0x3, 0x8, 0x1, 0xcdd, 0x8, 0x800, 0x7fff, 0x80000001, 0x1, 0x1c00000, 0x1e, 0xff, 0x6000, 0x21, 0x7a2a3da4, 0x9, 0x200, 0x5, 0x1ff, 0x2, 0x7f, 0x60, 0x100, 0xffffffff, 0x0, 0x6, 0x100, 0x5, 0x0, 0x3, 0x6, 0x401, 0xff, 0xfffffffd, 0x1, 0x5, 0x8001, 0x0, 0x1, 0x80, 0x9, 0x338, 0xffff, 0x0, 0xf90d, 0xfffffffa, 0xffffff7b, 0xbac9, 0x8, 0x1, 0x40, 0x6, 0x10000, 0x8001, 0x9, 0x1, 0x80, 0x4, 0x401, 0x0, 0x1, 0x4, 0x3, 0x1, 0x0, 0x10000, 0x4, 0x80000000, 0x101, 0x7, 0xff, 0x8000, 0x400, 0x4, 0x768, 0xa8, 0xbe2f, 0x61b, 0x80000000, 0x400, 0x13e, 0x200, 0xde, 0x2, 0x3ff, 0x0, 0xc4b6, 0x6, 0x1ff, 0x87c, 0x80000001, 0xffff8001, 0x8, 0x2, 0x3f, 0x8, 0x1, 0xfff, 0x42bc, 0x4, 0x1f, 0x7, 0x6, 0x3, 0x6, 0xe17, 0x2, 0x48e5, 0x3f, 0x2, 0x80000000, 0x5, 0x1f, 0x40, 0x5, 0x8000, 0x7, 0x5, 0x20, 0xb51c, 0x4, 0x6, 0x1, 0x3, 0x6, 0x7ff, 0x8000, 0x461a, 0x5, 0xd9e, 0x6, 0x3ff, 0x7fe00000, 0x10001, 0x2, 0x0, 0x80, 0x3f, 0x1, 0x5, 0x6, 0x1000, 0xa24, 0x5, 0xadc, 0x1000, 0xa6, 0x5, 0x3, 0x3, 0x5, 0x2, 0x7, 0x80, 0xfffffff8, 0x6, 0x2, 0xffff, 0x2, 0x3, 0x627, 0x2, 0x1, 0x2, 0xcac000, 0x6, 0x0, 0x4, 0x7, 0x9, 0x80000001, 0x5, 0xff, 0x3, 0x400, 0x8, 0xfffffffd, 0x2, 0x7f, 0x9, 0x2, 0x1, 0xfff, 0xffffffff, 0x4, 0xc, 0x5bebe304, 0xfffffff7, 0x1, 0x8, 0x0, 0x0, 0x7f, 0x800, 0xc4fd, 0x5c51fff1, 0x714, 0x50c, 0x7, 0xfffffffc, 0x1, 0x101, 0x0, 0xfff, 0x3, 0xff, 0x7fffffff, 0x7ff, 0x4f3, 0x1000, 0x80000001, 0x2, 0x3, 0x5, 0xffffffff, 0x400, 0x8, 0xffffffff, 0xffffffff, 0x7fff, 0x7f, 0x400, 0x1ff, 0x1, 0x9, 0x8, 0x800, 0x4, 0x1ff, 0x1, 0x8, 0x9, 0x0, 0x380000, 0x3, 0x1000, 0x5, 0x47, 0xa02, 0x800, 0x4, 0x80000001, 0x6, 0x9, 0x40, 0xb5, 0x1, 0x100000, 0x609e, 0x10000, 0x6, 0x2, 0x6, 0x4, 0x5, 0x8001, 0x0, 0x1000, 0x2, 0x4, 0x2, 0x3ff, 0x0, 0xc2d, 0x6, 0x78d, 0x7f, 0x9, 0x3e9f, 0x0, 0xb1e1, 0x6, 0x400, 0xfff, 0x3, 0x4, 0x0, 0x0, 0x81, 0x3, 0x1, 0x9, 0xbb, 0x145, 0x7, 0x0, 0xf8bc, 0x2, 0x1, 0x8, 0x1f, 0x2f, 0x6, 0x8, 0xa9, 0x3, 0xf7, 0x1f, 0x0, 0x7f7, 0x6, 0x8e, 0x6, 0x3275, 0xfffffff8, 0x3, 0x0, 0x8, 0x0, 0xffff, 0x824, 0x0, 0x1, 0x1f, 0x7290, 0x4, 0x1, 0x9, 0x2, 0x7, 0x401, 0x5, 0x4, 0x6d, 0x0, 0x27, 0x2, 0x6, 0x80, 0x200, 0x5, 0x6, 0x1, 0x1, 0x4, 0x401, 0x1, 0x1, 0x1, 0x7, 0x60000, 0xfffffffb, 0x1, 0x28000, 0x10000, 0x0, 0xff80, 0x52, 0x8000, 0x5, 0x101, 0x7fffffff, 0x6, 0xbbab, 0x0, 0x2, 0x20, 0x2, 0x0, 0xffffff80, 0x9a3, 0x7c000000, 0x7, 0x9, 0x80000000, 0x9, 0x2, 0x7, 0x81, 0x8001, 0x0, 0x6, 0x406, 0x93c6, 0x5, 0xff, 0x7, 0x1, 0x2, 0x100, 0x0, 0x9, 0xfffffeff, 0x1ff, 0x3f, 0xc69, 0xffff, 0x5, 0x0, 0xfffffffd, 0x5a00f80a, 0x8c6, 0x7ff, 0x7, 0x101, 0x7, 0x4, 0x60, 0x1, 0x9, 0x8, 0xffff, 0x5, 0x1, 0xa, 0x1ff, 0x4, 0x8001, 0x0, 0x6, 0x68, 0x5, 0x6, 0x0, 0x1, 0x7fff, 0x9947, 0x3, 0x0, 0x3, 0x0, 0x401, 0x5, 0x8, 0x6, 0x10001, 0x200, 0x9, 0x3, 0x4, 0x8, 0xfffffe01, 0xffff, 0xff, 0x1, 0x2, 0x6, 0x3a0, 0x1, 0xfffffffb, 0xff, 0x4, 0xffffffff, 0x4, 0xfffffffd, 0x3, 0x7, 0xfffffffa, 0x6, 0x40, 0x3, 0x1, 0x10000, 0x6113, 0xfffffc01, 0xff, 0x3b, 0xffffc000, 0x436e, 0xdc8, 0x80000000, 0x892, 0x6, 0x1, 0x220000, 0x401, 0xaf, 0x40, 0x1, 0xbe7, 0x8, 0x10001, 0x7ff, 0x0, 0x100, 0xffff0001, 0x0, 0xd9, 0xf35, 0x7, 0xbc2f, 0x7, 0x4, 0x0, 0x1f0, 0x5, 0xe5, 0x80, 0xffffffff, 0x5, 0xff, 0x8000, 0x5, 0x0, 0x9, 0x3, 0x2, 0x7, 0x9, 0x77800000, 0x5, 0x3f, 0xfff, 0x80000000, 0xfff, 0x8, 0x40000, 0x100, 0x1, 0x6, 0x72, 0x4, 0x3, 0x1, 0x3, 0x2, 0x2, 0xcc9, 0x8, 0xfffffff8, 0x400, 0xefa6ec0d, 0x7, 0xfffff000, 0x8001, 0x4, 0x2, 0x1, 0x3ff, 0x81, 0x0, 0x401, 0x4, 0xce, 0x10000, 0x5, 0x10001, 0xc0, 0x0, 0xffffffff, 0x5, 0x8, 0x0, 0x100, 0x5, 0x2, 0x2, 0xefa, 0x5, 0x100, 0x0, 0x8, 0x1, 0x7ff, 0x5, 0x8000, 0x9, 0x8000, 0x1a71, 0xfffffff9, 0x3f, 0x7fff, 0x4, 0x7, 0xcc63, 0x5, 0x1, 0xc4f, 0x0, 0x8, 0x3, 0x81, 0x1, 0xc4, 0x10000, 0xa6ba, 0x4, 0x7, 0x0, 0x1ff, 0x800, 0x3, 0x2, 0x0, 0x8, 0x7, 0x1ff, 0x2, 0x5, 0x80000000, 0x7, 0x7, 0x5, 0x7fffffff, 0x100, 0x3, 0x6, 0x5, 0x71, 0x40, 0x10001, 0x5, 0x7, 0x9, 0xffff, 0x7, 0x1, 0x3]}) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) r4 = syz_open_dev$hiddev(&(0x7f0000001240), 0x8, 0x200040) ioctl$HIDIOCGFLAG(r4, 0x8004480e, &(0x7f0000001280)) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000080)=""/221) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0xf201) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x40, 0x0, 0x87b5, 0x2, "99f59f26078f28cdc5f23a6aad0a01d676b8dc3688768fbb0e8f9c9b4ec84389"}) 11:54:47 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffff000, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:47 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa67c3) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/4096) [ 2862.430338][ T6155] usb 3-1: USB disconnect, device number 107 [ 2862.510000][ T33] audit: type=1800 audit(1625918087.272:1734): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14828 res=0 errno=0 11:54:47 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0xa0000) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/141) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x101300) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000001c0)=""/238) 11:54:47 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x1) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x52, 0x7, 0xe6, {0x0, 0x5}, {0x3, 0x5}, @cond=[{0x8001, 0x7, 0x6, 0x3ff, 0x8, 0x8}, {0x7, 0x0, 0x5, 0x23, 0x9c92, 0x4}]}) [ 2862.579242][ T33] audit: type=1800 audit(1625918087.282:1735): pid=14481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14829 res=0 errno=0 11:54:47 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2400) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x4080) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/173) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/216) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/129) 11:54:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x17, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2862.671882][ T33] audit: type=1800 audit(1625918087.412:1736): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14812 res=0 errno=0 11:54:47 executing program 1: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x20, 0x10, 0x5d, {0x5d, 0x9, "fb5d48a01a09016eb201cedf450b70cac32c4286b99120b241dcd7f3113d873188fda84909cf7f2e4a162740212a29ff647f2dd154a7707417e1f463f86f27335bf9b2e9f730df825fbb916ed1ce1ae058bf8bf308845ea98c274e"}}, &(0x7f00000002c0)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "f7e6c46a2a36b52ec99c3a410489cb4d44220406aa29c20ad1d32b8c7b1a37e338493b4e511d55e4fd987ab1a6af5fe2c0bd4f5916038a138bd124570fa7e0b61d4c5f7f13da50255a6ea5f1822fe850cdd4c45698aed35e082a95617cf1518297f79df58e44e4446db62c3e57ef29a7c44de052a05a6afd2e73c070fbda81915af3bac108c656d5ce3d4e4ecb672c7c2f7c52d7e7597787cabe633e2f33"}}, &(0x7f0000000000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x4, 0x1, "57b2a486", "8ed5f940"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0xe6, 0x7, 0x1, 0x1ff, 0x5}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x40, 0x15, 0xd0, "ca3c831e296459aaa63f7221c780bafa313c3dc75c55f75ce82bc65272c05d5b51e1fdd43bf8a6e2e5c2960c6f870e37e0a4497cee153dfb0e3707291a3c49a039e2dedb828e180b0770735b941035ea2b215699dc8579ceaf843987e19fe07c94895668562df841614737aafa56ac7e8fbec2b709ecd9ac7045486d8b2d99287d97e3ae0c5e0b2923b3140ffc8f6558ba4a9227e37a97970eced32e0513eafced984320fde2440366e1cc4c78154a4154a77c9b65fe23f0b7dd8abb4da0f39737b847aa80c648f22c43655e7b56f425"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000540)={0x20, 0x0, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x40, 0x2}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000640)={0x40, 0xb, 0x2, "4703"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x73}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "82e9"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000840)={0x40, 0x21, 0x1}}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000940)) [ 2862.709818][ T33] audit: type=1800 audit(1625918087.442:1737): pid=14499 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14829 res=0 errno=0 [ 2862.746502][ T33] audit: type=1800 audit(1625918087.512:1738): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14812 res=0 errno=0 [ 2862.771034][ T2628] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2862.785383][ T33] audit: type=1800 audit(1625918087.542:1739): pid=14506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14830 res=0 errno=0 [ 2862.960649][ T6155] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 2863.071050][ T2628] usb 6-1: no configurations [ 2863.075647][ T2628] usb 6-1: can't read configurations, error -22 [ 2863.230651][ T2628] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2863.370732][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2863.411172][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2863.490718][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2863.500381][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2863.560668][ T2628] usb 6-1: no configurations [ 2863.565300][ T2628] usb 6-1: can't read configurations, error -22 [ 2863.571980][ T2628] usb usb6-port1: attempt power cycle [ 2863.780755][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2863.786998][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2863.796081][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.851548][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2863.990584][ T2628] usb 6-1: new high-speed USB device number 52 using dummy_hcd 11:54:48 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x4, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x523082) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x284240) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/101) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2864.061558][T22565] usb 3-1: USB disconnect, device number 108 [ 2864.104780][ T33] audit: type=1800 audit(1625918088.872:1740): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14827 res=0 errno=0 [ 2864.141123][ T2628] usb 6-1: no configurations [ 2864.145767][ T2628] usb 6-1: can't read configurations, error -22 [ 2864.300543][ T2628] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2864.430616][ T2628] usb 6-1: no configurations [ 2864.435222][ T2628] usb 6-1: can't read configurations, error -22 [ 2864.442556][ T2628] usb usb6-port1: unable to enumerate USB device [ 2864.480571][T22565] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 2864.950605][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2864.990632][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2865.070638][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2865.080287][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2865.330515][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2865.336722][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2865.345785][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2865.391401][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/169) 11:54:50 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:50 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000001, 0x8e483) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000001780)=""/4096) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000002c0)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:50 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x200000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2865.496986][ T33] audit: type=1800 audit(1625918090.262:1741): pid=14537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14832 res=0 errno=0 11:54:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000180)=""/187) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/244) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x7) [ 2865.528232][ T33] audit: type=1800 audit(1625918090.282:1742): pid=14538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14842 res=0 errno=0 11:54:50 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000000c0)) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x864c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1ff, 0x208100) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0xb6, &(0x7f00000002c0)="af38d99c1e067e8d92c16325a73c5161a7fa7a919f397de63c0428d5704be35ca7fe80abe232f4135968a13123dc889d94dc98d48985b8cc664f5d3cffd76c28954ea44e6c8b86fbb196bcabd997d7e6a2f15990d1df941eb78a0bbba6a8df7c007e1386e64196779dc27a26dfbc158e93834b91af89501ae7a617d4b161969aba207d9846bf1cf2ef64870cf73599b8ce2864ee0645aa4b10868d08e707ba85254f21e0e577f44b5df81af3c6df8340fce165dc4d35"}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/86) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000380)=""/224) 11:54:50 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0xa64c3) 11:54:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x1c7242) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:50 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x121100) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:50 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x5, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/176) [ 2865.660221][ T6155] usb 3-1: USB disconnect, device number 109 11:54:50 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x8000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001240)=""/16) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000011c0)=""/30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000001c0)=""/4096) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/7) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x8000) r3 = syz_open_dev$evdev(&(0x7f00000012c0), 0x9, 0x900) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000001300)=""/232) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000001280)=[0x200, 0x6]) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x9) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001200)=""/49) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0xffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x90000) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000140)=""/40) 11:54:50 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0xa64c3) 11:54:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2964c2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/71) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x200040) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000002c0)=""/213) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:50 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x30000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/195) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4b52, 0x100) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001200)=""/170) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x521100) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000140)=""/4096) 11:54:50 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/4096) 11:54:50 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x3, 0x4, 0x1, 0x2, 0x1}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/6) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/130) 11:54:50 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2200) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x40) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x8, 0x1d, 0x1, 0x8, "78e990dc9804a03b570ae178048af84325ab1d7db8a88b751e2bf7cc5a95c453"}) 11:54:50 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/209) 11:54:50 executing program 1: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x401, 0x100]) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x3, 0x93, &(0x7f00000002c0)="7e0a9638f6100dd772efba2cbd720b82a3c81d5eec129ffa1f79a56394f6bc89c65553bb9ab03805a1c5771e1004a96f611dd7d2d7ccf482f50b94a62a97c6bb30c085f1995db99863c4b6ed2158f2f202eafc246a2396199eb6956da2d9289a2ecf1a64b14ea02ad5a8fb40a754ab5ef9cc8f40af5321962b4cd738dbcd444478f275237672202993d4acb4bccc594986609a"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x400) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x101, 0x3ff]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2866.160389][ T6155] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 2866.560928][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2866.600414][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2866.690965][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2866.700680][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2866.940472][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2866.946691][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2866.955782][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2867.011016][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:52 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x6, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x40000) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x1f, 0x6, 0x10000, 0x6fb, 0x8, 0x1}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/44) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) 11:54:52 executing program 0: syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x10001) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x200) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000080)=""/190) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x84, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x101, 0x1274c3) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x25, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x10001) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x9, 0x630, 0x1, 0xfffffffd, 0x80000000, 0x8000}) 11:54:52 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x30000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/195) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:52 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x101, 0xe02cc2) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/156) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000002c0)=""/175) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x228001) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000140)=""/13) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000380)=""/201) [ 2867.220687][ T6155] usb 3-1: USB disconnect, device number 110 11:54:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x7, 0x1, 0xffff0000, 0x8, 0xff, 0xe1}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x440) [ 2867.295726][ T33] kauditd_printk_skb: 13 callbacks suppressed [ 2867.295741][ T33] audit: type=1800 audit(1625918092.062:1756): pid=14616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14869 res=0 errno=0 [ 2867.327668][ T33] audit: type=1800 audit(1625918092.072:1757): pid=14620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14871 res=0 errno=0 11:54:52 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000001, 0x80080) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/39) 11:54:52 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0x6d, &(0x7f0000000080)="9e283e56c6057ee9bf6033dcf76094a05dda748087eee7d010af31d6e5bcde28e01f28706b4d9a816a9ee4ef0b14971a2d84e0bfd0a3118b22746cd6c8dfeb1bcf0f42592d90b5da2fcf8c0f6921f1fff275686567748f9a8a60c456c7e3c57d0e9d1658560c48b8a610e764b6"}) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2, 0x2]) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:52 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x0, 0x9a, 0x7, {0xff, 0x4}, {0x8b69, 0x9}, @ramp={0x5, 0x400, {0x5, 0x20, 0x6, 0x3}}}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x5, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:52 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffb, 0x200) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x92) 11:54:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2867.430381][ T33] audit: type=1800 audit(1625918092.112:1758): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14856 res=0 errno=0 [ 2867.506351][ T33] audit: type=1800 audit(1625918092.252:1759): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14862 res=0 errno=0 [ 2867.559324][ T33] audit: type=1800 audit(1625918092.262:1760): pid=14638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14864 res=0 errno=0 [ 2867.591959][ T33] audit: type=1800 audit(1625918092.272:1761): pid=14639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14872 res=0 errno=0 [ 2867.613785][ T33] audit: type=1800 audit(1625918092.282:1762): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14875 res=0 errno=0 [ 2867.760265][ T6155] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 2868.160364][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2868.200274][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2868.290342][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2868.299984][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2868.540303][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2868.546543][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2868.555597][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.611056][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:53 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x7, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:53 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x1, 0x4b, {0x40, 0x401}, {0x400, 0x8}, @cond=[{0xffff, 0x6f, 0x8000, 0x7d, 0x58, 0x3d5c}, {0x6, 0x1, 0x0, 0x7, 0x7}]}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x9, 0x8]) 11:54:53 executing program 3: syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x10001) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x200) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000080)=""/190) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:53 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1, 0xff, 0x1000, 0xff, 0xaf37, 0x20}) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x3c55, 0x2]) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x6a0c2) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000002c0)=""/225) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:53 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000001, 0x40002) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/139) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/151) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x2, 0x86, 0x1000, 0x7ff, 0xfffffffb, 0x3}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0x2) 11:54:53 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x80202) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/4096) [ 2868.820793][ T6155] usb 3-1: USB disconnect, device number 111 11:54:53 executing program 5: syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x2, 0xca, 0x1, {0x22, 0x1df}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x1f}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xff, 0x3f, 0x81, 0x10, 0x7}, 0x1d, &(0x7f0000000080)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x3, 0x400}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x97, 0xfff8, 0x91}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x455}}]}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x484640) [ 2868.901929][ T33] audit: type=1800 audit(1625918093.672:1763): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14891 res=0 errno=0 11:54:53 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x6, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:53 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x9, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:53 executing program 0: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xef3a, 0xff]) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0xb0, &(0x7f0000000040)="10f43347a8391217f594a68339ad50f6f168a58b65f833d3b10e2c9b9daa5998ff12a14f294ed2ac10631c6af3b52d18cb5a999270fa30c92ef2d41f7fb3e0bc04a3389e369d313b8becd2ceb03a86a5a0923e26bd2e95fcf9ef3c1d929137450d1180ded6b16c6c7567ebbec4ae1c370524542ec0f5f7ece06dd3c39438197fa892b74efc1bde6744e5640980fc6fe68a604fd457d902927b4af1ac0d105e586d8b174044c0dbeb92a927e2988a23ce") syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:53 executing program 4: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x3, 0xffffffff, 0x1, 0x0, 0x5}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9b1) write$char_usb(r0, &(0x7f0000000000)="1de2f6d6b78f88c3fc20b44d474b810dcb45bca8a13bf8df59f6a0e2b5400fafb2e58d9adeb6595a4110bb3524f1b5107cf934a395c29cfc0eb1dd0b824971b72fbfb0bc1297697b703ad7b0cc4d34fa2922", 0x52) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2868.968881][ T33] audit: type=1800 audit(1625918093.672:1764): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14893 res=0 errno=0 11:54:53 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x1, 0x10000) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x10001) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:53 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x200000, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x5) [ 2869.078839][ T33] audit: type=1800 audit(1625918093.712:1765): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14894 res=0 errno=0 11:54:53 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0xa, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:53 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/220) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000001300)={0x2, 0x7, &(0x7f00000012c0)="e09514047a6808"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x40000) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000002c0)=""/4096) 11:54:53 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x1, 0xffffffff, 0x72d, 0x1, 0x3, 0x7}) 11:54:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/136) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:54 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x3, 0x50000) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/183) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2869.280365][T22565] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2869.360164][T23877] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 2869.440137][ T6155] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 2869.520086][T22565] usb 6-1: Using ep0 maxpacket: 16 [ 2869.810176][T23877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2869.850150][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2869.857870][T23877] usb 4-1: not running at top speed; connect to a high speed hub [ 2869.890165][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2869.910494][T22565] usb 6-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.40 [ 2869.919532][T22565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2869.927536][T22565] usb 6-1: Product: syz [ 2869.931734][T22565] usb 6-1: Manufacturer: syz [ 2869.936319][T22565] usb 6-1: SerialNumber: syz [ 2869.940244][T23877] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2869.950637][T23877] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2869.970304][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2869.979939][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 11:54:54 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x371a01) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x200, 0x20200) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x2, 0x2002) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000140)="bb231eb0c0eb8dbfdb0aa3e788663a66d2359def4fe9e3ed2cd333da0800000000000000f52b75d60c5b162896a4fccd67a31046c41ed915202b675d03d20cdcbf079d2c3e907e7e2bd51137b1660e19bc87d7e6c7ad7cde0182478dcd6db96446cf9cc9d2b9eee213a8cf65e7261ff3e493fef3e2014f4452d642a2761e39f3e5e5f2cb6164e981def28b91523b85715e3182da5f2370ee71a7c7283926659a22fb1999af89520a3054aaecda2ee64f91336eb06c0d2f39c12bd6") [ 2870.190089][T23877] usb 4-1: string descriptor 0 read error: -22 [ 2870.196535][T23877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2870.205693][T23877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2870.240239][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2870.248155][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2870.257484][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2870.271131][T23877] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2870.321087][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2870.460064][T22565] usbhid 6-1:1.0: can't add hid device: -71 [ 2870.466197][T22565] usbhid: probe of 6-1:1.0 failed with error -71 [ 2870.474595][T22565] usb 6-1: USB disconnect, device number 54 11:54:55 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x81, 0x387002) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x7) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b7543) 11:54:55 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/142) 11:54:55 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000001, 0x40002) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/139) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/151) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x2, 0x86, 0x1000, 0x7ff, 0xfffffffb, 0x3}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0x2) 11:54:55 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/220) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000001300)={0x2, 0x7, &(0x7f00000012c0)="e09514047a6808"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x40000) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000002c0)=""/4096) [ 2870.505492][ T6155] usb 4-1: USB disconnect, device number 114 11:54:55 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0xf, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:55 executing program 4: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/79) r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x200000) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000080)=ANY=[@ANYBLOB="71000100e4302f097797aeb7afce455a329c5edabf05009b2b10019f973e62180c188ddac1c4fc0ee2cab0e0c473023b28effd849b3ecbeffd697d66deadc62973811b7597c2fc0c98edbcf6adce38596587d2fd37f77aa15be2a7d5709ac94529c84c833103a7f61aac0eaa95cafc74349ace74d3"]) syz_open_dev$evdev(0xfffffffffffffffc, 0x15a4, 0x4cc000) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000001200)={0x2, 0x200, 0x5}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000180)) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x1, 0x5, 0x3ff, 0xb0, 0xc95}, 0xe9, [0x4, 0x8, 0x8001, 0x0, 0x2, 0x2, 0x7fff, 0xff, 0x5, 0x80, 0x6, 0x10001, 0x7, 0x20, 0x5, 0x7, 0x7, 0x82d, 0x1000, 0x2, 0x8, 0xffffb771, 0x0, 0x4aae, 0x8, 0xfffffffc, 0x5, 0x6, 0x401, 0x3, 0x9, 0x2, 0xffffffff, 0x38, 0xb7a, 0x1, 0xdf, 0x3, 0x6, 0x3f, 0x731, 0x4c963738, 0x4, 0x7fff, 0x7fffffff, 0xef6, 0x3, 0x7f, 0x8, 0x6, 0x2, 0x8001, 0x3, 0xffffa48b, 0x1ee, 0x334, 0x6, 0x1000, 0x4, 0x4, 0x22, 0x1000, 0x0, 0x1, 0x1, 0x4, 0x7, 0x8, 0x2, 0x206, 0x9, 0x5, 0xffffff81, 0x101, 0x3de9, 0x4, 0x2, 0x10000, 0x10000, 0x200, 0x0, 0x10000, 0x10001, 0x8000, 0x3, 0x7, 0x6, 0x46f, 0x8001, 0x7cf8, 0x2, 0xfffffffa, 0x6, 0x3ff, 0x6dc0, 0x2, 0x4f51, 0x7c3, 0xf1, 0x1, 0x6, 0x30000000, 0x0, 0x4, 0x100, 0x81, 0xb8800000, 0x9, 0x80000001, 0x48, 0x1000, 0xbe, 0x60a, 0x1d, 0x1f, 0x8, 0x7, 0x1ff, 0x1, 0x101, 0x1, 0x0, 0x4, 0x10000, 0x5, 0x6, 0xfffffff8, 0x8, 0x2, 0x4, 0x4, 0x1, 0x5, 0x80000001, 0x4, 0x1ff, 0x5, 0x8001, 0x1ff, 0x163, 0x0, 0x50, 0x7, 0x7fffffff, 0x3, 0x20, 0x6, 0x81, 0x7, 0x6, 0x3ff, 0x6c, 0x3, 0x800, 0x100, 0x1, 0x6, 0x4, 0x10000, 0x3f, 0x8, 0x2a, 0x8, 0x1800000, 0x6d3, 0x0, 0x8, 0x81, 0xfffffff7, 0xffffffe0, 0x1, 0x8, 0x7ff, 0x4, 0x5, 0x7, 0x0, 0xfc000000, 0x6, 0x1000, 0x3, 0xfffffffd, 0x6, 0x8001, 0x5, 0x3, 0x1ff, 0x9, 0x9, 0x200, 0xffffffff, 0xb3b, 0xff, 0x6, 0x7f, 0x0, 0x8, 0xa9f, 0x2, 0x6, 0x9, 0x4dd, 0x3, 0x1, 0x2, 0x200, 0x40, 0x6, 0x200, 0x2304, 0x80, 0x3f, 0xffffffff, 0xca54, 0x8e, 0x5, 0x1000, 0x2, 0xffffffff, 0x3, 0x0, 0x7ff, 0x1, 0x101, 0x1000, 0x40, 0x90, 0x3, 0x4, 0xffff, 0x7, 0x9, 0x101, 0x8, 0x6, 0xf101, 0x3, 0x4, 0x6, 0x1, 0x8, 0x1f, 0x8, 0x3a90, 0xf5, 0x401, 0x2, 0x101, 0x200, 0xffff, 0x9, 0x3, 0x3, 0x0, 0x8d2, 0x5, 0x1, 0xfffff832, 0x98, 0x3, 0x9, 0x8000, 0x1, 0x10001, 0x3ff, 0x4, 0x3000000, 0x4, 0x7, 0x95, 0x4, 0x8001, 0x2, 0x3ff, 0x3, 0x400, 0x7, 0xaeba, 0x2, 0x3, 0x7400, 0xfffff801, 0x16, 0xfb, 0x401, 0x10000, 0x2, 0x5, 0x7, 0x7, 0xffff7fff, 0xfffffff7, 0x0, 0x4, 0x10000, 0xc2c, 0x40, 0x7, 0x0, 0x1, 0x8000, 0x4, 0x6c1, 0x0, 0x1, 0x20, 0x0, 0x2, 0x5, 0x7fff, 0x6b6, 0x1, 0x3, 0x5, 0xc1, 0x3, 0x2, 0x2, 0x10000, 0x1, 0x1f, 0x6, 0x4, 0x76da, 0x7fffffff, 0x7, 0xda, 0x3, 0x6, 0x5, 0x8, 0xb35, 0x80, 0x8, 0x3ff, 0x3, 0x0, 0x0, 0x161, 0x6, 0x5, 0x1f, 0x5, 0x1f, 0x10001, 0x5, 0xfffffffb, 0x6, 0xffffff00, 0xc1f5, 0x6, 0x7, 0x1000, 0x2, 0x100, 0x9, 0x80000000, 0x62, 0x8, 0x9, 0x7, 0x6, 0x3f, 0x0, 0x7, 0x200, 0x5, 0x5, 0xffffffff, 0x3, 0x8, 0x9, 0x4, 0x426, 0xfffffeff, 0x5, 0xffff, 0x68f, 0xff, 0x7, 0x10001, 0x400, 0xffff8000, 0x6, 0x80000000, 0x4, 0x3f, 0x6, 0x7fff, 0x3f, 0x6, 0x9, 0x6, 0xbd5b, 0x7, 0xfffe, 0xffff7ede, 0x3, 0x6, 0x0, 0xd49, 0x80000, 0x103d, 0x7ff, 0x4, 0x338, 0xffffffff, 0xfffffff7, 0x80, 0xffffff80, 0x1, 0xa4, 0x1, 0x5, 0x0, 0x7fffffff, 0x2, 0x50, 0x1, 0x4, 0xffff, 0x100, 0x10000, 0xffffffff, 0x2, 0x5, 0x8a97, 0xfffffffd, 0x0, 0x9, 0x9, 0x1a, 0x10000, 0x10001, 0x18000000, 0x619, 0x7, 0x7f, 0x8f, 0x9e, 0x6, 0x4, 0x2ae9, 0x7, 0xffffff00, 0xff, 0x7fff, 0x7, 0x0, 0x7, 0x1ff, 0x1800000, 0x200, 0x4, 0x1000, 0x8, 0xa1f, 0x12c, 0xc4, 0x3, 0x100, 0x1ff, 0xffffff8d, 0x90, 0x800, 0x1, 0x9, 0x77, 0x0, 0x1ff, 0x8, 0xfff, 0x33a, 0x257b, 0x0, 0x1, 0x6, 0x2, 0xfff, 0x8, 0xfffff174, 0x3, 0x4, 0xec, 0x8, 0x1000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x8000, 0x1, 0x8000, 0xd4, 0x8, 0xff, 0x5, 0x101, 0x7, 0x9, 0x4b3, 0x6, 0x8001, 0x3, 0x67b8ba84, 0x0, 0x0, 0x2, 0x6, 0x4, 0x1ff, 0x8a, 0x100, 0x0, 0x80000001, 0x200, 0x80000000, 0x18c1, 0x5, 0x8000, 0x8000, 0x101, 0x2, 0xd4c, 0x10000, 0x925, 0x1, 0x1, 0x4, 0x7, 0x2, 0x5, 0x8, 0x89, 0x7f, 0xaf, 0x6, 0xac0, 0x1, 0x8, 0x31c, 0x7fffffff, 0x7, 0xffff0001, 0x7, 0x8, 0xcdc3, 0x100, 0x0, 0x3, 0x7fffffff, 0x9, 0x3, 0xfd, 0x8, 0x9, 0x0, 0x7f, 0x1, 0xfffffff7, 0x5, 0xfff, 0xfffffe00, 0xa4b, 0x3, 0x7, 0x7, 0x76, 0x8000, 0x7fff, 0x5, 0x10000, 0x20, 0xffffff01, 0x1, 0x5, 0x200, 0x20, 0x80000001, 0x100000, 0x3, 0xfffffff7, 0x81, 0x2, 0x100, 0x3, 0x8001, 0x3, 0x7f, 0x20, 0x79e8438, 0x4, 0x3, 0x6, 0x9fa, 0x6e7b, 0x0, 0x6, 0x9, 0x6, 0x7, 0x4, 0x64, 0x20, 0x6, 0x5, 0x7f, 0x5, 0x8, 0x2d5, 0x1f, 0xe83, 0x4, 0x7fffffff, 0x2, 0x4, 0x8, 0x7fff, 0x80, 0xfffffffd, 0x7, 0xfffff801, 0xffffff7f, 0x6, 0x6, 0x6, 0x3ffc00, 0x3, 0x2, 0x1000, 0x7, 0xf1bb, 0x2, 0x1, 0x0, 0xd20000, 0x7e1, 0x1, 0x3, 0x4, 0x5, 0x6, 0xaaa, 0x2, 0x5173, 0x5, 0xffff, 0x6, 0x8001, 0x3f, 0xce4d, 0x4, 0x81, 0x14, 0x1, 0x81, 0xf6385845, 0x327fd19d, 0x7, 0x5, 0xffff, 0x1, 0x101, 0x7, 0x1, 0x20, 0x2, 0x5, 0x80000001, 0x200, 0x4, 0x0, 0x1, 0x0, 0x4, 0x6c7, 0x80000001, 0x3, 0x2, 0x400, 0x80, 0xfffffffa, 0x3ff, 0x10c9, 0x1f, 0x1762, 0x2, 0x3, 0x0, 0x4, 0x99d, 0x934d, 0xe02, 0x1ff, 0x80, 0x7fff, 0x8, 0x14b, 0x6, 0x1, 0x8, 0x8000, 0x3f, 0x0, 0x9, 0x7, 0x40, 0x8, 0x575, 0x8, 0x736e, 0x3, 0x1, 0x3, 0x7506, 0x8, 0x8, 0x2, 0x2, 0x0, 0x5, 0x3, 0xfff, 0x1, 0x8, 0x3, 0x95c6, 0x8000, 0x8, 0x8, 0x3, 0x9, 0x0, 0x0, 0x7ff, 0xffffff00, 0x5, 0x7, 0x0, 0x9, 0xfffffff9, 0x4, 0x1f, 0xe7, 0x10001, 0x3dd9, 0x4, 0x84, 0xfffffffc, 0x3, 0x10001, 0x10000, 0x8001, 0x5b, 0x8000, 0xff, 0xfff, 0x38d, 0x0, 0x0, 0x80, 0x3, 0x80000001, 0x99c, 0x4, 0x9, 0xff, 0x6, 0x6, 0x6, 0x20, 0x8, 0x5, 0x7fff, 0x4, 0x7ff, 0x9, 0x4, 0x80000000, 0xcd7, 0x2, 0x8, 0x3, 0x1ff, 0x3, 0x10000, 0x40, 0x9, 0x78, 0x6, 0x1ff, 0xa46, 0x7, 0x7, 0x82, 0xa4, 0x401, 0x5, 0x0, 0x395, 0x20, 0x4, 0x1000, 0x6, 0x9, 0x8, 0x5, 0x800, 0xffffffff, 0x2, 0xc00, 0x6, 0x6, 0x7ff, 0xa6, 0x5, 0x1, 0xff, 0x3, 0x9, 0x81, 0x3, 0x1, 0x9, 0x4, 0xffff0000, 0x4, 0x0, 0x8001, 0x7f, 0x86da, 0x0, 0x80, 0x4, 0x9, 0x80000001, 0x1c000000, 0x5, 0x3, 0x401, 0x3b, 0x7fff, 0xff, 0x5, 0x7fffffff, 0x2, 0x800, 0x10001, 0x80, 0x9, 0x7, 0x9, 0x9, 0x82, 0x3, 0x100, 0x8, 0x7f, 0x7, 0x3, 0x5, 0x6, 0x81, 0x3f, 0x0, 0x1060, 0x3915c68c, 0x1000, 0x0, 0x0, 0x7fff, 0xba91, 0x10000, 0x3d, 0x6, 0x7fff, 0x5, 0x2, 0x4, 0x8, 0x2, 0x9, 0xd20, 0x4, 0x3, 0xffff, 0x1, 0x4, 0x7, 0xe72f, 0x0, 0x0, 0x7fffffff, 0x6, 0x7, 0x1599, 0x1, 0x7, 0x2, 0xfffffff8, 0x8, 0xe0, 0x7b90, 0x3, 0x10000, 0x6, 0x6a, 0x2, 0xffff9f44, 0x7, 0x2, 0x1, 0x8, 0x8, 0xfffffff9, 0x6, 0x5, 0x2, 0x77, 0x6, 0x2, 0x6, 0x81, 0x400000, 0x20, 0x100, 0x1ff, 0x3, 0x807, 0x101, 0x1, 0x1ff, 0x7, 0x8b2c, 0x4, 0x3, 0x2, 0x5, 0x8, 0xfff, 0x6, 0x4, 0x1, 0x101, 0xfffffff9, 0x2, 0x2, 0x970, 0x7, 0x20, 0x3, 0x4, 0xe2, 0x1, 0x3, 0x2e, 0x1dd4, 0x400, 0xff, 0xd59c, 0x100, 0x6, 0x9, 0x5de1, 0x5, 0x7f, 0xffff, 0xffffff12, 0x1f, 0x8, 0xffff0001, 0x6, 0xfffffffc, 0xffffffff, 0x80000001, 0x200, 0x4, 0x8b, 0x9, 0x54, 0x100, 0x7fffffff, 0x7, 0x4, 0xfffffff8, 0x9, 0x2, 0x1, 0x1f, 0x364, 0x2, 0x1000, 0x2, 0x71, 0x4, 0x45a602d3, 0x1, 0xbdb2, 0x324d, 0x1, 0x3, 0x6, 0x9, 0x10001, 0x1, 0x272, 0xd11, 0xfff, 0x6, 0x7fff, 0x9, 0x6, 0x5, 0x3, 0xfffffe01, 0x8000, 0x1000, 0x7f, 0xc6, 0x9, 0x3, 0x5]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x600) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x600000) [ 2870.586419][T23877] usb 3-1: USB disconnect, device number 112 11:54:55 executing program 0: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/7) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) syz_open_dev$evdev(&(0x7f0000000000), 0x6f03, 0x20180) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x0, 0x9a, 0x7, {0xff, 0x4}, {0x8b69, 0x9}, @ramp={0x5, 0x400, {0x5, 0x20, 0x6, 0x3}}}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x5, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)=""/82) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x4, 0x40]) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x2, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x18, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:55 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0x6d, &(0x7f0000000080)="9e283e56c6057ee9bf6033dcf76094a05dda748087eee7d010af31d6e5bcde28e01f28706b4d9a816a9ee4ef0b14971a2d84e0bfd0a3118b22746cd6c8dfeb1bcf0f42592d90b5da2fcf8c0f6921f1fff275686567748f9a8a60c456c7e3c57d0e9d1658560c48b8a610e764b6"}) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2, 0x2]) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/229) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000, 0xc00) syz_open_dev$evdev(&(0x7f0000000000), 0x80da, 0x1d9ac0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x438002) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/101) syz_open_dev$evdev(0xfffffffffffffffc, 0xac, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffff801, 0x400) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000080)={0x100000, 0x3, 0x4075e918, 0x3f, 0x5, 0x7}) 11:54:55 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x2001) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x2401) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/149) 11:54:55 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x800000, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffff7, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x800) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x11, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8000000000009, 0x1958c0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x82) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000001a780)=""/102400) 11:54:55 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/162) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:54:55 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffff6, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/15) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x7f150dd2, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x1000, &(0x7f0000000380)="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"}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/231) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000001380)=""/79) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x5, 0x84]) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000002c0)=""/185) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:55 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2871.129984][T22565] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 2871.550007][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2871.589985][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2871.670049][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2871.679784][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2871.919980][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2871.926271][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2871.935321][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2871.983053][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:56 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xa1, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/109) 11:54:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x3) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/4096) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x8b, 0x1d, 0x2, 0x665, "f310cb5dfcd530c40f2f205adc75761239be3937ab2f230572f33130bb407504"}) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) 11:54:56 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x7, 0x14, 0x9, 0x6, "4786652a1c7d83f8d2fccd837d75381d14a3783e547cacef045b07124213e2ed"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x5, 0x7, 0x8, 0x401, 0x1ff, 0x101}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/13) 11:54:56 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0xa64c3) 11:54:56 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x1d, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:56 executing program 3: syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) [ 2872.190258][T22565] usb 3-1: USB disconnect, device number 113 11:54:57 executing program 1: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000002c0)=ANY=[@ANYBLOB="4e00000058260fb007708631f8ae71414b56d17b063479105f9255f55188c1b5b2c59bdd040d3f2b787753660fb3213dd4c2bd7500f0aac5f73c8a79b3bc0b994abbd98266035513e80a503df73d444cfefbbef3e1d030d2526c6384fe2d48aab3d6f950c967d9abffdee1435ba8979fa54e09653e0a2f34346b768fe83fc20b60697ea0f27a1b7870cd3718cb3823ebf10fdc99"]) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:57 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x7, 0x14, 0x9, 0x6, "4786652a1c7d83f8d2fccd837d75381d14a3783e547cacef045b07124213e2ed"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x5, 0x7, 0x8, 0x401, 0x1ff, 0x101}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/13) 11:54:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0xa64c3) 11:54:57 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/4096) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001000)=""/195) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001140)={0x57, 0xfff, 0xfff, {0xa0}, {0x401, 0x8001}, @period={0x59, 0x8001, 0x2, 0x2, 0x357, {0xfeff, 0x7fff, 0x7, 0x3}, 0x3, &(0x7f0000001100)=[0x9, 0x8000, 0x7fff]}}) 11:54:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xa1, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/109) 11:54:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1ff, 0x8082) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/139) syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x80) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x401, 0x9]) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000002c0)=""/29) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x11, 0x4000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000300)=""/23) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000001c0)=""/164) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x7f, 0x20000) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000380)=""/56) [ 2872.416010][ T33] kauditd_printk_skb: 30 callbacks suppressed [ 2872.416025][ T33] audit: type=1800 audit(1625918097.183:1796): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14961 res=0 errno=0 11:54:57 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x800, 0x5, 0x1, 0x8, 0x500, 0x9}) 11:54:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0xa64c3) 11:54:57 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffe1, 0x4c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8001, 0x82402) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/244) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x37, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x81, 0x600100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000140)={0x2, 0x3, 0x8}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x10001, 0x20942) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x40000, 0xeeee, 0x3, 0x4f5dbdd8, 0xfffffff8, 0x7}) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/4) [ 2872.544025][ T33] audit: type=1800 audit(1625918097.183:1797): pid=14840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14977 res=0 errno=0 [ 2872.634448][ T33] audit: type=1800 audit(1625918097.223:1798): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14922 res=0 errno=0 [ 2872.689873][T22565] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 2872.704387][ T33] audit: type=1800 audit(1625918097.233:1799): pid=14841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14924 res=0 errno=0 [ 2872.727116][ T33] audit: type=1800 audit(1625918097.233:1800): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14903 res=0 errno=0 [ 2872.748796][ T33] audit: type=1800 audit(1625918097.323:1801): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14920 res=0 errno=0 [ 2872.770232][ T33] audit: type=1800 audit(1625918097.343:1802): pid=14847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14921 res=0 errno=0 [ 2872.791671][ T33] audit: type=1800 audit(1625918097.343:1803): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14922 res=0 errno=0 [ 2872.813113][ T33] audit: type=1800 audit(1625918097.423:1804): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14916 res=0 errno=0 [ 2873.129826][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2873.169924][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2873.249888][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2873.259649][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2873.499856][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2873.506086][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2873.515199][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.562902][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 11:54:58 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:58 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0xf, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:58 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x105302) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000001040)={0x0, 0x0, 0x1, 0x7, 0x89, 0x8000}) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001080)=""/127) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/4096) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000001000)=0xd76) 11:54:58 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0xa64c3) 11:54:58 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0xa64c3) 11:54:58 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2873.771151][T22565] usb 3-1: USB disconnect, device number 114 [ 2873.839310][ T33] audit: type=1800 audit(1625918098.603:1805): pid=14874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15233 res=0 errno=0 11:54:58 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x1d, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:54:58 executing program 0: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/5) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x101200) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x402) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:58 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x14000) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/245) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x440002) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000001c0)=0x5) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000240)=""/73) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x400000) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000002c0)=""/138) r4 = syz_open_dev$hiddev(&(0x7f0000000200), 0xa1c8, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000380)={0x2, 0x200, 0x3}) 11:54:58 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/92) 11:54:58 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:54:58 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2874.129849][ T2628] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 2874.249722][T23877] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 2874.299754][T22565] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 2874.579785][ T2628] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2874.619841][ T2628] usb 4-1: not running at top speed; connect to a high speed hub [ 2874.670194][T23877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2874.699858][ T2628] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2874.710156][ T2628] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2874.729879][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2874.730302][T23877] usb 6-1: not running at top speed; connect to a high speed hub [ 2874.769880][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2874.819731][T23877] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2874.829376][T23877] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2874.849860][T22565] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2874.859529][T22565] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2874.949738][ T2628] usb 4-1: string descriptor 0 read error: -22 [ 2874.956140][ T2628] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2874.965256][ T2628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.099662][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2875.106039][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2875.109745][T23877] usb 6-1: string descriptor 0 read error: -22 [ 2875.115155][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.121783][T23877] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2875.138255][T23877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.173320][T22565] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2875.191804][T23877] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 2875.225939][T22565] usb 4-1: USB disconnect, device number 115 11:55:00 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:00 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4007, 0x414400) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x1a55c1) 11:55:00 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x337480) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000080)={0x7f, 0xfa, 0x1000, 0x4}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x52, 0x6, 0xfff7, {0x9, 0x81}, {}, @ramp={0x2, 0x5, {0xaa, 0xb7, 0x9f0, 0x3}}}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0xa64c3) 11:55:00 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x16, 0xffffffffffffff53, 0x0}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/237) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2875.383812][ T2628] usb 3-1: USB disconnect, device number 115 11:55:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0xc, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:00 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0xb, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x20000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/171) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x200100) [ 2875.517132][T23877] usb 6-1: USB disconnect, device number 55 11:55:00 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000300)={0x9, 0x7fff, 0x8000, 0xffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/37) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000002c0)={0x14, 0xde, &(0x7f0000000080)="c315fc5bd5fed8fe4dbe4e6c4e03141cab11bf7bf26377349d349330aa6a85ff86f13929ab3a02d60127981403bc9c4d05f05ef85cf1746137156550b24b00637c7102bad629646f0445a42e3e129cf04cd5a8efb223559108ffb9dd9ed62f181a11039a2c60cf897df1aef6b94b2ec6f25eed39dface16cb4d1598192dc214174f54a5eb44e7789b82b119dff635a64993ce3634d8fc09c7dbf78eef1ee8b5f35aa35fbdc0942bdcb2a99b3c140eaf130d5447bac3d574f97af0e47c9ce744e6f85521626adfb5d9d3ceca295b9e2e92b70162125eba4bdbb03d789f7ca"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:00 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:00 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:00 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2a64c2) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000100)=""/54) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/169) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/110) 11:55:00 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x103040) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:00 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0xd64c1) 11:55:00 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40200) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x12, 0x0, &(0x7f0000000080)}) 11:55:00 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/198) 11:55:00 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2875.890170][ T6155] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 2875.949605][ T2628] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 2875.959791][T28469] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 2876.009615][T23877] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 2876.349657][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2876.389663][ T6155] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2876.390245][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2876.398026][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2876.449618][T23877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2876.457369][ T6155] usb 1-1: not running at top speed; connect to a high speed hub [ 2876.489726][ T2628] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2876.499368][ T2628] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2876.500373][T23877] usb 6-1: not running at top speed; connect to a high speed hub [ 2876.549608][ T6155] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2876.559865][ T6155] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2876.599786][T23877] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2876.609886][T23877] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2876.659570][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2876.665774][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2876.674932][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2876.720241][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2876.809657][ T6155] usb 1-1: string descriptor 0 read error: -22 [ 2876.815912][ T6155] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2876.825007][ T6155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2876.829569][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2876.840480][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2876.849583][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2876.849638][T23877] usb 6-1: string descriptor 0 read error: -22 [ 2876.866001][T23877] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2876.875193][T23877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2876.910713][ T2628] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2876.947471][T23877] usb 4-1: USB disconnect, device number 116 11:55:01 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2877.092068][ T6155] usb 1-1: USB disconnect, device number 65 11:55:01 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0xb, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:01 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0xdffffffffffffffc, 0x1f816486f7bc2e90) 11:55:01 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1008, 0x2b2c42) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x472042) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x1, 0x200001) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000080)={0x11, 0x2, 0x3ec}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x17, 0xfd, &(0x7f00000002c0)="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"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000003c0)=""/172) 11:55:01 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:01 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:01 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2877.154167][ T2628] usb 3-1: USB disconnect, device number 116 [ 2877.190612][T22565] usb 6-1: USB disconnect, device number 56 11:55:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x20000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/168) syz_open_dev$evdev(0xfffffffffffffffc, 0x8009, 0xe64c3) 11:55:02 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x3ee, 0x800) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x6, 0x400001) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001380)={0x52, 0x20, 0xfff7, {0x400, 0xadec}, {0x6}, @const={0x9, {0xccc0, 0x4, 0x0, 0x40}}}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000001400)=0x80000000) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000013c0)={0xffff, 0xfffffe00, 0x5, 0x4, 0x10000, 0x1}) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/21) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000080)=""/77) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001300)=""/87) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x71) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:02 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x2, 0x7, 0x1, 0xfffffffc, 0x200, 0x8}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x95bd, 0x84400) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)) 11:55:02 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:02 executing program 4: read$char_usb(0xffffffffffffffff, &(0x7f0000001040)=""/126, 0x7e) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x480) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0xa6643) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000010c0)=""/4096) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002180), 0x5b, 0x40040) r2 = syz_open_dev$evdev(&(0x7f0000002200), 0x7, 0x28400) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000002240)=""/125) syz_open_dev$hidraw(&(0x7f00000021c0), 0x8, 0x220000) write$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000020c0)=""/143) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001000)={0x15, 0x1000, &(0x7f0000000000)="7b2ccf42a9a7cde4459a5c2feb0e047b35ef8e43972f3cc7b5eba19a5813969d1484490dea83a94ddc456724c612df6f206e48a186b43f34ab5f6678425b4717ce2bb36aec58221cfc8f4a1845a1d17582658a9d53975335cc2dac133bc55fcae11eaa08a6d29767b3918802a0e3989909bb99f31591e9a375356b8ab0c85dd083825cf948c1dca4db16bba63b0715a52407da4d4302446b5c9364306d4facb634250cd88e1f5678c8423999bc37843d49ed1f3e7e8e0c922a6a4c68f6fb2bf73884781414e61c321e39d6c730e083531486002f320f9bf923c8ed0ff8e28ce4f095b0c0a28dfc282dc6514c6949a04cb59a3aff92ac5e7e2b02ab857ad69a656a83aad294d221b9211fecf01bc889f4a33ac183c1737c449d5588bcecffab7af4ec906113ffd84ccbd32003071eb751d85b0d9958233302df678f697c91faa09574ecd2d74ff0e6fbb7ceb58cba79751b52715275c56d283adc5db69efff0d615a26cd4dee8aa72de64dfaf73d1d5a49c2d214b152bd8cb5dbca164eae3722fcc4c8e88fd9b4f221362bc8b56484398f2027932169e19a32c3fe05e2722c715d39f7c5eba931df43dba9a5249d5ffc97da509f20c4119e0c5838f7e447b8f10fe1f2baf224c05cd46362099a295ca035f3bdc0707bbe601a69f29891c1b5e3e347b0085e9da712777329906b45e1e2f9294a6203b8482f560563f90970dd59f2230f55c1fe8f766cba4787cfa5841f3a4c3ba43b708db51c3525e3663f1758582deeb5d909816be9e806a9b10b086c95ee17b95517272cba73b7ae1974546904db830eab858ee19561878a133358219aa8d9d74056e9a4b46b034b9be5a4af5a2eb951bfa43a9b2c3960c48c5a37b26c6a3e603031ab0605e80fe38c30a6eea29e53b0bcebf79b510c4e06877ca53939d15ee143d3ccffa8279daffe69e6012c3a56c658b39bb163276582500f9984a7b5e3dd0f50ec8ea22eacdd618a9a0e0e828aeb0c5a3a8cd724d862f61dd1499cb971240400cf07a03b1c1d16100664e85bc3424c9e360c1176245649032c183450ec843882d46cebadc630756601552549e6d354092fd4a389af0fcc71b4a1f8d426e74ea2b7b21d1180c6e77254f7a781cd7cf29d33bf98b9a198f16e7458a0c830e1d6c2b923a868b90637d9c95765e0ea11d234e9aa092f988e42b3792fc2a88b8c39717d71a1c029ef377ce9bed9d546031462727bb6a33a05081474fee2f646e568e768847074c52f848701d6f125605fa03db677c337e8306567a5b4746367f932f02c1581c9f2e5df9716be8088ae7c6632e23cab2502e66b95f137b6435f8e22bf862f5f28f2cf725f1cfadede8321bb9a080a74f019a40a7ee4d3c0e0973c4db9d6e068914b27112d40ce1e6591f10db8f2e03dcc03c1819a4985850feef4ac3e2868c01f8c16d8758479423c26c83d7a6228488542facdc552992f85e9179765973c2cec7183577572c483eb8f190c1eff9c158f1b2af044229afb55424df8a10d5e198b42336ab752579050d08f7f8de520a6c209244c29bcb270b042fdda2a543fbf6d28920f100d6b42c20e4d7ab8f7da3be957e984bb9c13fb05798183a2178eb0ec9690442f7cdd1cc1ac1feefa43426c872e762a8ce397c518deb566c75a70eb8ae5f1b4b9d0aa9ff762137ec1d1c1771944061937c8b1575a5feec34fe79697be70aecc10454b667f950f226d4ab258cffd8f29ba0179551d3ec35366a00de274d3a5d4b16d876214915428354537eca6a7c293b6567a9f6d56e5d4dab8ab17db7bf22b679b75cfebd647a847ff9b902591dc1661fa3c2f3609362929f91446f562a47567c3512bba60e571d1f26e51055f77a128cf1f7e051f9319cb169fc731ac213af6b90ae6ce979edc2ead1ed43de19b4686cf96b88ce5191243fac0de7cf27e8a5d7ee20c679396f709ff07c95e7ce513b3c1f64f69b94ce0326b04ebccb04f6be9b333a5c8827c1ec761b0485275880eb8781da54da382e2982debbb258d665fe3d45988af2ab0fa407153a0740928b53dd993531b839b94ec338391a0f87b8302e692969d6d745135cbae49c1c378c3411f2841ad550df68af1cb272def72063b80f2aeb56cdef119de6345dab5490d7a65d1fada0dc454544ad6f1df8c8769ba64e6f34dd9bd28b70763c02ab1e7982caf51b91f69f8f72e674ec482f5142b335cd90ab257c4d021246e0460997d235a4b9431b2e6ae9f58c25b0f9c3c6094e1e6dd8510062d4c1cbb446bcb032dcb848c3e0ad5b343dd04977d3e6054ba10daf011c2ef552283746c33561167b043dcf6ae67e58f3b0c9e362bf43ad1d46a868855e1ce82b55befce809406e7a0938e84be88e8168b2d1c157b4b9a95d04f6110187e75dd1310c7c8d4adb459d9801ca65509cbad04eb5e8020c0c9160848b2a92c6551690e548cc67f7ce98a8d371f26e1a8101ee12678c47c8ad06207a8302e3bf9fdbd33f849dd6e4255a41a0ee9c3460b8d7ac3a64b9ac9fe2bdc6a02de24f5d95cfd8c962625c1e045e5a5bf327bbc41532cad0d104daf1230c98e07dd7805c14e2e9c6641d0c00eb2122ece3caca1e63975bb3b702f16e2e8066e2e80e1bda8d3171ed3e480bef1a75ed016fb6c863adc05daf804b7d31fe7bd3e9556fa4c19d12d5b9bcc902792d03c7b1c1b072f47dc157e4c7c88b338b8c5ed28173e1268c8caf10d0efc873143a282fd29a5f65b01519c80727f95b2303812974c896b7d2086e2b9da3af9b92d35ec670f07d895638eef671b989741a032d4370f0ea2ccad62940eea56598f4dae29cc0ab8e8961e9e5930bf91b23c2d28e676fa52ccaa3a8c3da888291cdf006870c0105dc3899d80afdc26359893cfbbf40de3434bf5364e651417af3b3df7548197dc7178115cf89278c9b9b762d8c178a8a5d50259aec78dd2c8be8770e5b98cdf1705c9b3164c1527580d07edfe34185a5f2f4b67431866c519e374e1982113e88452dc87b6a76b731ebb729e8e3ec88a8be26fc414892e820f6877fdd1cf555b34b8a35b83da2489f30b54ba97e467ae78e411e19fa0f5af70ea9d23c225e93763ab7fd55f676a49cf6a0c137da44774e3f72b16512eada94bb6eb50c55df397237a9441306453f74147695a0de746b76710cab7ea960263d35efeb8b96076b12dbd66885bd87f3235164a84611208b04450aaa718d3fa390f4025b923cdbc64fba8dbb4b0b5b959cdf374a764e0a7e1e038cc3966b0a17794fae34ceda94c10a4485d17a23b29b3a4487004540fad443108d6c98a5b5d1f3f492690fd65f897cf877d12789fedf6a7454967e2fd51cd0d52ffb7705a445ef4b65f6d820833021da53ac8e216beb26fd3d190cdf233f20d8a2c3985333d9198e0abb87423edfb063823b2f0b1863edfbe8ab8b76fc732d34a89e17a1030665ac31a06ccb6a2a45b2ada4b574adc75de87cd852a20546a19114442ec6e4b5eda8e6bb3724dcb42d17a32071c2c26b2611ed6c31df3e35a916f94656e9c00108778ea399678f351ce9658a6dd68e28efc9687a78e96888def40163f535cd57e3ecc579e36e41f32563abbac08a5646cb8950265e13664f8fe57260c3ba37f8394b7bca1dd4147b6e9b8ce3fb85627bd003c4c838fb1d05b1f4714fa8a464a1419fdd7bdb27dcbb80d199ef567d39c1cb0e17543c9d3dce2ea9c31b7aeb638662fb41459d063bd721ac0ec9d4810366a848d4a2f198616264569aa7107573ad6519b11d8f54f8a106375ab893217ac074b40438479fcdc83d00891d27a7e945efd672f6062444eee389cfda03d9f37987362a1183ae50101c396822d63be1fe659437955a64e18e8ccf5a90aea57d16a0a4d1ce9e23ad84725414e46903abe261ae90cb892635f280334cb284f8315f32bec33722e0e277c45d077e847c308536989ba49dd67ddec295f2565a6cda6a4d83adfc5328e58f32981510ccab65ea02393e5c7c3e4dd887382a856709f9ac0cafe11ba892408aec7b460b8c5cab9fb0c0ee4f5e3f6630e0885df60c2f9788f2a648238dfbb3e0018a7c0b7d9521c9b5ce6aa99118648c89bc640e27d58000669946b893a88459daae70a435de987cb5567da27c865a6ba6e92814cbc311adf1ed1af65d8a293cb194a4f35e48f36eb4071e130ea7284ac1b5d2b0a6268753b9436df126dc4114c4138546dfa71ee3c5ec2c033107de72ea70e6f643412607fba3ae44757ea301662f92f2e3e27e96a4ab605910dc035de7f49043f0826799de4a591c418699622628d2635388ff970c645f30028d0a27297102bcf331438d6eb370ee47a21d1e70d7da201d3e21c712333ee4202fdc13a7d6b886d38f168cfcefa66f3cbb73f6ef817f806e270b02239a537b8338c85d735105b3e21a849b68183a6639c6c74525e2eb522cda877a74b81f2b92ceefd844ac443d96d3dcec5305f4c8bdf768f372fc1c28c95ecdb94be163638da823f3f567926c2997596980791eb59e9a8b0b601838d1b83064524ccf68f51e3a45a90e4b84fa719709be7dcc5c5ab14b7656f384d04c9c09ace94ffb880af762b363c1d2dd59c7e20dc72c998f1e9c936942c98518f76cb7ee8c21adc13d996d1faa39c1e725145ea2f34ba9e3a8f8dda5405d7111b7ebd9c756705141604186747debf502d63d470187cd3675e3de539d27619294d9f7d430a922a648cb522830aaeeca6789c69b54c26ce402dc08cdb34f68bbbb21897f71783a8dbb2f9671adf42a3b330379a0873ec1e6d2755b66af8cbb7ad08a3012a0bb3404bcd83db6a58adb173946be0645d5fd22b47354785e227159bd11e8fbbede26926271060bd0ef2c9c818332c30ada692dfd0cf5cd330f6e3b721fc8d53709296ec97df505cb6c94bd0f45014fb857f994f2f6f1d11a46338a56018f9261be8de775ed7316d700125893f8221c09138395b41cb37cbc8e12317712375f5fc31eaa3c0ba4f6fe102cf299e3bb7d64e0793ba31fc7c2aad03fddb5466d07cd57fa69bdf150202867f62f22b8de722c819add42673c829a3991713ce27d5b2bc674f93aa7eabcc588984789d81a1edc2b4dd0eabd49f62997d980bd4b6c4532f96dcd3d12b90c2a9b44f8feaba4f11850c294aafdb530d3d41dfc9f868b793793a22017d502668dd8febe37c3bc74a00e6ea4f2047b5bd51562b5385684dfcd58093c07d4a2318b06f82adf90a0fe88bbcecc029e2c7a02bf70ab1df0aa3dc52e75bca88144be2aa76174ef55394d70a02264d50243bc4af14e800f3b2088ca2d0f18c084c5e0aa5ff378c7ecd46b7eb5c482b033e4db0a49fc2f815c57f0d655f4e6f841c5d670b1f5a49ea0aa91c9df3d3d60dba630025f2965c3521320cfb0afe230c1590d6cb81bc3d726dd76c64a2356c46f3cc7761bebc77cbec18b5c7c7d23e83ac9efe55b0b6eca03c58b2358600318d63a54ff8f0db03ff58f09abfdd80e0e832b68a16359c1a6d1aa0e387da3507535f05f4d880c55b0ea846b4788a104f4eb832aaebfc920d2dcce8c0004c91703f5289f8eee6a92972e98ec1dc2b4b670442cac05c3e0ca3ffef2d9a1393c0b1810a25680f4c1b34c690f1277c24889fc980fda6e2cfba3af9790317b8615473204e7f44ae52231ff2067d908a4a4de3c12b9e947250887c6ce41655ec850c48b14fd24021bb8b08ab0e8934aa54727f3b73eb5cb36e67eb2b31f62ca4083f1f3ee0ef9e6dfec68c36776e29bf24e06ba55e0729c961c38abc4a2cc78c845a2d821937354a04371c467"}) [ 2877.421912][ T33] kauditd_printk_skb: 19 callbacks suppressed [ 2877.421928][ T33] audit: type=1800 audit(1625918102.193:1825): pid=15045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14901 res=0 errno=0 [ 2877.450472][ T33] audit: type=1800 audit(1625918102.213:1826): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15690 res=0 errno=0 [ 2877.537241][ T33] audit: type=1800 audit(1625918102.303:1827): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15538 res=0 errno=0 [ 2877.558827][T23877] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 2877.568616][ T33] audit: type=1800 audit(1625918102.303:1828): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15619 res=0 errno=0 [ 2877.590890][ T33] audit: type=1800 audit(1625918102.333:1829): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15619 res=0 errno=0 [ 2877.699438][ T2628] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 2877.719613][T22565] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 2877.949463][T23877] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2878.189591][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2878.197334][T22565] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2878.199520][T23877] usb 4-1: string descriptor 0 read error: -22 [ 2878.211210][T23877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2878.220404][T23877] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2878.229812][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2878.249679][T22565] usb 6-1: not running at top speed; connect to a high speed hub [ 2878.270545][T23877] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2878.319622][ T2628] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2878.329435][ T2628] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2878.339624][T22565] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2878.349753][T22565] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2878.487284][T23877] usb 4-1: USB disconnect, device number 117 [ 2878.589450][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2878.595662][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2878.604761][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2878.612954][T22565] usb 6-1: string descriptor 0 read error: -22 [ 2878.619137][T22565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2878.628214][T22565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2878.670268][ T2628] cdc_ether: probe of 3-1:1.0 failed with error -22 11:55:03 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffff000, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:03 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x3, 0x741f, 0x4, 0xfffffffb, 0x7f, 0x6005}) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:03 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:03 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x1, 0x7, 0x1000, 0x2, 0x80000000, 0x3ff}) 11:55:03 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2878.880390][T23877] usb 3-1: USB disconnect, device number 117 [ 2878.918896][ T2628] usb 6-1: USB disconnect, device number 57 11:55:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2879.002529][ T33] audit: type=1800 audit(1625918103.773:1830): pid=15090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15694 res=0 errno=0 11:55:03 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x80000) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/101) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/34) 11:55:03 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7f, 0x8881) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2879.081264][ T33] audit: type=1800 audit(1625918103.803:1831): pid=15092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15692 res=0 errno=0 11:55:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2879.139065][ T33] audit: type=1800 audit(1625918103.823:1832): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15569 res=0 errno=0 11:55:03 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0xa64c3) 11:55:03 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:04 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2879.236777][ T33] audit: type=1800 audit(1625918103.853:1833): pid=15097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15778 res=0 errno=0 11:55:04 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4005, 0xcd6c97c81683247d) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x2, 0x9, &(0x7f0000000040)="99eed1f7f0a6ba9fa0"}) 11:55:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xa526000000000000, 0xa64c3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:04 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/131) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f00000000c0)) [ 2879.329370][T22565] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 2879.343382][ T33] audit: type=1800 audit(1625918103.963:1834): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15692 res=0 errno=0 [ 2879.489315][T23877] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 2879.559303][ T2628] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 2879.699363][T22565] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2879.899395][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2879.929349][ T2628] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2879.959508][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2879.989376][T22565] usb 4-1: string descriptor 0 read error: -22 [ 2879.995633][T22565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2880.004697][T22565] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2880.039338][T23877] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2880.049005][T23877] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2880.060328][T22565] cdc_ether: probe of 4-1:1.0 failed with error -22 11:55:05 executing program 3 (fault-call:0 fault-nth:0): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:05 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/218) syz_open_dev$evdev(&(0x7f0000001700), 0x5, 0x4000) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:05 executing program 0 (fault-call:1 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x82a01) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2880.259265][ T2628] usb 6-1: string descriptor 0 read error: -22 [ 2880.266115][ T2628] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2880.275245][ T2628] usb 6-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2880.286117][T22565] usb 4-1: USB disconnect, device number 118 [ 2880.289710][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2880.318990][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2880.328152][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.341132][ T2628] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 2880.385603][T15149] FAULT_INJECTION: forcing a failure. [ 2880.385603][T15149] name failslab, interval 1, probability 0, space 0, times 0 [ 2880.398429][T15149] CPU: 0 PID: 15149 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 2880.407197][T15149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2880.417263][T15149] Call Trace: [ 2880.420552][T15149] dump_stack+0x143/0x1db [ 2880.424895][T15149] should_fail.cold+0x5/0xa [ 2880.429407][T15149] ? getname_flags.part.0+0x50/0x4f0 11:55:05 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x2000) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2880.434708][T15149] should_failslab+0x5/0x10 [ 2880.439217][T15149] kmem_cache_alloc+0x5b/0x360 [ 2880.443987][T15149] getname_flags.part.0+0x50/0x4f0 [ 2880.449107][T15149] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2880.455098][T15149] getname+0x8e/0xd0 [ 2880.458994][T15149] do_sys_openat2+0xf5/0x420 [ 2880.463590][T15149] ? build_open_flags+0x6f0/0x6f0 [ 2880.464824][T15151] FAULT_INJECTION: forcing a failure. [ 2880.464824][T15151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2880.468613][T15149] ? __context_tracking_exit+0x9f/0xb0 [ 2880.468644][T15149] ? lock_downgrade+0x6e0/0x6e0 [ 2880.492075][T15149] __x64_sys_openat+0x13f/0x1f0 [ 2880.496921][T15149] ? __ia32_sys_open+0x1c0/0x1c0 [ 2880.501851][T15149] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2880.507816][T15149] ? syscall_enter_from_user_mode+0x27/0x70 [ 2880.513706][T15149] do_syscall_64+0x3a/0xb0 [ 2880.518102][T15149] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2880.523984][T15149] RIP: 0033:0x4196c4 [ 2880.527857][T15149] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2880.547448][T15149] RSP: 002b:00007f8908772cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2880.555852][T15149] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2880.563809][T15149] RDX: 00000000000a64c3 RSI: 00007f8908772d60 RDI: 00000000ffffff9c [ 2880.571764][T15149] RBP: 00007f8908772d60 R08: 0000000000000000 R09: 0000000000000000 [ 2880.579714][T15149] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2880.587677][T15149] R13: 00007fff0fd7972f R14: 00007f8908773300 R15: 0000000000022000 [ 2880.595646][T15151] CPU: 1 PID: 15151 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 2880.604425][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2880.614476][T15151] Call Trace: [ 2880.617771][T15151] dump_stack+0x143/0x1db [ 2880.622117][T15151] should_fail.cold+0x5/0xa [ 2880.626632][T15151] prepare_alloc_pages+0x172/0x4f0 [ 2880.631796][T15151] ? lock_chain_count+0x20/0x20 [ 2880.636672][T15151] __alloc_pages+0x12f/0x4f0 [ 2880.641275][T15151] ? __alloc_pages_slowpath.constprop.0+0x2060/0x2060 [ 2880.648038][T15151] ? __lock_acquire+0xb3a/0x5230 [ 2880.652993][T15151] ? mark_lock+0xef/0x17b0 [ 2880.657420][T15151] ? __lock_acquire+0x16a7/0x5230 [ 2880.657433][T23877] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2880.657454][T15151] alloc_pages_vma+0xbb/0x470 [ 2880.673683][T15151] __handle_mm_fault+0xfa8/0x2860 [ 2880.678709][T15151] ? lock_acquire+0x19d/0x700 [ 2880.683390][T15151] ? fault_dirty_shared_page+0x400/0x400 [ 2880.689029][T15151] ? __pmd_alloc+0x540/0x540 [ 2880.691367][T23877] usb 6-1: USB disconnect, device number 58 [ 2880.693625][T15151] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2880.693658][T15151] ? count_memcg_event_mm.part.0+0x1d7/0x2d0 [ 2880.693682][T15151] ? trace_hardirqs_on+0x5b/0x1a0 [ 2880.716459][T15151] handle_mm_fault+0x1bc/0x7e0 [ 2880.721232][T15151] do_user_addr_fault+0x483/0x1210 [ 2880.726352][T15151] exc_page_fault+0x9e/0x180 [ 2880.730963][T15151] ? asm_exc_page_fault+0x8/0x30 [ 2880.735906][T15151] asm_exc_page_fault+0x1e/0x30 [ 2880.740766][T15151] RIP: 0033:0x408bff [ 2880.744659][T15151] Code: 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 31 c0 41 56 49 89 d6 41 55 49 89 cd 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 7c 24 10 48 8d 3d af 66 0b 00 4c 89 44 24 08 e8 1b a6 ff ff [ 2880.764271][T15151] RSP: 002b:00007f9c89f250c0 EFLAGS: 00010206 [ 2880.770341][T15151] RAX: 0000000000000000 RBX: 000000000056bf80 RCX: 0000000020000280 [ 2880.778313][T15151] RDX: 0000000020000080 RSI: 0000000020000080 RDI: 0000000000000002 [ 2880.786306][T15151] RBP: 00007f9c89f271d0 R08: 0000000000403360 R09: 0000000000000000 [ 2880.794263][T15151] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000004d [ 2880.802215][T15151] R13: 0000000020000280 R14: 0000000020000080 R15: 0000000000022000 [ 2880.810334][T15151] syz-executor.3 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 2880.819460][T15151] CPU: 1 PID: 15151 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 2880.828199][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2880.838231][T15151] Call Trace: [ 2880.841486][T15151] dump_stack+0x143/0x1db [ 2880.845797][T15151] dump_header+0x106/0x628 [ 2880.850193][T15151] oom_kill_process.cold+0x10/0x15 [ 2880.855324][T15151] out_of_memory+0x119c/0x1460 [ 2880.860076][T15151] ? __handle_mm_fault+0xa5a/0x2860 [ 2880.865277][T15151] ? mem_cgroup_size+0x50/0x50 [ 2880.870044][T15151] ? oom_killer_disable+0x280/0x280 [ 2880.875240][T15151] ? mutex_trylock+0x246/0x2c0 [ 2880.876200][ T6155] usb 3-1: USB disconnect, device number 118 [ 2880.880010][T15151] ? pagefault_out_of_memory+0xde/0x110 [ 2880.880040][T15151] pagefault_out_of_memory+0xfa/0x110 [ 2880.880061][T15151] ? out_of_memory+0x1460/0x1460 [ 2880.880080][T15151] ? down_write_nested+0x150/0x150 [ 2880.906932][T15151] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2880.913191][T15151] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2880.919442][T15151] do_user_addr_fault+0xe33/0x1210 [ 2880.924555][T15151] exc_page_fault+0x9e/0x180 [ 2880.929147][T15151] ? asm_exc_page_fault+0x8/0x30 [ 2880.934086][T15151] asm_exc_page_fault+0x1e/0x30 [ 2880.938941][T15151] RIP: 0033:0x408bff [ 2880.942834][T15151] Code: 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 31 c0 41 56 49 89 d6 41 55 49 89 cd 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 7c 24 10 48 8d 3d af 66 0b 00 4c 89 44 24 08 e8 1b a6 ff ff [ 2880.962442][T15151] RSP: 002b:00007f9c89f250c0 EFLAGS: 00010206 [ 2880.964245][T15171] FAULT_INJECTION: forcing a failure. [ 2880.964245][T15171] name failslab, interval 1, probability 0, space 0, times 0 [ 2880.968504][T15151] RAX: 0000000000000000 RBX: 000000000056bf80 RCX: 0000000020000280 [ 2880.968521][T15151] RDX: 0000000020000080 RSI: 0000000020000080 RDI: 0000000000000002 [ 2880.968536][T15151] RBP: 00007f9c89f271d0 R08: 0000000000403360 R09: 0000000000000000 [ 2880.968550][T15151] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000004d [ 2880.968563][T15151] R13: 0000000020000280 R14: 0000000020000080 R15: 0000000000022000 [ 2881.020874][T15171] CPU: 0 PID: 15171 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2881.020993][T15151] Mem-Info: [ 2881.029640][T15171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.029653][T15171] Call Trace: [ 2881.029662][T15171] dump_stack+0x143/0x1db [ 2881.032746][T15151] active_anon:104 inactive_anon:20717 isolated_anon:0 [ 2881.032746][T15151] active_file:6069 inactive_file:68535 isolated_file:0 [ 2881.032746][T15151] unevictable:0 dirty:241 writeback:0 [ 2881.032746][T15151] slab_reclaimable:13886 slab_unreclaimable:64660 [ 2881.032746][T15151] mapped:65891 shmem:11775 pagetables:979 bounce:0 [ 2881.032746][T15151] free:1458388 free_pcp:746 free_cma:0 [ 2881.042786][T15171] should_fail.cold+0x5/0xa [ 2881.042812][T15171] ? getname_flags.part.0+0x50/0x4f0 [ 2881.046064][T15151] Node 0 active_anon:416kB inactive_anon:82868kB active_file:24276kB inactive_file:274140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:263564kB dirty:964kB writeback:0kB shmem:47100kB writeback_tmp:0kB kernel_stack:3912kB pagetables:3916kB all_unreclaimable? no [ 2881.050370][T15171] should_failslab+0x5/0x10 [ 2881.050396][T15171] kmem_cache_alloc+0x5b/0x360 [ 2881.087370][T15151] Node 0 [ 2881.091820][T15171] getname_flags.part.0+0x50/0x4f0 [ 2881.097097][T15151] DMA free:15360kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.123453][T15171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2881.123488][T15171] getname+0x8e/0xd0 [ 2881.127964][T15151] lowmem_reserve[]: [ 2881.132693][T15171] do_sys_openat2+0xf5/0x420 [ 2881.132718][T15171] ? build_open_flags+0x6f0/0x6f0 [ 2881.135633][T15151] 0 [ 2881.140715][T15171] ? __context_tracking_exit+0x9f/0xb0 [ 2881.140742][T15171] ? lock_downgrade+0x6e0/0x6e0 [ 2881.165982][T15151] 2836 [ 2881.171911][T15171] __x64_sys_openat+0x13f/0x1f0 [ 2881.171936][T15171] ? __ia32_sys_open+0x1c0/0x1c0 [ 2881.175798][T15151] 6762 [ 2881.179577][T15171] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2881.184154][T15151] 6762 [ 2881.189162][T15171] ? syscall_enter_from_user_mode+0x27/0x70 [ 2881.189189][T15171] do_syscall_64+0x3a/0xb0 [ 2881.191659][T15151] 11:55:05 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 11:55:05 executing program 5 (fault-call:0 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:05 executing program 0 (fault-call:1 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2881.191667][T15151] Node 0 [ 2881.197089][T15171] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2881.201931][T15151] DMA32 free:2907300kB min:4408kB low:7312kB high:10216kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2908684kB mlocked:0kB bounce:0kB free_pcp:1384kB local_pcp:1328kB free_cma:0kB [ 2881.204652][T15171] RIP: 0033:0x4196c4 [ 2881.209491][T15151] lowmem_reserve[]: [ 2881.214380][T15171] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2881.217117][T15151] 0 0 [ 2881.223067][T15171] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2881.223089][T15171] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2881.225820][T15151] 3926 3926 [ 2881.231677][T15171] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2881.231693][T15171] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 11:55:06 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa44c3) [ 2881.236080][T15151] [ 2881.236087][T15151] Node 0 [ 2881.238380][T15171] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2881.241307][T15151] Normal free:2910892kB min:6104kB low:10124kB high:14144kB reserved_highatomic:0KB active_anon:416kB inactive_anon:82868kB active_file:24276kB inactive_file:274140kB unevictable:0kB writepending:964kB present:5242880kB managed:4020868kB mlocked:0kB bounce:0kB free_pcp:1600kB local_pcp:1124kB free_cma:0kB [ 2881.247152][T15171] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 11:55:06 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x88300) ioctl$EVIOCGBITSND(r1, 0x80404532, 0xfffffffffffffffe) syz_open_dev$evdev(0xfffffffffffffffc, 0x30ae0000, 0x3892c3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x4, 0x5, 0x2, 0x957, "6a62d016438e49b40416ed47c7b06bbfb9454c547020654bda8100aa4f71851f"}) [ 2881.274255][T15151] lowmem_reserve[]: 0 0 0 0 [ 2881.394202][T15151] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2881.406904][T15151] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 4*16kB (M) 4*32kB (M) 5*64kB (M) 3*128kB (M) 5*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 707*4096kB (M) = 2907300kB [ 2881.423011][T15151] Node 0 Normal: 1377*4kB (UME) 221*8kB (UME) 17*16kB (UME) 102*32kB (UE) 135*64kB (UE) 30*128kB (UME) 7*256kB (UME) 4*512kB (UME) 13*1024kB (ME) 5*2048kB (UM) 698*4096kB (M) = 2909692kB [ 2881.425640][T15180] FAULT_INJECTION: forcing a failure. [ 2881.425640][T15180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2881.441574][T15151] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2881.441595][T15151] 61965 total pagecache pages [ 2881.441603][T15151] 0 pages in swap cache [ 2881.441611][T15151] Swap cache stats: add 0, delete 0, find 0/0 [ 2881.441624][T15151] Free swap = 0kB [ 2881.454673][T15180] CPU: 0 PID: 15180 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 2881.463895][T15151] Total swap = 0kB [ 2881.468524][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.472671][T15151] 2097051 pages RAM [ 2881.478684][T15180] Call Trace: [ 2881.478693][T15180] dump_stack+0x143/0x1db [ 2881.482394][T15151] 0 pages HighMem/MovableOnly [ 2881.491098][T15180] should_fail.cold+0x5/0xa [ 2881.491124][T15180] strncpy_from_user+0x34/0x3e0 [ 2881.494811][T15151] 360823 pages reserved [ 2881.494821][T15151] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null) [ 2881.504838][T15180] getname_flags.part.0+0x95/0x4f0 [ 2881.504866][T15180] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2881.508639][T15151] ,cpuset= [ 2881.511898][T15180] getname+0x8e/0xd0 [ 2881.511922][T15180] do_sys_openat2+0xf5/0x420 [ 2881.511944][T15180] ? build_open_flags+0x6f0/0x6f0 [ 2881.516320][T15151] / [ 2881.520979][T15180] ? __context_tracking_exit+0x9f/0xb0 [ 2881.525533][T15151] ,mems_allowed=0 [ 2881.530327][T15180] ? lock_downgrade+0x6e0/0x6e0 [ 2881.530353][T15180] __x64_sys_openat+0x13f/0x1f0 [ 2881.534474][T15151] ,global_oom,task_memcg= [ 2881.541198][T15180] ? __ia32_sys_open+0x1c0/0x1c0 [ 2881.541221][T15180] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2881.546303][T15151] / [ 2881.552242][T15180] ? syscall_enter_from_user_mode+0x27/0x70 [ 2881.555277][T15151] ,task=syz-executor.3,pid=15151,uid=0 [ 2881.559122][T15180] do_syscall_64+0x3a/0xb0 [ 2881.559144][T15180] entry_SYSCALL_64_after_hwframe+0x44/0xae 11:55:06 executing program 5 (fault-call:0 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:06 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2881.563734][T15151] Out of memory (oom_kill_allocating_task): Killed process 15145 (syz-executor.3) total-vm:85060kB, anon-rss:100kB, file-rss:34948kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 2881.568692][T15180] RIP: 0033:0x4196c4 [ 2881.651251][T15180] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2881.670861][T15180] RSP: 002b:00007f8908751cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2881.679281][T15180] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2881.687258][T15180] RDX: 00000000000a64c3 RSI: 00007f8908751d60 RDI: 00000000ffffff9c [ 2881.695232][T15180] RBP: 00007f8908751d60 R08: 0000000000000000 R09: 0000000000000000 [ 2881.703205][T15180] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2881.711182][T15180] R13: 00007fff0fd7972f R14: 00007f8908752300 R15: 0000000000022000 [ 2881.730733][T15188] FAULT_INJECTION: forcing a failure. [ 2881.730733][T15188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2881.743962][T15188] CPU: 1 PID: 15188 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2881.752724][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.762775][T15188] Call Trace: [ 2881.766051][T15188] dump_stack+0x143/0x1db [ 2881.770382][T15188] should_fail.cold+0x5/0xa [ 2881.774894][T15188] strncpy_from_user+0x34/0x3e0 [ 2881.779756][T15188] getname_flags.part.0+0x95/0x4f0 [ 2881.784880][T15188] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 11:55:06 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/26) 11:55:06 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/240) 11:55:06 executing program 0 (fault-call:1 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2881.790874][T15188] getname+0x8e/0xd0 [ 2881.794771][T15188] do_sys_openat2+0xf5/0x420 [ 2881.799364][T15188] ? build_open_flags+0x6f0/0x6f0 [ 2881.804399][T15188] ? __context_tracking_exit+0x9f/0xb0 [ 2881.809864][T15188] ? lock_downgrade+0x6e0/0x6e0 [ 2881.814721][T15188] __x64_sys_openat+0x13f/0x1f0 [ 2881.819575][T15188] ? __ia32_sys_open+0x1c0/0x1c0 [ 2881.824511][T15188] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2881.830501][T15188] ? syscall_enter_from_user_mode+0x27/0x70 [ 2881.836397][T15188] do_syscall_64+0x3a/0xb0 [ 2881.840816][T15188] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2881.846722][T15188] RIP: 0033:0x4196c4 [ 2881.850622][T15188] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2881.856251][T15195] FAULT_INJECTION: forcing a failure. [ 2881.856251][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.870225][T15188] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2881.870251][T15188] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2881.870267][T15188] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2881.870282][T15188] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2881.870295][T15188] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2881.870307][T15188] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2881.923333][T15198] FAULT_INJECTION: forcing a failure. [ 2881.923333][T15198] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.923437][T15195] CPU: 0 PID: 15195 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 2881.952640][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.962679][T15195] Call Trace: [ 2881.965952][T15195] dump_stack+0x143/0x1db [ 2881.970266][T15195] should_fail.cold+0x5/0xa [ 2881.974763][T15195] ? __alloc_file+0x21/0x280 [ 2881.979340][T15195] should_failslab+0x5/0x10 [ 2881.983841][T15195] kmem_cache_alloc+0x5b/0x360 [ 2881.988612][T15195] __alloc_file+0x21/0x280 [ 2881.993012][T15195] alloc_empty_file+0x6d/0x170 [ 2881.997765][T15195] path_openat+0xe3/0x27e0 [ 2882.002166][T15195] ? __lock_acquire+0x16a7/0x5230 [ 2882.007194][T15195] ? path_lookupat+0x850/0x850 [ 2882.011948][T15195] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2882.017913][T15195] do_filp_open+0x190/0x3d0 [ 2882.022396][T15195] ? may_open_dev+0xf0/0xf0 [ 2882.026883][T15195] ? alloc_fd+0x2e6/0x660 [ 2882.031206][T15195] ? lock_downgrade+0x6e0/0x6e0 [ 2882.036045][T15195] ? do_raw_spin_lock+0x120/0x2b0 [ 2882.041054][T15195] ? rwlock_bug.part.0+0x90/0x90 [ 2882.045972][T15195] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2882.052198][T15195] ? _find_next_bit+0x1e3/0x260 [ 2882.057033][T15195] ? _raw_spin_unlock+0x1a/0x30 [ 2882.061873][T15195] ? alloc_fd+0x2e6/0x660 [ 2882.066183][T15195] do_sys_openat2+0x16d/0x420 [ 2882.070844][T15195] ? build_open_flags+0x6f0/0x6f0 [ 2882.075860][T15195] ? __context_tracking_exit+0x9f/0xb0 [ 2882.081303][T15195] ? lock_downgrade+0x6e0/0x6e0 [ 2882.086136][T15195] __x64_sys_openat+0x13f/0x1f0 [ 2882.090969][T15195] ? __ia32_sys_open+0x1c0/0x1c0 [ 2882.095886][T15195] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2882.101856][T15195] ? syscall_enter_from_user_mode+0x27/0x70 [ 2882.107795][T15195] do_syscall_64+0x3a/0xb0 [ 2882.112201][T15195] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2882.118086][T15195] RIP: 0033:0x4196c4 [ 2882.121962][T15195] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 11:55:06 executing program 5 (fault-call:0 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2882.141555][T15195] RSP: 002b:00007f8908772cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2882.149953][T15195] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2882.157912][T15195] RDX: 00000000000a64c3 RSI: 00007f8908772d60 RDI: 00000000ffffff9c [ 2882.165870][T15195] RBP: 00007f8908772d60 R08: 0000000000000000 R09: 0000000000000000 [ 2882.173825][T15195] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2882.181789][T15195] R13: 00007fff0fd7972f R14: 00007f8908773300 R15: 0000000000022000 [ 2882.189752][T15198] CPU: 1 PID: 15198 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2882.198514][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2882.208566][T15198] Call Trace: [ 2882.211840][T15198] dump_stack+0x143/0x1db [ 2882.216178][T15198] should_fail.cold+0x5/0xa [ 2882.220693][T15198] ? __alloc_file+0x21/0x280 [ 2882.225288][T15198] should_failslab+0x5/0x10 [ 2882.229796][T15198] kmem_cache_alloc+0x5b/0x360 [ 2882.234561][T15198] __alloc_file+0x21/0x280 [ 2882.238978][T15198] alloc_empty_file+0x6d/0x170 [ 2882.243727][T15198] path_openat+0xe3/0x27e0 [ 2882.248127][T15198] ? __lock_acquire+0x16a7/0x5230 [ 2882.253168][T15198] ? path_lookupat+0x850/0x850 [ 2882.257912][T15198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2882.263870][T15198] do_filp_open+0x190/0x3d0 [ 2882.268350][T15198] ? may_open_dev+0xf0/0xf0 [ 2882.272876][T15198] ? alloc_fd+0x2e6/0x660 [ 2882.277190][T15198] ? lock_downgrade+0x6e0/0x6e0 [ 2882.282032][T15198] ? do_raw_spin_lock+0x120/0x2b0 [ 2882.287040][T15198] ? rwlock_bug.part.0+0x90/0x90 [ 2882.291982][T15198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2882.298208][T15198] ? _find_next_bit+0x1e3/0x260 [ 2882.303154][T15198] ? _raw_spin_unlock+0x1a/0x30 [ 2882.307989][T15198] ? alloc_fd+0x2e6/0x660 [ 2882.312304][T15198] do_sys_openat2+0x16d/0x420 [ 2882.316968][T15198] ? build_open_flags+0x6f0/0x6f0 [ 2882.322003][T15198] ? __context_tracking_exit+0x9f/0xb0 [ 2882.327462][T15198] ? lock_downgrade+0x6e0/0x6e0 [ 2882.332350][T15198] __x64_sys_openat+0x13f/0x1f0 [ 2882.337183][T15198] ? __ia32_sys_open+0x1c0/0x1c0 [ 2882.339087][ T6155] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 2882.342104][T15198] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2882.342136][T15198] ? syscall_enter_from_user_mode+0x27/0x70 [ 2882.342161][T15198] do_syscall_64+0x3a/0xb0 [ 2882.342181][T15198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2882.372037][T15198] RIP: 0033:0x4196c4 [ 2882.375914][T15198] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2882.395503][T15198] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2882.403906][T15198] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2882.411854][T15198] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2882.419803][T15198] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2882.427763][T15198] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2882.435710][T15198] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2882.699026][T22565] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 2882.749083][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2882.809126][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2882.889166][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2882.898815][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2883.089114][T22565] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2883.139110][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2883.145340][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2883.154455][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2883.199932][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2883.369018][T22565] usb 4-1: string descriptor 0 read error: -22 [ 2883.375259][T22565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2883.384320][T22565] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 11:55:08 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:08 executing program 0 (fault-call:1 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:08 executing program 1: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000002c0)) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/222) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x60000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/28) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x9) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x20002) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)=""/189) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x1, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:08 executing program 5 (fault-call:0 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:08 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x8000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/200) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x2, 0x6]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2883.418360][ T2628] usb 3-1: USB disconnect, device number 119 [ 2883.450011][T22565] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2883.500486][ T33] kauditd_printk_skb: 10 callbacks suppressed [ 2883.500501][ T33] audit: type=1800 audit(1625918108.274:1845): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14974 res=0 errno=0 [ 2883.503715][T15224] FAULT_INJECTION: forcing a failure. [ 2883.503715][T15224] name failslab, interval 1, probability 0, space 0, times 0 [ 2883.528790][T15223] FAULT_INJECTION: forcing a failure. [ 2883.528790][T15223] name failslab, interval 1, probability 0, space 0, times 0 [ 2883.540690][T15224] CPU: 1 PID: 15224 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2883.540716][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2883.540728][T15224] Call Trace: [ 2883.540736][T15224] dump_stack+0x143/0x1db [ 2883.579698][T15224] should_fail.cold+0x5/0xa [ 2883.584206][T15224] ? security_file_alloc+0x34/0x170 [ 2883.589390][T15224] should_failslab+0x5/0x10 [ 2883.593880][T15224] kmem_cache_alloc+0x5b/0x360 [ 2883.598646][T15224] security_file_alloc+0x34/0x170 [ 2883.603659][T15224] __alloc_file+0xd8/0x280 [ 2883.608065][T15224] alloc_empty_file+0x6d/0x170 [ 2883.612828][T15224] path_openat+0xe3/0x27e0 [ 2883.617233][T15224] ? __lock_acquire+0x16a7/0x5230 [ 2883.622277][T15224] ? path_lookupat+0x850/0x850 [ 2883.627026][T15224] ? __lock_acquire+0x16a7/0x5230 [ 2883.632055][T15224] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2883.638037][T15224] do_filp_open+0x190/0x3d0 [ 2883.642535][T15224] ? may_open_dev+0xf0/0xf0 [ 2883.647021][T15224] ? alloc_fd+0x2e6/0x660 [ 2883.651339][T15224] ? lock_downgrade+0x6e0/0x6e0 [ 2883.656176][T15224] ? do_raw_spin_lock+0x120/0x2b0 [ 2883.661188][T15224] ? rwlock_bug.part.0+0x90/0x90 [ 2883.666109][T15224] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2883.672338][T15224] ? _find_next_bit+0x1e3/0x260 [ 2883.677183][T15224] ? _raw_spin_unlock+0x1a/0x30 [ 2883.682023][T15224] ? alloc_fd+0x2e6/0x660 [ 2883.686339][T15224] do_sys_openat2+0x16d/0x420 [ 2883.691000][T15224] ? build_open_flags+0x6f0/0x6f0 [ 2883.696010][T15224] ? __context_tracking_exit+0x9f/0xb0 [ 2883.701453][T15224] ? lock_downgrade+0x6e0/0x6e0 [ 2883.706294][T15224] __x64_sys_openat+0x13f/0x1f0 [ 2883.711129][T15224] ? __ia32_sys_open+0x1c0/0x1c0 [ 2883.716049][T15224] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2883.722019][T15224] ? syscall_enter_from_user_mode+0x27/0x70 [ 2883.727897][T15224] do_syscall_64+0x3a/0xb0 [ 2883.732294][T15224] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2883.738173][T15224] RIP: 0033:0x4196c4 [ 2883.742049][T15224] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2883.761637][T15224] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2883.770030][T15224] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2883.777985][T15224] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2883.785936][T15224] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2883.793886][T15224] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2883.801835][T15224] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2883.809790][T15223] CPU: 0 PID: 15223 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 2883.818550][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2883.825527][T22565] usb 4-1: USB disconnect, device number 119 [ 2883.828601][T15223] Call Trace: [ 2883.828610][T15223] dump_stack+0x143/0x1db [ 2883.828634][T15223] should_fail.cold+0x5/0xa [ 2883.828658][T15223] ? security_file_alloc+0x34/0x170 [ 2883.851843][T15223] should_failslab+0x5/0x10 [ 2883.856359][T15223] kmem_cache_alloc+0x5b/0x360 [ 2883.861128][T15223] security_file_alloc+0x34/0x170 [ 2883.866161][T15223] __alloc_file+0xd8/0x280 [ 2883.870584][T15223] alloc_empty_file+0x6d/0x170 [ 2883.875352][T15223] path_openat+0xe3/0x27e0 [ 2883.879775][T15223] ? __lock_acquire+0x16a7/0x5230 [ 2883.884810][T15223] ? path_lookupat+0x850/0x850 [ 2883.889581][T15223] ? __lock_acquire+0x16a7/0x5230 [ 2883.894617][T15223] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 11:55:08 executing program 5 (fault-call:0 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:08 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2883.900607][T15223] do_filp_open+0x190/0x3d0 [ 2883.905109][T15223] ? may_open_dev+0xf0/0xf0 [ 2883.909609][T15223] ? alloc_fd+0x2e6/0x660 [ 2883.913941][T15223] ? lock_downgrade+0x6e0/0x6e0 [ 2883.918801][T15223] ? do_raw_spin_lock+0x120/0x2b0 [ 2883.923824][T15223] ? rwlock_bug.part.0+0x90/0x90 [ 2883.928759][T15223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2883.935011][T15223] ? _find_next_bit+0x1e3/0x260 [ 2883.939863][T15223] ? _raw_spin_unlock+0x1a/0x30 [ 2883.944717][T15223] ? alloc_fd+0x2e6/0x660 [ 2883.949051][T15223] do_sys_openat2+0x16d/0x420 [ 2883.953728][T15223] ? build_open_flags+0x6f0/0x6f0 [ 2883.958759][T15223] ? __context_tracking_exit+0x9f/0xb0 [ 2883.964221][T15223] ? lock_downgrade+0x6e0/0x6e0 [ 2883.969076][T15223] __x64_sys_openat+0x13f/0x1f0 [ 2883.973928][T15223] ? __ia32_sys_open+0x1c0/0x1c0 [ 2883.978329][T15237] FAULT_INJECTION: forcing a failure. [ 2883.978329][T15237] name failslab, interval 1, probability 0, space 0, times 0 [ 2883.978862][T15223] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2883.997460][T15223] ? syscall_enter_from_user_mode+0x27/0x70 [ 2884.003350][T15223] do_syscall_64+0x3a/0xb0 [ 2884.007763][T15223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2884.013644][T15223] RIP: 0033:0x4196c4 [ 2884.017519][T15223] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2884.037120][T15223] RSP: 002b:00007f8908772cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2884.045520][T15223] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2884.053471][T15223] RDX: 00000000000a64c3 RSI: 00007f8908772d60 RDI: 00000000ffffff9c [ 2884.061423][T15223] RBP: 00007f8908772d60 R08: 0000000000000000 R09: 0000000000000000 [ 2884.069399][T15223] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2884.077351][T15223] R13: 00007fff0fd7972f R14: 00007f8908773300 R15: 0000000000022000 [ 2884.085312][T15237] CPU: 1 PID: 15237 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2884.094071][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2884.104121][T15237] Call Trace: [ 2884.107402][T15237] dump_stack+0x143/0x1db [ 2884.111747][T15237] should_fail.cold+0x5/0xa [ 2884.116260][T15237] ? __d_alloc+0x2a/0x950 [ 2884.120595][T15237] should_failslab+0x5/0x10 [ 2884.125104][T15237] kmem_cache_alloc+0x5b/0x360 [ 2884.129879][T15237] __d_alloc+0x2a/0x950 [ 2884.134036][T15237] d_alloc+0x4a/0x230 [ 2884.138012][T15237] d_alloc_parallel+0xe9/0x1980 [ 2884.142852][T15237] ? __d_lookup+0x3ff/0x710 [ 2884.147397][T15237] ? lock_downgrade+0x6e0/0x6e0 [ 2884.152237][T15237] ? find_held_lock+0x2d/0x110 [ 2884.156990][T15237] ? __d_lookup_rcu+0x6c0/0x6c0 [ 2884.161872][T15237] ? __d_lookup+0x428/0x710 [ 2884.166354][T15237] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2884.172317][T15237] lookup_open.isra.0+0x86c/0x1300 [ 2884.177412][T15237] ? hashlen_string+0xf0/0xf0 [ 2884.182075][T15237] ? verify_cpu+0x100/0x100 [ 2884.186557][T15237] ? verify_cpu+0x100/0x100 [ 2884.191050][T15237] path_openat+0x9b4/0x27e0 [ 2884.195535][T15237] ? path_lookupat+0x850/0x850 [ 2884.200281][T15237] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2884.206245][T15237] do_filp_open+0x190/0x3d0 [ 2884.210731][T15237] ? may_open_dev+0xf0/0xf0 [ 2884.215236][T15237] ? do_raw_spin_lock+0x120/0x2b0 [ 2884.220255][T15237] ? rwlock_bug.part.0+0x90/0x90 [ 2884.225174][T15237] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2884.231407][T15237] ? _find_next_bit+0x1e3/0x260 [ 2884.236238][T15237] ? _raw_spin_unlock+0x1a/0x30 [ 2884.241083][T15237] ? alloc_fd+0x2e6/0x660 [ 2884.245410][T15237] do_sys_openat2+0x16d/0x420 [ 2884.250083][T15237] ? build_open_flags+0x6f0/0x6f0 [ 2884.255130][T15237] ? __context_tracking_exit+0x9f/0xb0 [ 2884.260579][T15237] ? lock_downgrade+0x6e0/0x6e0 [ 2884.265410][T15237] __x64_sys_openat+0x13f/0x1f0 [ 2884.270243][T15237] ? __ia32_sys_open+0x1c0/0x1c0 [ 2884.275167][T15237] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2884.281153][T15237] ? syscall_enter_from_user_mode+0x27/0x70 [ 2884.287032][T15237] do_syscall_64+0x3a/0xb0 [ 2884.291555][T15237] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2884.297435][T15237] RIP: 0033:0x4196c4 [ 2884.301327][T15237] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2884.320999][T15237] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2884.329391][T15237] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2884.337362][T15237] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2884.345320][T15237] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2884.353301][T15237] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2884.361260][T15237] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 11:55:09 executing program 3: syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:09 executing program 0 (fault-call:1 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:09 executing program 5 (fault-call:0 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:09 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x53, 0xfff, 0x9f5, {0x1000, 0x5}, {0x1004, 0x1dc7}, @rumble={0x2, 0x2}}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/40) 11:55:09 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000002c0)=""/4086) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/222) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x80) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000080)=""/104) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000013c0)=0x930f) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x400040) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f00000012c0)=""/248) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x5a, 0x3, 0x4, 0xffffff00, "ffe97bfb45421aeeca3838b10e4cdd1179facb0108333bf79605b25d287dfe55"}) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001780)=""/4096) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000140), 0x30000, 0x80101) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2884.454010][T15241] FAULT_INJECTION: forcing a failure. [ 2884.454010][T15241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2884.467114][T15241] CPU: 0 PID: 15241 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 2884.475893][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2884.485999][T15241] Call Trace: [ 2884.489280][T15241] dump_stack+0x143/0x1db [ 2884.493617][T15241] should_fail.cold+0x5/0xa [ 2884.498131][T15241] _copy_to_user+0x2c/0x150 [ 2884.502644][T15241] simple_read_from_buffer+0xcc/0x160 [ 2884.508024][T15241] proc_fail_nth_read+0x187/0x220 [ 2884.513057][T15241] ? proc_sessionid_read+0x220/0x220 [ 2884.518350][T15241] ? security_file_permission+0x248/0x560 [ 2884.524086][T15241] ? proc_sessionid_read+0x220/0x220 [ 2884.529379][T15241] vfs_read+0x1b5/0x570 [ 2884.533547][T15241] ksys_read+0x12d/0x250 [ 2884.537795][T15241] ? vfs_write+0x9e0/0x9e0 [ 2884.539315][ T33] audit: type=1800 audit(1625918109.234:1846): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14975 res=0 errno=0 [ 2884.542215][T15241] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2884.542248][T15241] ? syscall_enter_from_user_mode+0x27/0x70 [ 2884.542276][T15241] do_syscall_64+0x3a/0xb0 [ 2884.565829][T15246] FAULT_INJECTION: forcing a failure. [ 2884.565829][T15246] name failslab, interval 1, probability 0, space 0, times 0 [ 2884.569465][T15241] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2884.569495][T15241] RIP: 0033:0x41935c [ 2884.569512][T15241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2884.569532][T15241] RSP: 002b:00007f8908773170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2884.569554][T15241] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 2884.569569][T15241] RDX: 000000000000000f RSI: 00007f89087731e0 RDI: 0000000000000003 [ 2884.645911][T15241] RBP: 00007f89087731d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.653886][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2884.661838][T15241] R13: 00007fff0fd7972f R14: 00007f8908773300 R15: 0000000000022000 [ 2884.669797][T15246] CPU: 1 PID: 15246 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2884.673597][ T33] audit: type=1800 audit(1625918109.234:1847): pid=15250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14975 res=0 errno=0 11:55:09 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffb, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2884.678561][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2884.678578][T15246] Call Trace: [ 2884.678598][T15246] dump_stack+0x143/0x1db [ 2884.717481][T15246] should_fail.cold+0x5/0xa [ 2884.722011][T15246] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2884.727750][T15246] should_failslab+0x5/0x10 [ 2884.732290][T15246] __kmalloc+0x72/0x310 [ 2884.736459][T15246] tomoyo_realpath_from_path+0xc3/0x620 [ 2884.742022][T15246] ? tomoyo_profile+0x42/0x50 [ 2884.746736][T15246] tomoyo_path_number_perm+0x1d5/0x590 [ 2884.752215][T15246] ? tomoyo_path_number_perm+0x18d/0x590 [ 2884.757860][T15246] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2884.763670][T15246] ? find_held_lock+0x2d/0x110 [ 2884.768444][T15246] ? d_alloc_parallel+0x91f/0x1980 [ 2884.773562][T15246] ? lock_downgrade+0x6e0/0x6e0 [ 2884.778427][T15246] ? find_held_lock+0x2d/0x110 [ 2884.783196][T15246] tomoyo_path_mknod+0x10d/0x190 [ 2884.788135][T15246] ? tomoyo_path_chown+0x1b0/0x1b0 [ 2884.793258][T15246] security_path_mknod+0xf9/0x170 11:55:09 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2884.797878][ T33] audit: type=1800 audit(1625918109.564:1848): pid=15256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14987 res=0 errno=0 [ 2884.798285][T15246] lookup_open.isra.0+0x471/0x1300 [ 2884.824618][T15246] ? hashlen_string+0xf0/0xf0 [ 2884.829306][T15246] ? verify_cpu+0x100/0x100 [ 2884.833814][T15246] ? verify_cpu+0x100/0x100 [ 2884.838320][T15246] path_openat+0x9b4/0x27e0 [ 2884.842832][T15246] ? path_lookupat+0x850/0x850 [ 2884.847606][T15246] ? __lock_acquire+0x16a7/0x5230 [ 2884.852653][T15246] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2884.858646][T15246] do_filp_open+0x190/0x3d0 [ 2884.860634][ T33] audit: type=1800 audit(1625918109.634:1849): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14951 res=0 errno=0 [ 2884.863148][T15246] ? may_open_dev+0xf0/0xf0 [ 2884.863173][T15246] ? do_raw_spin_lock+0x120/0x2b0 [ 2884.863196][T15246] ? rwlock_bug.part.0+0x90/0x90 [ 2884.863217][T15246] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 11:55:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0xa64c3) [ 2884.905059][T15246] ? _find_next_bit+0x1e3/0x260 [ 2884.909919][T15246] ? _raw_spin_unlock+0x1a/0x30 [ 2884.914774][T15246] ? alloc_fd+0x2e6/0x660 [ 2884.919112][T15246] do_sys_openat2+0x16d/0x420 [ 2884.923792][T15246] ? build_open_flags+0x6f0/0x6f0 [ 2884.928823][T15246] ? __context_tracking_exit+0x9f/0xb0 [ 2884.934287][T15246] ? lock_downgrade+0x6e0/0x6e0 [ 2884.939143][T15246] __x64_sys_openat+0x13f/0x1f0 [ 2884.943998][T15246] ? __ia32_sys_open+0x1c0/0x1c0 [ 2884.948938][T15246] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 11:55:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0xa64c3) 11:55:09 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x57, 0xd2, 0x401, {0x3f, 0xffbb}, {0x2a89, 0xcef}, @const={0x8, {0x0, 0x4, 0x8517, 0x69}}}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0xa2cf, 0x200000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x6) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/166) [ 2884.954932][T15246] ? syscall_enter_from_user_mode+0x27/0x70 [ 2884.960829][T15246] do_syscall_64+0x3a/0xb0 [ 2884.965245][T15246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2884.971141][T15246] RIP: 0033:0x4196c4 [ 2884.975030][T15246] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2884.994637][T15246] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2885.003056][T15246] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2885.011026][T15246] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2885.019000][T15246] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2885.026972][T15246] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2885.034950][T15246] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2885.043179][T15246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2885.055885][ T33] audit: type=1800 audit(1625918109.824:1850): pid=15246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14951 res=0 errno=0 [ 2885.308849][ T2628] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 2885.408838][T22565] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2885.668776][T22565] usb 4-1: Using ep0 maxpacket: 8 [ 2885.718882][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2885.758925][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2885.788831][T22565] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2885.838939][ T2628] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2885.848595][ T2628] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2886.048923][T22565] usb 4-1: string descriptor 0 read error: -22 [ 2886.055373][T22565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2886.064448][T22565] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2886.099822][T15249] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2886.118844][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2886.125058][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2886.134175][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2886.143082][T22565] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2886.189660][ T2628] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2886.329142][ T2628] usb 4-1: USB disconnect, device number 120 11:55:11 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x18, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0xa64c3) 11:55:11 executing program 1: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x2, 0x3f, 0x1a}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x11, 0x0, 0x40, 0xfc}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x60, &(0x7f0000000100)=@string={0x60, 0x3, "9ba451a53d14d6d20448d76730d793d749b895575006ee4fe1f156f9d10b71f6879907d2ddc385076c15bf1354e69963b60ea036a1efaec63d2ab6d494f6cb16c4ec324ce0c47354484bbc89f7d04873d3df1e1e120a9ac82f5e404f0d42"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43e}}, {0xd, &(0x7f0000000600)=@string={0xd, 0x3, "889ea004101cacd15757db"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1404}}, {0xcb, &(0x7f00000007c0)=@string={0xcb, 0x3, "ba6c9e078b4e3aab20c45b39f5530b9289308bf1cfdd9749730070c9803f8664958cd26e7a6a9998c12c36533d5ea4bdb0a5fb78ea770d34cc4dbb8db60b9f253076e10319a59c7f1792246eab01bb2a91b876ba7aac4c58e9dbd237cf4fadd00af1db957d113b50b11f90f608602898027361710d6b2eb563ebfa562ac44c9a0e1925763782f58acd44aee2abe8ff1a006bce58e8253229c4b9c99bcb430b16fd5c2d9bb604e7d4e2fbe1ada9f327166fe1bf0c3db4ea80c5bd77c8e78650029021144d1fefd88104"}}]}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000780)={0x0, 0x7fff, 0xfdd, {0x2}, {0x3, 0x6}, @rumble}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:11 executing program 5 (fault-call:0 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:11 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000002c0)=""/193) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0xffff, 0x1000]) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xeb, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000200)="b1cba0a2a3b166ac6af6e25b7e0d75b30663ee2ec8c0a1f6352fa787620af87a41f4a51bd289389d1ceac493a3db33e768f91c960c73199a667caf0aef6af36440e9a0250d216bbc"}) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/132) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x3, 0x2c, &(0x7f0000000180)="6715291a9787950d3d203b5ec8c1e4061c98c8a50286c730da728ecb6f52b1e501b66df678c35fd1f7276e58"}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/249) 11:55:11 executing program 3: syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2886.399647][ T6155] usb 3-1: USB disconnect, device number 120 11:55:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0xa64c3) [ 2886.443809][T15295] FAULT_INJECTION: forcing a failure. [ 2886.443809][T15295] name failslab, interval 1, probability 0, space 0, times 0 [ 2886.456554][T15295] CPU: 1 PID: 15295 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2886.465319][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2886.475377][T15295] Call Trace: [ 2886.478664][T15295] dump_stack+0x143/0x1db [ 2886.483003][T15295] should_fail.cold+0x5/0xa [ 2886.487533][T15295] ? tomoyo_encode2.part.0+0xe9/0x3a0 11:55:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0xa64c3) [ 2886.492926][T15295] should_failslab+0x5/0x10 [ 2886.497438][T15295] __kmalloc+0x72/0x310 [ 2886.501608][T15295] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2886.506817][T15295] tomoyo_encode+0x28/0x50 [ 2886.511251][T15295] tomoyo_realpath_from_path+0x186/0x620 [ 2886.516899][T15295] tomoyo_path_number_perm+0x1d5/0x590 [ 2886.522372][T15295] ? tomoyo_path_number_perm+0x18d/0x590 [ 2886.528014][T15295] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2886.533825][T15295] ? find_held_lock+0x2d/0x110 [ 2886.538601][T15295] ? d_alloc_parallel+0x91f/0x1980 11:55:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0xa64c3) [ 2886.543721][T15295] ? lock_downgrade+0x6e0/0x6e0 [ 2886.548580][T15295] ? find_held_lock+0x2d/0x110 [ 2886.553353][T15295] tomoyo_path_mknod+0x10d/0x190 [ 2886.558289][T15295] ? tomoyo_path_chown+0x1b0/0x1b0 [ 2886.563405][T15295] security_path_mknod+0xf9/0x170 [ 2886.568435][T15295] lookup_open.isra.0+0x471/0x1300 [ 2886.573558][T15295] ? hashlen_string+0xf0/0xf0 [ 2886.578258][T15295] ? verify_cpu+0x100/0x100 [ 2886.582762][T15295] ? verify_cpu+0x100/0x100 [ 2886.587269][T15295] path_openat+0x9b4/0x27e0 11:55:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0xa64c3) [ 2886.591789][T15295] ? path_lookupat+0x850/0x850 [ 2886.596555][T15295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2886.602542][T15295] do_filp_open+0x190/0x3d0 [ 2886.607054][T15295] ? may_open_dev+0xf0/0xf0 [ 2886.611565][T15295] ? do_raw_spin_lock+0x120/0x2b0 [ 2886.616589][T15295] ? rwlock_bug.part.0+0x90/0x90 [ 2886.621527][T15295] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2886.627776][T15295] ? _find_next_bit+0x1e3/0x260 [ 2886.632612][T15295] ? _raw_spin_unlock+0x1a/0x30 [ 2886.637473][T15295] ? alloc_fd+0x2e6/0x660 11:55:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0xa64c3) [ 2886.641830][T15295] do_sys_openat2+0x16d/0x420 [ 2886.646512][T15295] ? build_open_flags+0x6f0/0x6f0 [ 2886.651538][T15295] ? __context_tracking_exit+0x9f/0xb0 [ 2886.657012][T15295] ? lock_downgrade+0x6e0/0x6e0 [ 2886.661879][T15295] __x64_sys_openat+0x13f/0x1f0 [ 2886.666743][T15295] ? __ia32_sys_open+0x1c0/0x1c0 [ 2886.671697][T15295] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2886.677711][T15295] ? syscall_enter_from_user_mode+0x27/0x70 [ 2886.683622][T15295] do_syscall_64+0x3a/0xb0 [ 2886.688044][T15295] entry_SYSCALL_64_after_hwframe+0x44/0xae 11:55:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0xa64c3) [ 2886.693942][T15295] RIP: 0033:0x4196c4 [ 2886.697837][T15295] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2886.717450][T15295] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2886.725874][T15295] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2886.733843][T15295] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2886.741801][T15295] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2886.749779][T15295] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2886.757741][T15295] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2886.758709][T23877] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 2886.765838][T15295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2886.782250][ T33] audit: type=1800 audit(1625918111.554:1851): pid=15295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14083 res=0 errno=0 [ 2886.838815][ T6155] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 2887.018781][T23877] usb 2-1: Invalid ep0 maxpacket: 512 [ 2887.168820][T23877] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 2887.268799][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2887.308713][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2887.398750][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2887.408387][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2887.418691][T23877] usb 2-1: Invalid ep0 maxpacket: 512 [ 2887.424150][T23877] usb usb2-port1: attempt power cycle [ 2887.648739][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2887.655024][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2887.664116][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2887.729330][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2887.838627][T23877] usb 2-1: new low-speed USB device number 25 using dummy_hcd 11:55:12 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x1d, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:12 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0xa64c3) [ 2887.929263][T23877] usb 2-1: Invalid ep0 maxpacket: 512 [ 2887.942427][ T6155] usb 3-1: USB disconnect, device number 121 [ 2888.078628][T23877] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 2888.169129][T23877] usb 2-1: Invalid ep0 maxpacket: 512 [ 2888.174612][T23877] usb usb2-port1: unable to enumerate USB device [ 2888.368592][ T6155] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 2888.768611][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2888.808598][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2888.888623][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2888.898271][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2889.138640][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2889.144872][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2889.153954][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.199238][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 11:55:14 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/86) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0xff, 0x1, 0x24bd, 0x3, "5a275d9f935cc4154afcb2fa92c155ba669eb4c9d8cab70ac2e7672722aa51e9"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:14 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x480001) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x2, 0x8}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:14 executing program 5 (fault-call:0 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:14 executing program 3: syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0xa64c3) 11:55:14 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x2, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2889.409326][ T2628] usb 3-1: USB disconnect, device number 122 [ 2889.515436][ T33] audit: type=1800 audit(1625918114.284:1852): pid=15359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14483 res=0 errno=0 [ 2889.520764][T15360] FAULT_INJECTION: forcing a failure. [ 2889.520764][T15360] name failslab, interval 1, probability 0, space 0, times 0 [ 2889.549447][T15360] CPU: 0 PID: 15360 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2889.558209][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2889.559680][ T33] audit: type=1800 audit(1625918114.284:1853): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14531 res=0 errno=0 [ 2889.568256][T15360] Call Trace: [ 2889.568266][T15360] dump_stack+0x143/0x1db [ 2889.568291][T15360] should_fail.cold+0x5/0xa [ 2889.601581][T15360] ? ext4_init_journal_params+0x350/0x350 [ 2889.607312][T15360] ? ext4_alloc_inode+0x1a/0x640 [ 2889.612265][T15360] should_failslab+0x5/0x10 [ 2889.616781][T15360] kmem_cache_alloc+0x5b/0x360 [ 2889.621559][T15360] ? ext4_init_journal_params+0x350/0x350 [ 2889.627288][T15360] ext4_alloc_inode+0x1a/0x640 [ 2889.632077][T15360] ? ext4_init_journal_params+0x350/0x350 [ 2889.637803][T15360] alloc_inode+0x61/0x230 [ 2889.642138][T15360] new_inode+0x27/0x2f0 [ 2889.646301][T15360] __ext4_new_inode+0x34f/0x5510 [ 2889.651292][T15360] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2889.657286][T15360] ? _raw_spin_unlock_irqrestore+0x42/0x50 11:55:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0xa64c3) 11:55:14 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2889.663108][T15360] ? trace_hardirqs_on+0x5b/0x1a0 [ 2889.668144][T15360] ? find_held_lock+0x2d/0x110 [ 2889.672919][T15360] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2889.678469][T15360] ? do_raw_spin_unlock+0x171/0x230 [ 2889.683672][T15360] ? d_splice_alias+0x4c6/0xc60 [ 2889.688543][T15360] ? ext4_create+0x447/0x4d0 [ 2889.692908][ T33] audit: type=1800 audit(1625918114.464:1854): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14306 res=0 errno=0 11:55:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0xa64c3) [ 2889.693128][T15360] ext4_create+0x2d6/0x4d0 [ 2889.718752][T15360] ? ext4_mknod+0x4e0/0x4e0 [ 2889.723255][T15360] ? generic_permission+0x126/0x5b0 [ 2889.728457][T15360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2889.734702][T15360] ? security_inode_permission+0xc5/0xf0 [ 2889.740344][T15360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2889.746590][T15360] ? ext4_mknod+0x4e0/0x4e0 [ 2889.751091][T15360] lookup_open.isra.0+0xf23/0x1300 [ 2889.756207][T15360] ? hashlen_string+0xf0/0xf0 [ 2889.760887][T15360] ? verify_cpu+0x100/0x100 11:55:14 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/228) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x6, 0x18, 0x1f, 0x2, "2d7a7d4233b81bc68226d409e6da6fe63a09d1b2a4800771389d9cbb9a92b85f"}) [ 2889.765392][T15360] ? verify_cpu+0x100/0x100 [ 2889.769896][T15360] path_openat+0x9b4/0x27e0 [ 2889.774404][T15360] ? path_lookupat+0x850/0x850 [ 2889.779171][T15360] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2889.785158][T15360] do_filp_open+0x190/0x3d0 [ 2889.789656][T15360] ? may_open_dev+0xf0/0xf0 [ 2889.794161][T15360] ? do_raw_spin_lock+0x120/0x2b0 [ 2889.799188][T15360] ? rwlock_bug.part.0+0x90/0x90 [ 2889.804126][T15360] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2889.805783][ T33] audit: type=1800 audit(1625918114.574:1855): pid=15374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14531 res=0 errno=0 [ 2889.810367][T15360] ? _find_next_bit+0x1e3/0x260 [ 2889.810392][T15360] ? _raw_spin_unlock+0x1a/0x30 [ 2889.810415][T15360] ? alloc_fd+0x2e6/0x660 [ 2889.845596][T15360] do_sys_openat2+0x16d/0x420 [ 2889.850278][T15360] ? build_open_flags+0x6f0/0x6f0 [ 2889.855305][T15360] ? __context_tracking_exit+0x9f/0xb0 11:55:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0xa64c3) [ 2889.858459][ T8202] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2889.860766][T15360] ? lock_downgrade+0x6e0/0x6e0 [ 2889.860797][T15360] __x64_sys_openat+0x13f/0x1f0 [ 2889.860822][T15360] ? __ia32_sys_open+0x1c0/0x1c0 [ 2889.860844][T15360] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2889.868564][ T2628] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 2889.873274][T15360] ? syscall_enter_from_user_mode+0x27/0x70 [ 2889.873319][T15360] do_syscall_64+0x3a/0xb0 [ 2889.906878][T15360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2889.912788][T15360] RIP: 0033:0x4196c4 [ 2889.916702][T15360] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2889.936321][T15360] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2889.944734][T15360] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2889.952708][T15360] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c 11:55:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0xa64c3) [ 2889.960678][T15360] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2889.968650][T15360] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2889.976599][T15360] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 11:55:14 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2fea, 0x4000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000300)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x101, 0x40) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000001340)=""/187) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x15, 0xde, &(0x7f0000000080)="4890845282ddd58f9ae0e1b4e327d4007515e37e3f7cea9348b9f069a27c65e4de4b52977aee3444c8f7907cc3e6c8e84c488c0e49196bee51e20d399364bfae0413b5d407133e22a3bc9877027c50f5b5443b729abe1b483ec58828a9fa2b89436128637bfe87f97382149eaea33c13193ac2e96ec986d2d5e410d6d23aefe8161423a835b13dc27b246ea4db18ccdd447f681672675a4374fe4c8dfac51520d8d136fb05a3808fa97ee1e134160fc0e4d7448d14f2a208c98bbd96608048c0036871ba6bc8046d29b9f99059c344f272bdba1a105097cfe86bd89d611e"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0xa64c3) 11:55:14 executing program 5 (fault-call:0 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2890.055805][T15386] FAULT_INJECTION: forcing a failure. [ 2890.055805][T15386] name failslab, interval 1, probability 0, space 0, times 0 [ 2890.063667][ T33] audit: type=1800 audit(1625918114.824:1856): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14450 res=0 errno=0 [ 2890.068503][T15386] CPU: 1 PID: 15386 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2890.098447][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2890.108499][T15386] Call Trace: [ 2890.111780][T15386] dump_stack+0x143/0x1db [ 2890.116103][T15386] should_fail.cold+0x5/0xa [ 2890.120608][T15386] ? security_inode_alloc+0x34/0x160 [ 2890.125875][T15386] should_failslab+0x5/0x10 [ 2890.130366][T15386] kmem_cache_alloc+0x5b/0x360 [ 2890.135177][T15386] security_inode_alloc+0x34/0x160 [ 2890.140269][T15386] inode_init_always+0x52e/0xc40 [ 2890.145228][T15386] alloc_inode+0x82/0x230 [ 2890.149537][T15386] new_inode+0x27/0x2f0 [ 2890.153680][T15386] __ext4_new_inode+0x34f/0x5510 [ 2890.158611][T15386] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2890.164572][T15386] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2890.170355][T15386] ? trace_hardirqs_on+0x5b/0x1a0 [ 2890.176138][T15386] ? find_held_lock+0x2d/0x110 [ 2890.180885][T15386] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2890.186410][T15386] ? do_raw_spin_unlock+0x171/0x230 [ 2890.191584][T15386] ? d_splice_alias+0x4c6/0xc60 [ 2890.196412][T15386] ? ext4_create+0x447/0x4d0 [ 2890.200983][T15386] ext4_create+0x2d6/0x4d0 [ 2890.205397][T15386] ? ext4_mknod+0x4e0/0x4e0 [ 2890.209891][T15386] ? generic_permission+0x126/0x5b0 [ 2890.215067][T15386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2890.221286][T15386] ? security_inode_permission+0xc5/0xf0 [ 2890.226902][T15386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2890.233139][T15386] ? ext4_mknod+0x4e0/0x4e0 [ 2890.237642][T15386] lookup_open.isra.0+0xf23/0x1300 [ 2890.242761][T15386] ? hashlen_string+0xf0/0xf0 [ 2890.247421][T15386] ? verify_cpu+0x100/0x100 [ 2890.251930][T15386] ? verify_cpu+0x100/0x100 [ 2890.256425][T15386] path_openat+0x9b4/0x27e0 [ 2890.260908][T15386] ? path_lookupat+0x850/0x850 [ 2890.265650][T15386] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2890.271615][T15386] do_filp_open+0x190/0x3d0 [ 2890.276098][T15386] ? may_open_dev+0xf0/0xf0 [ 2890.280611][T15386] ? do_raw_spin_lock+0x120/0x2b0 [ 2890.285632][T15386] ? rwlock_bug.part.0+0x90/0x90 [ 2890.290550][T15386] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2890.296789][T15386] ? _find_next_bit+0x1e3/0x260 [ 2890.301629][T15386] ? _raw_spin_unlock+0x1a/0x30 [ 2890.306465][T15386] ? alloc_fd+0x2e6/0x660 [ 2890.310783][T15386] do_sys_openat2+0x16d/0x420 [ 2890.315439][T15386] ? build_open_flags+0x6f0/0x6f0 [ 2890.320461][T15386] ? __context_tracking_exit+0x9f/0xb0 [ 2890.325902][T15386] ? lock_downgrade+0x6e0/0x6e0 [ 2890.330733][T15386] __x64_sys_openat+0x13f/0x1f0 [ 2890.335565][T15386] ? __ia32_sys_open+0x1c0/0x1c0 [ 2890.340483][T15386] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2890.346440][T15386] ? syscall_enter_from_user_mode+0x27/0x70 [ 2890.352313][T15386] do_syscall_64+0x3a/0xb0 [ 2890.356756][T15386] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2890.362658][T15386] RIP: 0033:0x4196c4 [ 2890.366528][T15386] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2890.386114][T15386] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2890.394505][T15386] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2890.402452][T15386] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2890.410398][T15386] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2890.418365][T15386] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2890.426330][T15386] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2890.478604][ T8202] usb 4-1: Using ep0 maxpacket: 8 [ 2890.598657][ T8202] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2890.638530][ T2628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2890.688613][ T2628] usb 3-1: not running at top speed; connect to a high speed hub [ 2890.788569][ T2628] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 2890.797440][ T2628] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2890.807565][ T2628] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2890.908553][ T8202] usb 4-1: string descriptor 0 read error: -22 [ 2890.914909][ T8202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2890.923979][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2890.949790][T15362] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2890.979457][ T8202] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2891.128415][ T2628] usb 3-1: string descriptor 0 read error: -22 [ 2891.134699][ T2628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2891.143750][ T2628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 11:55:15 executing program 3: syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:15 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2891.190413][ T8202] usb 4-1: USB disconnect, device number 121 [ 2891.231401][ T33] audit: type=1800 audit(1625918116.004:1857): pid=15406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14563 res=0 errno=0 11:55:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x3, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0xa64c3) 11:55:16 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x200) 11:55:16 executing program 5 (fault-call:0 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000000000004, 0x721702) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x408800) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x2, 0x3]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xfff, 0x20802) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/204) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x166c3) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x8, 0x400) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000002c0)=""/22) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000240)=""/1) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/92) 11:55:16 executing program 3: syz_usb_connect$cdc_ecm(0x7, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2891.418415][T23877] usb 3-1: USB disconnect, device number 123 [ 2891.475960][T15417] FAULT_INJECTION: forcing a failure. [ 2891.475960][T15417] name failslab, interval 1, probability 0, space 0, times 0 [ 2891.488755][T15417] CPU: 0 PID: 15417 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2891.497518][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2891.507577][T15417] Call Trace: [ 2891.510858][T15417] dump_stack+0x143/0x1db [ 2891.515195][T15417] should_fail.cold+0x5/0xa [ 2891.519713][T15417] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2891.525444][T15417] should_failslab+0x5/0x10 [ 2891.529949][T15417] __kmalloc+0x72/0x310 [ 2891.534110][T15417] ? lock_chain_count+0x20/0x20 [ 2891.537064][ T33] audit: type=1800 audit(1625918116.264:1858): pid=15418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14658 res=0 errno=0 [ 2891.538977][T15417] tomoyo_realpath_from_path+0xc3/0x620 [ 2891.539010][T15417] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 11:55:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xc00, 0xa64c3) 11:55:16 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x3, 0xd, 0x802, 0x7, "460454111491006a174b2c33148c67f1bc3a8c5b770e6a35d0aaf03ca0383acd"}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/145) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/129) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000000)=0x7fff) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/173) [ 2891.572331][T15417] tomoyo_check_open_permission+0x272/0x380 [ 2891.578228][T15417] ? tomoyo_path_number_perm+0x590/0x590 [ 2891.583865][T15417] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2891.589854][T15417] ? path_get+0x5d/0x80 [ 2891.594015][T15417] ? lock_downgrade+0x6e0/0x6e0 [ 2891.599225][T15417] ? do_raw_spin_lock+0x120/0x2b0 [ 2891.604247][T15417] tomoyo_file_open+0xa3/0xd0 [ 2891.608925][T15417] security_file_open+0x52/0x4f0 [ 2891.613866][T15417] do_dentry_open+0x353/0x1090 [ 2891.618637][T15417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 11:55:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1200, 0xa64c3) [ 2891.624883][T15417] ? may_open+0x1f6/0x420 [ 2891.629219][T15417] path_openat+0x1c0e/0x27e0 [ 2891.633816][T15417] ? path_lookupat+0x850/0x850 [ 2891.638592][T15417] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2891.644585][T15417] do_filp_open+0x190/0x3d0 [ 2891.649108][T15417] ? may_open_dev+0xf0/0xf0 [ 2891.653643][T15417] ? do_raw_spin_lock+0x120/0x2b0 [ 2891.658675][T15417] ? rwlock_bug.part.0+0x90/0x90 [ 2891.663619][T15417] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2891.664777][ T33] audit: type=1800 audit(1625918116.264:1859): pid=15429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=13839 res=0 errno=0 [ 2891.669870][T15417] ? _find_next_bit+0x1e3/0x260 [ 2891.669899][T15417] ? _raw_spin_unlock+0x1a/0x30 [ 2891.669925][T15417] ? alloc_fd+0x2e6/0x660 [ 2891.669960][T15417] do_sys_openat2+0x16d/0x420 [ 2891.709808][T15417] ? build_open_flags+0x6f0/0x6f0 [ 2891.714843][T15417] ? __context_tracking_exit+0x9f/0xb0 [ 2891.720313][T15417] ? lock_downgrade+0x6e0/0x6e0 11:55:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0xa64c3) [ 2891.725175][T15417] __x64_sys_openat+0x13f/0x1f0 [ 2891.730032][T15417] ? __ia32_sys_open+0x1c0/0x1c0 [ 2891.734969][T15417] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2891.740964][T15417] ? syscall_enter_from_user_mode+0x27/0x70 [ 2891.746876][T15417] do_syscall_64+0x3a/0xb0 [ 2891.751302][T15417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2891.757208][T15417] RIP: 0033:0x4196c4 11:55:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0xa64c3) 11:55:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0xa64c3) [ 2891.761111][T15417] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2891.780719][T15417] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2891.789131][T15417] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2891.797106][T15417] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2891.805080][T15417] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2891.813049][T15417] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2891.821028][T15417] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2891.829182][T15417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2891.838643][ T33] audit: type=1800 audit(1625918116.604:1860): pid=15417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14690 res=0 errno=0 [ 2892.178269][T23877] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 2892.578323][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2892.618396][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2892.698398][T23877] usb 3-1: config 1 has an invalid interface descriptor of length 3, skipping [ 2892.707478][T23877] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2892.717594][T23877] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2892.958344][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2892.964538][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2892.973601][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 11:55:18 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x4, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:18 executing program 5 (fault-call:0 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:18 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xc2, 0x82241) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000140)=""/40) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/137) 11:55:18 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x4c8500) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x17d602) 11:55:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0xa64c3) 11:55:18 executing program 3: syz_usb_connect$cdc_ecm(0x9, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2893.238865][T23877] usb 3-1: USB disconnect, device number 124 11:55:18 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2fea, 0x4000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000300)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x101, 0x40) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000001340)=""/187) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x15, 0xde, &(0x7f0000000080)="4890845282ddd58f9ae0e1b4e327d4007515e37e3f7cea9348b9f069a27c65e4de4b52977aee3444c8f7907cc3e6c8e84c488c0e49196bee51e20d399364bfae0413b5d407133e22a3bc9877027c50f5b5443b729abe1b483ec58828a9fa2b89436128637bfe87f97382149eaea33c13193ac2e96ec986d2d5e410d6d23aefe8161423a835b13dc27b246ea4db18ccdd447f681672675a4374fe4c8dfac51520d8d136fb05a3808fa97ee1e134160fc0e4d7448d14f2a208c98bbd96608048c0036871ba6bc8046d29b9f99059c344f272bdba1a105097cfe86bd89d611e"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2893.317333][ T33] audit: type=1800 audit(1625918118.084:1861): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14988 res=0 errno=0 11:55:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x26a5, 0xa64c3) [ 2893.358406][T15461] FAULT_INJECTION: forcing a failure. [ 2893.358406][T15461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2893.371857][T15461] CPU: 1 PID: 15461 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2893.380630][T15461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2893.390687][T15461] Call Trace: [ 2893.393964][T15461] dump_stack+0x143/0x1db [ 2893.398335][T15461] should_fail.cold+0x5/0xa [ 2893.402851][T15461] prepare_alloc_pages+0x172/0x4f0 11:55:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0xa64c3) [ 2893.407985][T15461] ? mark_lock+0xef/0x17b0 [ 2893.412411][T15461] __alloc_pages+0x12f/0x4f0 [ 2893.417017][T15461] ? __alloc_pages_slowpath.constprop.0+0x2060/0x2060 [ 2893.423799][T15461] alloc_pages+0x18c/0x2a0 [ 2893.428230][T15461] allocate_slab+0x2c5/0x4c0 [ 2893.432821][T15461] ___slab_alloc+0x4bd/0x820 [ 2893.437421][T15461] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2893.443159][T15461] ? fs_reclaim_acquire+0xb2/0x160 [ 2893.448280][T15461] ? lock_downgrade+0x6e0/0x6e0 [ 2893.453149][T15461] ? tomoyo_realpath_from_path+0xc3/0x620 11:55:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0xa64c3) [ 2893.458885][T15461] ? __slab_alloc+0x68/0x80 [ 2893.463400][T15461] __slab_alloc+0x68/0x80 [ 2893.467751][T15461] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2893.473503][T15461] __kmalloc+0x2f4/0x310 [ 2893.477768][T15461] tomoyo_realpath_from_path+0xc3/0x620 [ 2893.483334][T15461] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2893.489579][T15461] tomoyo_check_open_permission+0x272/0x380 [ 2893.495480][T15461] ? tomoyo_path_number_perm+0x590/0x590 [ 2893.501292][T15461] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 11:55:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xa526, 0xa64c3) [ 2893.507284][T15461] ? path_get+0x5d/0x80 [ 2893.511561][T15461] ? lock_downgrade+0x6e0/0x6e0 [ 2893.516505][T15461] ? do_raw_spin_lock+0x120/0x2b0 [ 2893.521529][T15461] tomoyo_file_open+0xa3/0xd0 [ 2893.526210][T15461] security_file_open+0x52/0x4f0 [ 2893.531156][T15461] do_dentry_open+0x353/0x1090 [ 2893.535921][T15461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2893.542163][T15461] ? may_open+0x1f6/0x420 [ 2893.546494][T15461] path_openat+0x1c0e/0x27e0 [ 2893.551082][T15461] ? path_lookupat+0x850/0x850 11:55:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0xa64c3) [ 2893.555850][T15461] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2893.561842][T15461] do_filp_open+0x190/0x3d0 [ 2893.566343][T15461] ? may_open_dev+0xf0/0xf0 [ 2893.570843][T15461] ? do_raw_spin_lock+0x120/0x2b0 [ 2893.575874][T15461] ? rwlock_bug.part.0+0x90/0x90 [ 2893.580810][T15461] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2893.587059][T15461] ? _find_next_bit+0x1e3/0x260 [ 2893.591911][T15461] ? _raw_spin_unlock+0x1a/0x30 [ 2893.596750][T15461] ? alloc_fd+0x2e6/0x660 [ 2893.601090][T15461] do_sys_openat2+0x16d/0x420 [ 2893.605783][T15461] ? build_open_flags+0x6f0/0x6f0 [ 2893.610815][T15461] ? __context_tracking_exit+0x9f/0xb0 [ 2893.616293][T15461] ? lock_downgrade+0x6e0/0x6e0 [ 2893.621153][T15461] __x64_sys_openat+0x13f/0x1f0 [ 2893.626006][T15461] ? __ia32_sys_open+0x1c0/0x1c0 [ 2893.630939][T15461] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2893.636926][T15461] ? syscall_enter_from_user_mode+0x27/0x70 [ 2893.642927][T15461] do_syscall_64+0x3a/0xb0 [ 2893.647350][T15461] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2893.653240][T15461] RIP: 0033:0x4196c4 [ 2893.657161][T15461] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2893.676810][T15461] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2893.685208][T15461] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2893.693156][T15461] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2893.701108][T15461] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2893.709067][T15461] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2893.717016][T15461] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2894.048141][T23877] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 2894.448239][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2894.488237][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2894.568194][T23877] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2894.577044][T23877] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2894.585746][T23877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2894.595848][T23877] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2894.838187][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2894.844398][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2894.853458][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 11:55:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/228) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x6, 0x18, 0x1f, 0x2, "2d7a7d4233b81bc68226d409e6da6fe63a09d1b2a4800771389d9cbb9a92b85f"}) 11:55:19 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0xa64c3) 11:55:19 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000000c0)=""/108) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x32, 0x208802) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000080)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000002c0)=""/4096) 11:55:19 executing program 5 (fault-call:0 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:19 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x5, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:19 executing program 3: syz_usb_connect$cdc_ecm(0xa, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2895.118740][ T8202] usb 3-1: USB disconnect, device number 125 [ 2895.195944][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 2895.195958][ T33] audit: type=1800 audit(1625918119.965:1864): pid=15490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15017 res=0 errno=0 [ 2895.200127][T15493] FAULT_INJECTION: forcing a failure. [ 2895.200127][T15493] name failslab, interval 1, probability 0, space 0, times 0 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0xa64c3) [ 2895.219012][ T33] audit: type=1800 audit(1625918119.975:1865): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15020 res=0 errno=0 [ 2895.223350][T15493] CPU: 1 PID: 15493 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2895.265810][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.275957][T15493] Call Trace: [ 2895.279319][T15493] dump_stack+0x143/0x1db [ 2895.283653][T15493] should_fail.cold+0x5/0xa [ 2895.288172][T15493] ? integrity_inode_get+0x5a/0x270 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0xa64c3) 11:55:20 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x6, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2895.293384][T15493] should_failslab+0x5/0x10 [ 2895.297907][T15493] kmem_cache_alloc+0x5b/0x360 [ 2895.302687][T15493] ? ima_get_action+0x7a/0xa0 [ 2895.307368][T15493] integrity_inode_get+0x5a/0x270 [ 2895.312404][T15493] process_measurement+0x33d/0x17e0 [ 2895.317608][T15493] ? mmap_violation_check+0x1e0/0x1e0 [ 2895.322987][T15493] ? tomoyo_path_number_perm+0x590/0x590 [ 2895.328622][T15493] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2895.334615][T15493] ? find_held_lock+0x2d/0x110 [ 2895.339493][T15493] ? aa_get_task_label+0x25f/0x540 [ 2895.344606][T15493] ? lock_downgrade+0x6e0/0x6e0 [ 2895.349460][T15493] ? fsnotify+0x1070/0x1070 [ 2895.353965][T15493] ? ext4_file_write_iter+0x1980/0x1980 [ 2895.359509][T15493] ? path_get+0x5d/0x80 [ 2895.363666][T15493] ? aa_get_task_label+0x288/0x540 [ 2895.368783][T15493] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2895.375030][T15493] ? apparmor_task_getsecid+0xc2/0x110 [ 2895.380499][T15493] ima_file_check+0xb9/0x100 [ 2895.385092][T15493] ? process_measurement+0x17e0/0x17e0 [ 2895.390547][T15493] ? may_open+0x1f6/0x420 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0xa64c3) [ 2895.394882][T15493] path_openat+0x15b5/0x27e0 [ 2895.399484][T15493] ? path_lookupat+0x850/0x850 [ 2895.404262][T15493] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2895.410272][T15493] do_filp_open+0x190/0x3d0 [ 2895.414791][T15493] ? may_open_dev+0xf0/0xf0 [ 2895.419303][T15493] ? do_raw_spin_lock+0x120/0x2b0 [ 2895.424352][T15493] ? rwlock_bug.part.0+0x90/0x90 [ 2895.429292][T15493] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2895.435553][T15493] ? _find_next_bit+0x1e3/0x260 [ 2895.440409][T15493] ? _raw_spin_unlock+0x1a/0x30 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0xa64c3) [ 2895.445280][T15493] ? alloc_fd+0x2e6/0x660 [ 2895.449610][T15493] do_sys_openat2+0x16d/0x420 [ 2895.454295][T15493] ? build_open_flags+0x6f0/0x6f0 [ 2895.459327][T15493] ? __context_tracking_exit+0x9f/0xb0 [ 2895.464793][T15493] ? lock_downgrade+0x6e0/0x6e0 [ 2895.469681][T15493] __x64_sys_openat+0x13f/0x1f0 [ 2895.474532][T15493] ? __ia32_sys_open+0x1c0/0x1c0 [ 2895.479472][T15493] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2895.485458][T15493] ? syscall_enter_from_user_mode+0x27/0x70 [ 2895.491352][T15493] do_syscall_64+0x3a/0xb0 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0xa64c3) [ 2895.495765][T15493] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2895.501648][T15493] RIP: 0033:0x4196c4 [ 2895.505536][T15493] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2895.525150][T15493] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2895.533575][T15493] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 11:55:20 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xc2, 0x82241) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000140)=""/40) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/137) 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0xa64c3) 11:55:20 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000440)=""/113) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/50) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x20100) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000340)=""/87) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x8000035, 0x1, 0xd28, 0x20, 0x80001001, 0x1f8}) syz_open_dev$evdev(&(0x7f0000000000), 0x80000000000005, 0x800) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000002c0)=""/26) r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x6, 0x20000) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000400)=[0x81, 0x9]) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000000c0)=""/105) [ 2895.541652][T15493] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2895.549618][T15493] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2895.557569][T15493] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2895.565521][T15493] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 11:55:20 executing program 5 (fault-call:0 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2895.658693][T15515] FAULT_INJECTION: forcing a failure. [ 2895.658693][T15515] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.671517][T15515] CPU: 0 PID: 15515 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2895.680307][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.690368][T15515] Call Trace: [ 2895.693653][T15515] dump_stack+0x143/0x1db [ 2895.697996][T15515] should_fail.cold+0x5/0xa [ 2895.702512][T15515] should_failslab+0x5/0x10 [ 2895.707027][T15515] __kmalloc_track_caller+0x79/0x300 [ 2895.707832][ T33] audit: type=1800 audit(1625918120.445:1866): pid=15518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15018 res=0 errno=0 [ 2895.712323][T15515] ? ima_collect_measurement+0x342/0x570 [ 2895.712349][T15515] krealloc+0x7e/0xd0 [ 2895.712372][T15515] ima_collect_measurement+0x342/0x570 [ 2895.712394][T15515] ? ima_get_action+0xa0/0xa0 [ 2895.712412][T15515] ? ima_get_cache_status+0x1d0/0x1d0 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0xa64c3) [ 2895.712435][T15515] process_measurement+0xd1c/0x17e0 [ 2895.712457][T15515] ? mmap_violation_check+0x1e0/0x1e0 [ 2895.712478][T15515] ? tomoyo_path_number_perm+0x590/0x590 [ 2895.758930][ T33] audit: type=1800 audit(1625918120.535:1867): pid=15519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15003 res=0 errno=0 [ 2895.764003][T15515] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2895.764054][T15515] ? find_held_lock+0x2d/0x110 [ 2895.764078][T15515] ? aa_get_task_label+0x25f/0x540 [ 2895.812054][T15515] ? lock_downgrade+0x6e0/0x6e0 [ 2895.816917][T15515] ? fsnotify+0x1070/0x1070 [ 2895.821434][T15515] ? ext4_file_write_iter+0x1980/0x1980 [ 2895.826985][T15515] ? path_get+0x5d/0x80 [ 2895.831127][T15515] ? aa_get_task_label+0x288/0x540 [ 2895.836227][T15515] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2895.842469][T15515] ? apparmor_task_getsecid+0xc2/0x110 [ 2895.847917][T15515] ima_file_check+0xb9/0x100 [ 2895.852500][T15515] ? process_measurement+0x17e0/0x17e0 [ 2895.857947][T15515] ? may_open+0x1f6/0x420 [ 2895.862274][T15515] path_openat+0x15b5/0x27e0 [ 2895.866850][T15515] ? path_lookupat+0x850/0x850 [ 2895.871601][T15515] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2895.877587][T15515] do_filp_open+0x190/0x3d0 [ 2895.882087][T15515] ? may_open_dev+0xf0/0xf0 [ 2895.886565][T15515] ? do_raw_spin_lock+0x120/0x2b0 [ 2895.891574][T15515] ? rwlock_bug.part.0+0x90/0x90 [ 2895.896506][T15515] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2895.902726][T15515] ? _find_next_bit+0x1e3/0x260 [ 2895.907558][T15515] ? _raw_spin_unlock+0x1a/0x30 [ 2895.912394][T15515] ? alloc_fd+0x2e6/0x660 [ 2895.916706][T15515] do_sys_openat2+0x16d/0x420 [ 2895.921371][T15515] ? build_open_flags+0x6f0/0x6f0 [ 2895.926399][T15515] ? __context_tracking_exit+0x9f/0xb0 [ 2895.927999][ T8202] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 2895.931837][T15515] ? lock_downgrade+0x6e0/0x6e0 [ 2895.931866][T15515] __x64_sys_openat+0x13f/0x1f0 [ 2895.949137][T15515] ? __ia32_sys_open+0x1c0/0x1c0 [ 2895.954077][T15515] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2895.960067][T15515] ? syscall_enter_from_user_mode+0x27/0x70 [ 2895.965942][T15515] do_syscall_64+0x3a/0xb0 [ 2895.970337][T15515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2895.976216][T15515] RIP: 0033:0x4196c4 [ 2895.980099][T15515] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2895.999683][T15515] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2896.008074][T15515] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2896.016030][T15515] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2896.024001][T15515] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2896.031954][T15515] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2896.039903][T15515] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2896.053459][ T33] audit: type=1800 audit(1625918120.825:1868): pid=15515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15007 res=0 errno=0 11:55:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x1d, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0xa64c3) 11:55:20 executing program 5 (fault-call:0 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2896.200692][T15530] FAULT_INJECTION: forcing a failure. [ 2896.200692][T15530] name failslab, interval 1, probability 0, space 0, times 0 [ 2896.213503][T15530] CPU: 0 PID: 15530 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2896.222266][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2896.232316][T15530] Call Trace: [ 2896.235579][T15530] dump_stack+0x143/0x1db [ 2896.239893][T15530] should_fail.cold+0x5/0xa [ 2896.244392][T15530] ? audit_log_start.part.0+0x27d/0x760 [ 2896.249949][T15530] should_failslab+0x5/0x10 [ 2896.254463][T15530] kmem_cache_alloc+0x5b/0x360 [ 2896.259287][T15530] audit_log_start.part.0+0x27d/0x760 [ 2896.264642][T15530] ? audit_log_task_context+0x160/0x160 [ 2896.270172][T15530] ? audit_filter+0x319/0xb90 [ 2896.274827][T15530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2896.280809][T15530] ? audit_compare_dname_path+0x120/0x120 [ 2896.286507][T15530] ? lock_acquire+0x19d/0x700 [ 2896.291176][T15530] ? fs_reclaim_acquire+0xb2/0x160 [ 2896.296275][T15530] ? find_held_lock+0x2d/0x110 [ 2896.301026][T15530] audit_log_start+0x5f/0x90 [ 2896.305604][T15530] integrity_audit_message+0x100/0x430 [ 2896.311064][T15530] ? integrity_kernel_read+0xb0/0xb0 [ 2896.316387][T15530] integrity_audit_msg+0x3d/0x50 [ 2896.321301][T15530] ima_collect_measurement+0x3d4/0x570 [ 2896.326747][T15530] ? ima_get_action+0xa0/0xa0 [ 2896.331435][T15530] ? ima_get_cache_status+0x1d0/0x1d0 [ 2896.336791][T15530] process_measurement+0xd1c/0x17e0 [ 2896.341988][T15530] ? mmap_violation_check+0x1e0/0x1e0 [ 2896.347341][T15530] ? tomoyo_path_number_perm+0x590/0x590 [ 2896.347997][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2896.352958][T15530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2896.352989][T15530] ? find_held_lock+0x2d/0x110 [ 2896.353012][T15530] ? aa_get_task_label+0x25f/0x540 [ 2896.376510][T15530] ? lock_downgrade+0x6e0/0x6e0 [ 2896.381367][T15530] ? fsnotify+0x1070/0x1070 [ 2896.385852][T15530] ? ext4_file_write_iter+0x1980/0x1980 [ 2896.391375][T15530] ? path_get+0x5d/0x80 [ 2896.395511][T15530] ? aa_get_task_label+0x288/0x540 [ 2896.398091][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2896.400600][T15530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2896.400627][T15530] ? apparmor_task_getsecid+0xc2/0x110 [ 2896.419965][T15530] ima_file_check+0xb9/0x100 [ 2896.424555][T15530] ? process_measurement+0x17e0/0x17e0 [ 2896.430009][T15530] ? may_open+0x1f6/0x420 [ 2896.434319][T15530] path_openat+0x15b5/0x27e0 [ 2896.438906][T15530] ? path_lookupat+0x850/0x850 [ 2896.443648][T15530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2896.448005][ T2628] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 2896.449607][T15530] do_filp_open+0x190/0x3d0 [ 2896.461606][T15530] ? may_open_dev+0xf0/0xf0 [ 2896.466092][T15530] ? do_raw_spin_lock+0x120/0x2b0 [ 2896.471098][T15530] ? rwlock_bug.part.0+0x90/0x90 [ 2896.476014][T15530] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2896.482238][T15530] ? _find_next_bit+0x1e3/0x260 [ 2896.487074][T15530] ? _raw_spin_unlock+0x1a/0x30 [ 2896.488620][ T8202] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 2896.491910][T15530] ? alloc_fd+0x2e6/0x660 [ 2896.500783][ T8202] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2896.505036][T15530] do_sys_openat2+0x16d/0x420 [ 2896.515116][ T8202] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2896.519714][T15530] ? build_open_flags+0x6f0/0x6f0 [ 2896.519738][T15530] ? __context_tracking_exit+0x9f/0xb0 [ 2896.539081][T15530] ? lock_downgrade+0x6e0/0x6e0 [ 2896.543914][T15530] __x64_sys_openat+0x13f/0x1f0 [ 2896.548747][T15530] ? __ia32_sys_open+0x1c0/0x1c0 [ 2896.553678][T15530] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2896.559638][T15530] ? syscall_enter_from_user_mode+0x27/0x70 [ 2896.565512][T15530] do_syscall_64+0x3a/0xb0 [ 2896.569909][T15530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2896.575783][T15530] RIP: 0033:0x4196c4 [ 2896.579673][T15530] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2896.599260][T15530] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2896.607660][T15530] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2896.615627][T15530] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2896.623578][T15530] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2896.631528][T15530] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2896.639497][T15530] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2896.647576][T15530] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 2896.655325][T15530] audit: out of memory in audit_log_start [ 2896.777997][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2896.784190][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2896.793249][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2896.927962][ T2628] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2896.988344][ T2628] usb 5-1: not running at top speed; connect to a high speed hub 11:55:21 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x7, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:21 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x4, 0x1, 0x3ff, 0x6, 0x1, 0x1}) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x20000) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000080)={0x2, 0x2, 0x4, 0x2, 0x8b, 0xc2b}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:21 executing program 3: syz_usb_connect$cdc_ecm(0xf, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0xa64c3) 11:55:21 executing program 5 (fault-call:0 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2897.047824][T23877] usb 3-1: USB disconnect, device number 126 [ 2897.071837][ T2628] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2897.081572][ T2628] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2897.131577][ T33] audit: type=1800 audit(1625918121.895:1869): pid=15546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15037 res=0 errno=0 [ 2897.133721][T15544] FAULT_INJECTION: forcing a failure. [ 2897.133721][T15544] name failslab, interval 1, probability 0, space 0, times 0 [ 2897.165640][T15544] CPU: 0 PID: 15544 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 11:55:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0xa64c3) 11:55:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0xa64c3) [ 2897.174411][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2897.184466][T15544] Call Trace: [ 2897.187753][T15544] dump_stack+0x143/0x1db [ 2897.192090][T15544] should_fail.cold+0x5/0xa [ 2897.196604][T15544] ? __alloc_skb+0x20b/0x340 [ 2897.201225][T15544] should_failslab+0x5/0x10 [ 2897.205738][T15544] kmem_cache_alloc_node+0x55/0x390 [ 2897.210948][T15544] __alloc_skb+0x20b/0x340 [ 2897.215383][T15544] audit_log_start.part.0+0x2a2/0x760 [ 2897.220762][T15544] ? audit_log_task_context+0x160/0x160 [ 2897.226318][T15544] ? audit_filter+0x319/0xb90 11:55:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0xa64c3) [ 2897.231002][T15544] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.237002][T15544] ? audit_compare_dname_path+0x120/0x120 [ 2897.242744][T15544] ? lock_acquire+0x19d/0x700 [ 2897.247430][T15544] ? fs_reclaim_acquire+0xb2/0x160 [ 2897.252568][T15544] ? find_held_lock+0x2d/0x110 [ 2897.257343][T15544] audit_log_start+0x5f/0x90 [ 2897.261947][T15544] integrity_audit_message+0x100/0x430 [ 2897.267416][T15544] ? integrity_kernel_read+0xb0/0xb0 [ 2897.272713][T15544] integrity_audit_msg+0x3d/0x50 [ 2897.277662][T15544] ima_collect_measurement+0x3d4/0x570 [ 2897.283146][T15544] ? ima_get_action+0xa0/0xa0 [ 2897.287826][T15544] ? ima_get_cache_status+0x1d0/0x1d0 [ 2897.293200][T15544] process_measurement+0xd1c/0x17e0 [ 2897.298412][T15544] ? mmap_violation_check+0x1e0/0x1e0 [ 2897.303809][T15544] ? tomoyo_path_number_perm+0x590/0x590 [ 2897.309448][T15544] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.315443][T15544] ? find_held_lock+0x2d/0x110 [ 2897.320215][T15544] ? aa_get_task_label+0x25f/0x540 [ 2897.325345][T15544] ? lock_downgrade+0x6e0/0x6e0 11:55:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0xa64c3) [ 2897.330206][T15544] ? fsnotify+0x1070/0x1070 [ 2897.334717][T15544] ? ext4_file_write_iter+0x1980/0x1980 [ 2897.340270][T15544] ? path_get+0x5d/0x80 [ 2897.344432][T15544] ? aa_get_task_label+0x288/0x540 [ 2897.349548][T15544] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2897.355796][T15544] ? apparmor_task_getsecid+0xc2/0x110 [ 2897.361259][T15544] ima_file_check+0xb9/0x100 [ 2897.365848][T15544] ? process_measurement+0x17e0/0x17e0 [ 2897.369314][ T2628] usb 5-1: string descriptor 0 read error: -22 [ 2897.371305][T15544] ? may_open+0x1f6/0x420 [ 2897.377499][ T2628] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2897.381740][T15544] path_openat+0x15b5/0x27e0 [ 2897.381767][T15544] ? path_lookupat+0x850/0x850 [ 2897.381791][T15544] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.381818][T15544] do_filp_open+0x190/0x3d0 [ 2897.390834][ T2628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.395369][T15544] ? may_open_dev+0xf0/0xf0 [ 2897.422967][T15544] ? do_raw_spin_lock+0x120/0x2b0 [ 2897.428004][T15544] ? rwlock_bug.part.0+0x90/0x90 [ 2897.432961][T15544] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2897.439213][T15544] ? _find_next_bit+0x1e3/0x260 [ 2897.444272][T15544] ? _raw_spin_unlock+0x1a/0x30 [ 2897.449125][T15544] ? alloc_fd+0x2e6/0x660 [ 2897.453456][T15544] do_sys_openat2+0x16d/0x420 [ 2897.458135][T15544] ? build_open_flags+0x6f0/0x6f0 [ 2897.463177][T15544] ? __context_tracking_exit+0x9f/0xb0 [ 2897.468644][T15544] ? lock_downgrade+0x6e0/0x6e0 [ 2897.473518][T15544] __x64_sys_openat+0x13f/0x1f0 [ 2897.478375][T15544] ? __ia32_sys_open+0x1c0/0x1c0 [ 2897.478942][ T2628] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2897.483309][T15544] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2897.495844][T15544] ? syscall_enter_from_user_mode+0x27/0x70 [ 2897.501760][T15544] do_syscall_64+0x3a/0xb0 [ 2897.506176][T15544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2897.512073][T15544] RIP: 0033:0x4196c4 [ 2897.515965][T15544] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2897.535612][T15544] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2897.544004][T15544] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2897.551953][T15544] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2897.559929][T15544] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2897.567885][T15544] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2897.575856][T15544] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2897.583892][T15544] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 2897.591628][T15544] audit: out of memory in audit_log_start 11:55:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x1d, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0xa64c3) 11:55:22 executing program 5 (fault-call:0 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2897.692852][T28469] usb 5-1: USB disconnect, device number 92 [ 2897.736398][T15573] FAULT_INJECTION: forcing a failure. [ 2897.736398][T15573] name failslab, interval 1, probability 0, space 0, times 0 [ 2897.749105][T15573] CPU: 0 PID: 15573 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2897.757869][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2897.767929][T15573] Call Trace: [ 2897.771234][T15573] dump_stack+0x143/0x1db [ 2897.775567][T15573] should_fail.cold+0x5/0xa [ 2897.780082][T15573] should_failslab+0x5/0x10 [ 2897.784593][T15573] __kmalloc_node_track_caller+0x7d/0x330 [ 2897.790321][T15573] ? audit_log_start.part.0+0x2a2/0x760 [ 2897.795878][T15573] __alloc_skb+0xde/0x340 [ 2897.800216][T15573] audit_log_start.part.0+0x2a2/0x760 [ 2897.805594][T15573] ? audit_log_task_context+0x160/0x160 [ 2897.811133][T15573] ? audit_filter+0x319/0xb90 [ 2897.815798][T15573] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.821762][T15573] ? audit_compare_dname_path+0x120/0x120 [ 2897.827548][T15573] ? lock_acquire+0x19d/0x700 [ 2897.832229][T15573] ? fs_reclaim_acquire+0xb2/0x160 [ 2897.837322][T15573] ? find_held_lock+0x2d/0x110 [ 2897.842075][T15573] audit_log_start+0x5f/0x90 [ 2897.846682][T15573] integrity_audit_message+0x100/0x430 [ 2897.852128][T15573] ? integrity_kernel_read+0xb0/0xb0 [ 2897.857406][T15573] integrity_audit_msg+0x3d/0x50 [ 2897.862360][T15573] ima_collect_measurement+0x3d4/0x570 [ 2897.867815][T15573] ? ima_get_action+0xa0/0xa0 [ 2897.872476][T15573] ? ima_get_cache_status+0x1d0/0x1d0 [ 2897.877829][T15573] process_measurement+0xd1c/0x17e0 [ 2897.883013][T15573] ? mmap_violation_check+0x1e0/0x1e0 [ 2897.888377][T15573] ? tomoyo_path_number_perm+0x590/0x590 [ 2897.893987][T15573] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.899948][T15573] ? find_held_lock+0x2d/0x110 [ 2897.904691][T15573] ? aa_get_task_label+0x25f/0x540 [ 2897.909783][T15573] ? lock_downgrade+0x6e0/0x6e0 [ 2897.914613][T15573] ? fsnotify+0x1070/0x1070 [ 2897.919235][T15573] ? ext4_file_write_iter+0x1980/0x1980 [ 2897.924761][T15573] ? path_get+0x5d/0x80 [ 2897.928893][T15573] ? aa_get_task_label+0x288/0x540 [ 2897.933982][T15573] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2897.940210][T15573] ? apparmor_task_getsecid+0xc2/0x110 [ 2897.945680][T15573] ima_file_check+0xb9/0x100 [ 2897.950268][T15573] ? process_measurement+0x17e0/0x17e0 [ 2897.955724][T15573] ? may_open+0x1f6/0x420 [ 2897.960047][T15573] path_openat+0x15b5/0x27e0 [ 2897.964616][T15573] ? path_lookupat+0x850/0x850 [ 2897.969362][T15573] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.975368][T15573] do_filp_open+0x190/0x3d0 [ 2897.979847][T15573] ? may_open_dev+0xf0/0xf0 [ 2897.984327][T15573] ? do_raw_spin_lock+0x120/0x2b0 [ 2897.989335][T15573] ? rwlock_bug.part.0+0x90/0x90 [ 2897.994264][T15573] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2898.000500][T15573] ? _find_next_bit+0x1e3/0x260 [ 2898.005331][T15573] ? _raw_spin_unlock+0x1a/0x30 [ 2898.010341][T15573] ? alloc_fd+0x2e6/0x660 [ 2898.014662][T15573] do_sys_openat2+0x16d/0x420 [ 2898.019345][T15573] ? build_open_flags+0x6f0/0x6f0 [ 2898.024346][T15573] ? __context_tracking_exit+0x9f/0xb0 [ 2898.029784][T15573] ? lock_downgrade+0x6e0/0x6e0 [ 2898.034613][T15573] __x64_sys_openat+0x13f/0x1f0 [ 2898.039445][T15573] ? __ia32_sys_open+0x1c0/0x1c0 [ 2898.044359][T15573] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2898.050327][T15573] ? syscall_enter_from_user_mode+0x27/0x70 [ 2898.056199][T15573] do_syscall_64+0x3a/0xb0 [ 2898.060617][T15573] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2898.066493][T15573] RIP: 0033:0x4196c4 [ 2898.070374][T15573] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2898.089960][T15573] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2898.098376][T15573] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2898.106336][T15573] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2898.114301][T15573] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2898.122256][T15573] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2898.130211][T15573] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2898.337836][T23877] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 2898.487802][T28469] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 2898.758275][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2898.798240][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2898.878165][T23877] usb 3-1: config 1 has an invalid interface descriptor of length 7, skipping [ 2898.887036][T23877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2898.897145][T23877] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2898.906240][T28469] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2898.948634][T28469] usb 5-1: not running at top speed; connect to a high speed hub [ 2899.028008][T28469] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2899.037727][T28469] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2899.147813][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2899.154028][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2899.163222][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2899.287786][T28469] usb 5-1: string descriptor 0 read error: -22 [ 2899.294425][T28469] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2899.303507][T28469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2899.348488][T28469] cdc_ether: probe of 5-1:1.0 failed with error -22 11:55:24 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x10a01) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x7) 11:55:24 executing program 3: syz_usb_connect$cdc_ecm(0x63, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0xa64c3) 11:55:24 executing program 5 (fault-call:0 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:24 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x8, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2899.418181][ T8202] usb 3-1: USB disconnect, device number 127 11:55:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0xa64c3) [ 2899.495765][T15599] FAULT_INJECTION: forcing a failure. [ 2899.495765][T15599] name failslab, interval 1, probability 0, space 0, times 0 [ 2899.508809][T15599] CPU: 0 PID: 15599 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2899.517579][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2899.527647][T15599] Call Trace: [ 2899.530964][T15599] dump_stack+0x143/0x1db [ 2899.535303][T15599] should_fail.cold+0x5/0xa [ 2899.539829][T15599] ? aa_label_snxprint+0x4e4/0x910 [ 2899.544943][T15599] ? aa_label_asxprint+0x86/0x130 [ 2899.549975][T15599] should_failslab+0x5/0x10 [ 2899.554482][T15599] __kmalloc+0x72/0x310 [ 2899.558644][T15599] aa_label_asxprint+0x86/0x130 [ 2899.563499][T15599] apparmor_secid_to_secctx+0x84/0x150 [ 2899.568961][T15599] security_secid_to_secctx+0x6c/0xb0 [ 2899.574337][T15599] audit_log_task_context+0xec/0x160 [ 2899.579654][T15599] ? audit_log_format+0x110/0x110 [ 2899.581201][T22565] usb 5-1: USB disconnect, device number 93 [ 2899.584680][T15599] ? from_kuid+0x85/0xc0 11:55:24 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x6, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2899.584705][T15599] integrity_audit_message+0x250/0x430 [ 2899.584728][T15599] ? integrity_kernel_read+0xb0/0xb0 [ 2899.584749][T15599] integrity_audit_msg+0x3d/0x50 [ 2899.610466][T15599] ima_collect_measurement+0x3d4/0x570 [ 2899.615928][T15599] ? ima_get_action+0xa0/0xa0 [ 2899.620607][T15599] ? ima_get_cache_status+0x1d0/0x1d0 [ 2899.625988][T15599] process_measurement+0xd1c/0x17e0 [ 2899.631200][T15599] ? mmap_violation_check+0x1e0/0x1e0 [ 2899.636582][T15599] ? tomoyo_path_number_perm+0x590/0x590 [ 2899.642225][T15599] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2899.648219][T15599] ? find_held_lock+0x2d/0x110 [ 2899.652987][T15599] ? aa_get_task_label+0x25f/0x540 [ 2899.658110][T15599] ? lock_downgrade+0x6e0/0x6e0 [ 2899.662970][T15599] ? fsnotify+0x1070/0x1070 [ 2899.667487][T15599] ? ext4_file_write_iter+0x1980/0x1980 [ 2899.673042][T15599] ? path_get+0x5d/0x80 [ 2899.677211][T15599] ? aa_get_task_label+0x288/0x540 [ 2899.682338][T15599] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2899.688586][T15599] ? apparmor_task_getsecid+0xc2/0x110 11:55:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0xa64c3) [ 2899.694047][T15599] ima_file_check+0xb9/0x100 [ 2899.698643][T15599] ? process_measurement+0x17e0/0x17e0 [ 2899.704111][T15599] ? may_open+0x1f6/0x420 [ 2899.708450][T15599] path_openat+0x15b5/0x27e0 [ 2899.713060][T15599] ? path_lookupat+0x850/0x850 [ 2899.717839][T15599] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2899.723839][T15599] do_filp_open+0x190/0x3d0 [ 2899.728350][T15599] ? may_open_dev+0xf0/0xf0 [ 2899.732861][T15599] ? do_raw_spin_lock+0x120/0x2b0 [ 2899.737894][T15599] ? rwlock_bug.part.0+0x90/0x90 11:55:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0xa64c3) [ 2899.742840][T15599] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2899.749113][T15599] ? _find_next_bit+0x1e3/0x260 [ 2899.753976][T15599] ? _raw_spin_unlock+0x1a/0x30 [ 2899.758852][T15599] ? alloc_fd+0x2e6/0x660 [ 2899.763184][T15599] do_sys_openat2+0x16d/0x420 [ 2899.767864][T15599] ? build_open_flags+0x6f0/0x6f0 [ 2899.772905][T15599] ? __context_tracking_exit+0x9f/0xb0 [ 2899.778376][T15599] ? lock_downgrade+0x6e0/0x6e0 [ 2899.783237][T15599] __x64_sys_openat+0x13f/0x1f0 [ 2899.788097][T15599] ? __ia32_sys_open+0x1c0/0x1c0 11:55:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xa5260000, 0xa64c3) [ 2899.793041][T15599] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2899.799059][T15599] ? syscall_enter_from_user_mode+0x27/0x70 [ 2899.804972][T15599] do_syscall_64+0x3a/0xb0 [ 2899.809398][T15599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2899.815305][T15599] RIP: 0033:0x4196c4 [ 2899.819217][T15599] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2899.838831][T15599] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 11:55:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0xa64c3) 11:55:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0xa64c3) [ 2899.847249][T15599] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2899.855234][T15599] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2899.863230][T15599] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2899.871203][T15599] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2899.879176][T15599] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 11:55:24 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/93) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000002c0)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0xb2240) [ 2900.187646][T22565] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 2900.237660][ T8202] usb 3-1: new full-speed USB device number 2 using dummy_hcd 11:55:25 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x25, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:25 executing program 5 (fault-call:0 fault-nth:17): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0xa64c3) [ 2900.346939][T15633] FAULT_INJECTION: forcing a failure. [ 2900.346939][T15633] name failslab, interval 1, probability 0, space 0, times 0 [ 2900.359740][T15633] CPU: 0 PID: 15633 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2900.368508][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2900.378566][T15633] Call Trace: [ 2900.381838][T15633] dump_stack+0x143/0x1db [ 2900.386146][T15633] should_fail.cold+0x5/0xa [ 2900.390628][T15633] ? aa_label_snxprint+0x4e4/0x910 [ 2900.395721][T15633] ? aa_label_asxprint+0x86/0x130 [ 2900.400742][T15633] should_failslab+0x5/0x10 [ 2900.405228][T15633] __kmalloc+0x72/0x310 [ 2900.409365][T15633] aa_label_asxprint+0x86/0x130 [ 2900.414202][T15633] apparmor_secid_to_secctx+0x84/0x150 [ 2900.419649][T15633] security_secid_to_secctx+0x6c/0xb0 [ 2900.425008][T15633] audit_log_task_context+0xec/0x160 [ 2900.430283][T15633] ? audit_log_format+0x110/0x110 [ 2900.435308][T15633] ? from_kuid+0x85/0xc0 [ 2900.439541][T15633] integrity_audit_message+0x250/0x430 [ 2900.444983][T15633] ? integrity_kernel_read+0xb0/0xb0 [ 2900.450252][T15633] integrity_audit_msg+0x3d/0x50 [ 2900.455170][T15633] ima_collect_measurement+0x3d4/0x570 [ 2900.460610][T15633] ? ima_get_action+0xa0/0xa0 [ 2900.465265][T15633] ? ima_get_cache_status+0x1d0/0x1d0 [ 2900.470623][T15633] process_measurement+0xd1c/0x17e0 [ 2900.475808][T15633] ? mmap_violation_check+0x1e0/0x1e0 [ 2900.481166][T15633] ? tomoyo_path_number_perm+0x590/0x590 [ 2900.486809][T15633] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2900.492777][T15633] ? find_held_lock+0x2d/0x110 [ 2900.497528][T15633] ? aa_get_task_label+0x25f/0x540 [ 2900.502647][T15633] ? lock_downgrade+0x6e0/0x6e0 [ 2900.507497][T15633] ? fsnotify+0x1070/0x1070 [ 2900.511989][T15633] ? ext4_file_write_iter+0x1980/0x1980 [ 2900.517516][T15633] ? path_get+0x5d/0x80 [ 2900.521671][T15633] ? aa_get_task_label+0x288/0x540 [ 2900.526770][T15633] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2900.533001][T15633] ? apparmor_task_getsecid+0xc2/0x110 [ 2900.538455][T15633] ima_file_check+0xb9/0x100 [ 2900.543030][T15633] ? process_measurement+0x17e0/0x17e0 [ 2900.548476][T15633] ? may_open+0x1f6/0x420 [ 2900.552821][T15633] path_openat+0x15b5/0x27e0 [ 2900.557401][T15633] ? path_lookupat+0x850/0x850 [ 2900.562174][T15633] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2900.568143][T15633] do_filp_open+0x190/0x3d0 [ 2900.572629][T15633] ? may_open_dev+0xf0/0xf0 [ 2900.577113][T15633] ? do_raw_spin_lock+0x120/0x2b0 [ 2900.582121][T15633] ? rwlock_bug.part.0+0x90/0x90 [ 2900.587035][T15633] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2900.587638][T22565] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2900.593263][T15633] ? _find_next_bit+0x1e3/0x260 [ 2900.593306][T15633] ? _raw_spin_unlock+0x1a/0x30 [ 2900.593334][T15633] ? alloc_fd+0x2e6/0x660 [ 2900.614896][T15633] do_sys_openat2+0x16d/0x420 [ 2900.618338][T16126] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 2900.619634][T15633] ? build_open_flags+0x6f0/0x6f0 [ 2900.632252][T15633] ? __context_tracking_exit+0x9f/0xb0 [ 2900.637731][T15633] ? lock_downgrade+0x6e0/0x6e0 [ 2900.637951][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2900.642582][T15633] __x64_sys_openat+0x13f/0x1f0 [ 2900.642610][T15633] ? __ia32_sys_open+0x1c0/0x1c0 [ 2900.642652][T15633] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2900.650877][T22565] usb 5-1: not running at top speed; connect to a high speed hub [ 2900.655092][T15633] ? syscall_enter_from_user_mode+0x27/0x70 [ 2900.655122][T15633] do_syscall_64+0x3a/0xb0 [ 2900.683904][T15633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2900.689781][T15633] RIP: 0033:0x4196c4 [ 2900.693649][T15633] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2900.698290][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2900.713237][T15633] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2900.713264][T15633] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2900.713280][T15633] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2900.713296][T15633] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2900.713314][T15633] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2900.738331][T22565] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 2900.745302][T15633] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2900.753294][T22565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2900.761262][T15633] audit_panic: 6 callbacks suppressed [ 2900.761274][T15633] audit: error in audit_log_task_context [ 2900.761607][ T33] audit: type=1800 audit(1625918125.105:1873): pid=15633 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14453 res=0 errno=0 [ 2900.770159][T22565] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2900.867652][ T8202] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2900.876592][ T8202] usb 3-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 2900.886897][ T8202] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2901.067681][T16126] usb 4-1: config index 0 descriptor too short (expected 59, got 19) [ 2901.075910][T16126] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 2901.087700][T22565] usb 5-1: string descriptor 0 read error: -22 [ 2901.093937][T22565] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2901.103063][T22565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2901.147778][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2901.153990][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2901.163213][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2901.327600][T16126] usb 4-1: string descriptor 0 read error: -22 [ 2901.334011][T16126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2901.343131][T16126] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2901.379210][T28469] usb 5-1: USB disconnect, device number 94 [ 2901.388556][T16126] usb 4-1: bad CDC descriptors 11:55:26 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0xa, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:26 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa44c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1000, 0x8100) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/243) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000002c0)={0x9, 0x6, 0x8000, 0x5, 0x7fff, 0xfffffff7}) 11:55:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0xa64c3) 11:55:26 executing program 5 (fault-call:0 fault-nth:18): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:26 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x10a01) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x7) [ 2901.434833][T23877] usb 3-1: USB disconnect, device number 2 [ 2901.509688][ T33] audit: type=1800 audit(1625918126.275:1874): pid=15662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15234 res=0 errno=0 [ 2901.529736][T15665] FAULT_INJECTION: forcing a failure. [ 2901.529736][T15665] name failslab, interval 1, probability 0, space 0, times 0 [ 2901.543815][T15665] CPU: 1 PID: 15665 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2901.552588][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2901.562649][T15665] Call Trace: [ 2901.565940][T15665] dump_stack+0x143/0x1db [ 2901.567574][ T33] audit: type=1800 audit(1625918126.295:1875): pid=15664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15265 res=0 errno=0 [ 2901.570271][T15665] should_fail.cold+0x5/0xa [ 2901.570301][T15665] ? ima_alloc_init_template+0xb4/0x750 [ 2901.601548][T15665] should_failslab+0x5/0x10 [ 2901.606059][T15665] __kmalloc+0x72/0x310 [ 2901.610229][T15665] ima_alloc_init_template+0xb4/0x750 [ 2901.615622][T15665] ? dentry_path_raw+0x30/0x30 [ 2901.620402][T15665] ima_store_measurement+0x1d7/0x5a0 [ 2901.625703][T15665] ? ima_collect_measurement+0x570/0x570 [ 2901.627092][ T6155] usb 4-1: USB disconnect, device number 122 [ 2901.631346][T15665] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2901.631381][T15665] ? d_absolute_path+0x12e/0x180 [ 2901.631408][T15665] ? __d_path+0x160/0x160 [ 2901.645332][ T33] audit: type=1800 audit(1625918126.295:1876): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15281 res=0 errno=0 [ 2901.648506][T15665] ? kmem_cache_alloc+0x32c/0x360 [ 2901.648538][T15665] process_measurement+0x11fb/0x17e0 [ 2901.648566][T15665] ? mmap_violation_check+0x1e0/0x1e0 [ 2901.689723][T15665] ? tomoyo_path_number_perm+0x590/0x590 [ 2901.695365][T15665] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2901.701355][T15665] ? find_held_lock+0x2d/0x110 11:55:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0xa64c3) 11:55:26 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000440)=""/113) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/50) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x20100) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000340)=""/87) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x8000035, 0x1, 0xd28, 0x20, 0x80001001, 0x1f8}) syz_open_dev$evdev(&(0x7f0000000000), 0x80000000000005, 0x800) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000002c0)=""/26) r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x6, 0x20000) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000400)=[0x81, 0x9]) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000000c0)=""/105) 11:55:26 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2901.706126][T15665] ? aa_get_task_label+0x25f/0x540 [ 2901.711265][T15665] ? lock_downgrade+0x6e0/0x6e0 [ 2901.716128][T15665] ? fsnotify+0x1070/0x1070 [ 2901.720641][T15665] ? ext4_file_write_iter+0x1980/0x1980 [ 2901.726196][T15665] ? path_get+0x5d/0x80 [ 2901.730367][T15665] ? aa_get_task_label+0x288/0x540 [ 2901.735495][T15665] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2901.741755][T15665] ? apparmor_task_getsecid+0xc2/0x110 [ 2901.747227][T15665] ima_file_check+0xb9/0x100 [ 2901.751843][T15665] ? process_measurement+0x17e0/0x17e0 [ 2901.757314][T15665] ? may_open+0x1f6/0x420 [ 2901.761655][T15665] path_openat+0x15b5/0x27e0 [ 2901.766259][T15665] ? path_lookupat+0x850/0x850 [ 2901.771038][T15665] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2901.777027][T15665] do_filp_open+0x190/0x3d0 [ 2901.781537][T15665] ? may_open_dev+0xf0/0xf0 [ 2901.786060][T15665] ? do_raw_spin_lock+0x120/0x2b0 [ 2901.791089][T15665] ? rwlock_bug.part.0+0x90/0x90 [ 2901.796035][T15665] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2901.802303][T15665] ? _find_next_bit+0x1e3/0x260 11:55:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0xa64c3) [ 2901.807168][T15665] ? _raw_spin_unlock+0x1a/0x30 [ 2901.812028][T15665] ? alloc_fd+0x2e6/0x660 [ 2901.816367][T15665] do_sys_openat2+0x16d/0x420 [ 2901.821045][T15665] ? build_open_flags+0x6f0/0x6f0 [ 2901.826074][T15665] ? __context_tracking_exit+0x9f/0xb0 [ 2901.831547][T15665] ? lock_downgrade+0x6e0/0x6e0 [ 2901.836413][T15665] __x64_sys_openat+0x13f/0x1f0 [ 2901.841275][T15665] ? __ia32_sys_open+0x1c0/0x1c0 [ 2901.846227][T15665] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2901.852227][T15665] ? syscall_enter_from_user_mode+0x27/0x70 [ 2901.858141][T15665] do_syscall_64+0x3a/0xb0 [ 2901.861040][ T33] audit: type=1800 audit(1625918126.315:1877): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15001 res=0 errno=0 [ 2901.862567][T15665] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2901.862596][T15665] RIP: 0033:0x4196c4 [ 2901.862612][T15665] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2901.913189][T15665] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2901.921624][T15665] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2901.929603][T15665] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2901.937581][T15665] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2901.945560][T15665] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2901.953539][T15665] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 11:55:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0xa64c3) 11:55:26 executing program 5 (fault-call:0 fault-nth:19): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:26 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0x25, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2901.965147][ T33] audit: type=1804 audit(1625918126.735:1878): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723431363833383934322F73797A6B616C6C65722E6C466C4D39372F353230302F48C7C060 dev="sda1" ino=15281 res=0 errno=0 [ 2902.056603][ T33] audit: type=1800 audit(1625918126.815:1879): pid=15694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15058 res=0 errno=0 [ 2902.075277][T15694] FAULT_INJECTION: forcing a failure. [ 2902.075277][T15694] name failslab, interval 1, probability 0, space 0, times 0 [ 2902.090932][T15694] CPU: 1 PID: 15694 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2902.099697][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2902.109758][T15694] Call Trace: [ 2902.113037][T15694] dump_stack+0x143/0x1db [ 2902.117375][T15694] should_fail.cold+0x5/0xa [ 2902.121890][T15694] ? ima_alloc_init_template+0x199/0x750 [ 2902.127541][T15694] should_failslab+0x5/0x10 [ 2902.132062][T15694] __kmalloc+0x72/0x310 [ 2902.136230][T15694] ima_alloc_init_template+0x199/0x750 [ 2902.141684][T15694] ? dentry_path_raw+0x30/0x30 [ 2902.146472][T15694] ? ___slab_alloc+0x3bf/0x820 [ 2902.151227][T15694] ima_store_measurement+0x1d7/0x5a0 [ 2902.156522][T15694] ? ima_collect_measurement+0x570/0x570 [ 2902.162143][T15694] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2902.168389][T15694] ? d_absolute_path+0x12e/0x180 [ 2902.173307][T15694] ? __d_path+0x160/0x160 [ 2902.177630][T15694] ? __slab_alloc+0x70/0x80 [ 2902.182117][T15694] ? kmem_cache_alloc+0x32c/0x360 [ 2902.187171][T15694] process_measurement+0x11fb/0x17e0 [ 2902.192478][T15694] ? mmap_violation_check+0x1e0/0x1e0 [ 2902.197835][T15694] ? tomoyo_path_number_perm+0x590/0x590 [ 2902.203482][T15694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2902.209450][T15694] ? find_held_lock+0x2d/0x110 [ 2902.214198][T15694] ? aa_get_task_label+0x25f/0x540 [ 2902.219302][T15694] ? lock_downgrade+0x6e0/0x6e0 [ 2902.224135][T15694] ? ext4_file_write_iter+0x1980/0x1980 [ 2902.229665][T15694] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2902.235806][T15694] ? trace_hardirqs_on+0x5b/0x1a0 [ 2902.240819][T15694] ? aa_get_task_label+0x288/0x540 [ 2902.245918][T15694] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2902.252149][T15694] ? apparmor_task_getsecid+0xc2/0x110 [ 2902.257615][T15694] ima_file_check+0xb9/0x100 [ 2902.262207][T15694] ? process_measurement+0x17e0/0x17e0 [ 2902.267643][T15694] ? may_open+0x1f6/0x420 [ 2902.271965][T15694] path_openat+0x15b5/0x27e0 [ 2902.276566][T15694] ? path_lookupat+0x850/0x850 [ 2902.281401][T15694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2902.287375][T15694] do_filp_open+0x190/0x3d0 [ 2902.291873][T15694] ? may_open_dev+0xf0/0xf0 [ 2902.296372][T15694] ? do_raw_spin_lock+0x120/0x2b0 [ 2902.301376][T15694] ? rwlock_bug.part.0+0x90/0x90 [ 2902.306295][T15694] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2902.312526][T15694] ? _find_next_bit+0x1e3/0x260 [ 2902.317456][T15694] ? _raw_spin_unlock+0x1a/0x30 [ 2902.322292][T15694] ? alloc_fd+0x2e6/0x660 [ 2902.326607][T15694] do_sys_openat2+0x16d/0x420 [ 2902.331277][T15694] ? build_open_flags+0x6f0/0x6f0 [ 2902.336301][T15694] ? __context_tracking_exit+0x9f/0xb0 [ 2902.341749][T15694] ? lock_downgrade+0x6e0/0x6e0 [ 2902.346601][T15694] __x64_sys_openat+0x13f/0x1f0 [ 2902.351442][T15694] ? __ia32_sys_open+0x1c0/0x1c0 [ 2902.356365][T15694] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2902.362345][T15694] ? syscall_enter_from_user_mode+0x27/0x70 [ 2902.368224][T15694] do_syscall_64+0x3a/0xb0 [ 2902.372643][T15694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2902.378537][T15694] RIP: 0033:0x4196c4 [ 2902.382429][T15694] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2902.402021][T15694] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2902.410502][T15694] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2902.418488][T15694] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2902.426439][T15694] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2902.434400][T15694] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2902.442371][T15694] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2902.451425][ T33] audit: type=1804 audit(1625918127.225:1880): pid=15694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723431363833383934322F73797A6B616C6C65722E6C466C4D39372F353230312F48C7C060 dev="sda1" ino=15058 res=0 errno=0 [ 2902.737454][ T6155] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 2902.745148][T23877] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 2902.787522][T28469] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 2903.017483][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2903.147448][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2903.155140][T28469] usb 5-1: config index 0 descriptor too short (expected 59, got 19) [ 2903.163313][T28469] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 2903.197514][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2903.287849][T23877] usb 3-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 2903.298061][T23877] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2903.311000][T23877] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2903.417429][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2903.437498][T28469] usb 5-1: string descriptor 0 read error: -22 [ 2903.443713][T28469] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2903.452805][T28469] usb 5-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2903.498162][T28469] usb 5-1: bad CDC descriptors [ 2903.587483][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2903.593724][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2903.602829][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2903.648536][T23877] cdc_ether 3-1:1.0: skipping garbage [ 2903.653947][T23877] usb 3-1: bad CDC descriptors [ 2903.687393][ T6155] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 2903.715709][T23877] usb 5-1: USB disconnect, device number 95 11:55:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0xb, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:28 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x1, 0x200, 0x80}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0xa64c3) 11:55:28 executing program 5 (fault-call:0 fault-nth:20): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x1d, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2903.859061][T16126] usb 3-1: USB disconnect, device number 3 [ 2903.936432][ T33] audit: type=1800 audit(1625918128.695:1881): pid=15726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15378 res=0 errno=0 [ 2903.966860][T15730] FAULT_INJECTION: forcing a failure. [ 2903.966860][T15730] name failslab, interval 1, probability 0, space 0, times 0 [ 2903.979626][T15730] CPU: 1 PID: 15730 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2903.988393][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2903.989084][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2903.998456][T15730] Call Trace: [ 2903.998466][T15730] dump_stack+0x143/0x1db [ 2903.998489][T15730] should_fail.cold+0x5/0xa [ 2904.016727][T15730] ? ima_write_template_field_data+0x47/0x1c0 [ 2904.022812][T15730] should_failslab+0x5/0x10 [ 2904.027327][T15730] __kmalloc+0x72/0x310 11:55:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0xa64c3) [ 2904.031497][T15730] ? ima_alloc_init_template+0x199/0x750 [ 2904.037138][T15730] ima_write_template_field_data+0x47/0x1c0 [ 2904.043049][T15730] ima_eventdigest_init_common+0xed/0x250 [ 2904.048787][T15730] ? ima_write_template_field_data+0x1c0/0x1c0 [ 2904.054958][T15730] ? lock_acquire+0x19d/0x700 [ 2904.059654][T15730] ? fs_reclaim_acquire+0xb2/0x160 [ 2904.064783][T15730] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2904.070351][T15730] ima_alloc_init_template+0x39e/0x750 [ 2904.075834][T15730] ima_store_measurement+0x1d7/0x5a0 [ 2904.081132][T15730] ? ima_collect_measurement+0x570/0x570 11:55:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0xa64c3) [ 2904.086768][T15730] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2904.093024][T15730] ? d_absolute_path+0x12e/0x180 [ 2904.097971][T15730] ? __d_path+0x160/0x160 [ 2904.102330][T15730] ? kmem_cache_alloc+0x32c/0x360 [ 2904.107365][T15730] process_measurement+0x11fb/0x17e0 [ 2904.112673][T15730] ? mmap_violation_check+0x1e0/0x1e0 [ 2904.118055][T15730] ? tomoyo_path_number_perm+0x590/0x590 [ 2904.123691][T15730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2904.129686][T15730] ? find_held_lock+0x2d/0x110 [ 2904.134454][T15730] ? aa_get_task_label+0x25f/0x540 [ 2904.139583][T15730] ? lock_downgrade+0x6e0/0x6e0 [ 2904.144445][T15730] ? fsnotify+0x1070/0x1070 [ 2904.148957][T15730] ? ext4_file_write_iter+0x1980/0x1980 [ 2904.154488][T15730] ? path_get+0x5d/0x80 [ 2904.158631][T15730] ? aa_get_task_label+0x288/0x540 [ 2904.163736][T15730] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2904.169987][T15730] ? apparmor_task_getsecid+0xc2/0x110 [ 2904.175430][T15730] ima_file_check+0xb9/0x100 [ 2904.179997][T15730] ? process_measurement+0x17e0/0x17e0 [ 2904.185433][T15730] ? may_open+0x1f6/0x420 [ 2904.189744][T15730] path_openat+0x15b5/0x27e0 [ 2904.194316][T15730] ? path_lookupat+0x850/0x850 [ 2904.199067][T15730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2904.205030][T15730] do_filp_open+0x190/0x3d0 [ 2904.209519][T15730] ? may_open_dev+0xf0/0xf0 [ 2904.214001][T15730] ? do_raw_spin_lock+0x120/0x2b0 [ 2904.219007][T15730] ? rwlock_bug.part.0+0x90/0x90 [ 2904.223949][T15730] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2904.230179][T15730] ? _find_next_bit+0x1e3/0x260 [ 2904.235010][T15730] ? _raw_spin_unlock+0x1a/0x30 [ 2904.239840][T15730] ? alloc_fd+0x2e6/0x660 [ 2904.244188][T15730] do_sys_openat2+0x16d/0x420 [ 2904.248855][T15730] ? build_open_flags+0x6f0/0x6f0 [ 2904.253870][T15730] ? __context_tracking_exit+0x9f/0xb0 [ 2904.259315][T15730] ? lock_downgrade+0x6e0/0x6e0 [ 2904.264158][T15730] __x64_sys_openat+0x13f/0x1f0 [ 2904.269009][T15730] ? __ia32_sys_open+0x1c0/0x1c0 [ 2904.273927][T15730] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2904.279892][T15730] ? syscall_enter_from_user_mode+0x27/0x70 [ 2904.285768][T15730] do_syscall_64+0x3a/0xb0 [ 2904.290183][T15730] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2904.296083][T15730] RIP: 0033:0x4196c4 [ 2904.299975][T15730] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2904.319704][T15730] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2904.328100][T15730] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2904.336062][T15730] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2904.344014][T15730] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2904.351969][T15730] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2904.359931][T15730] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2904.527874][T23877] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 2904.647317][ T6155] usb 4-1: device descriptor read/64, error 18 11:55:29 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0xa64c3) 11:55:29 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/219) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0xc800) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/103) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x1f, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:29 executing program 5 (fault-call:0 fault-nth:21): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2904.717276][T16126] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 2904.779914][ T6155] usb usb4-port1: attempt power cycle [ 2904.811815][T15750] FAULT_INJECTION: forcing a failure. [ 2904.811815][T15750] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.824551][T15750] CPU: 0 PID: 15750 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2904.833318][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2904.843387][T15750] Call Trace: [ 2904.846674][T15750] dump_stack+0x143/0x1db [ 2904.851021][T15750] should_fail.cold+0x5/0xa [ 2904.855548][T15750] ? ima_write_template_field_data+0xeb/0x1c0 [ 2904.861633][T15750] should_failslab+0x5/0x10 [ 2904.866241][T15750] __kmalloc+0x72/0x310 [ 2904.870410][T15750] ima_write_template_field_data+0xeb/0x1c0 11:55:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0xa64c3) [ 2904.876309][T15750] ima_alloc_init_template+0x39e/0x750 [ 2904.881795][T15750] ima_store_measurement+0x1d7/0x5a0 [ 2904.887087][T15750] ? ima_collect_measurement+0x570/0x570 [ 2904.892711][T15750] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2904.898945][T15750] ? d_absolute_path+0x12e/0x180 [ 2904.903869][T15750] ? __d_path+0x160/0x160 [ 2904.908198][T15750] ? __slab_alloc+0x70/0x80 [ 2904.912681][T15750] ? kmem_cache_alloc+0x32c/0x360 [ 2904.917765][T15750] process_measurement+0x11fb/0x17e0 [ 2904.923032][T15750] ? mmap_violation_check+0x1e0/0x1e0 [ 2904.928402][T15750] ? tomoyo_path_number_perm+0x590/0x590 [ 2904.934060][T15750] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2904.940030][T15750] ? find_held_lock+0x2d/0x110 [ 2904.944775][T15750] ? aa_get_task_label+0x25f/0x540 [ 2904.949873][T15750] ? lock_downgrade+0x6e0/0x6e0 [ 2904.954710][T15750] ? fsnotify+0x1070/0x1070 [ 2904.959200][T15750] ? ext4_file_write_iter+0x1980/0x1980 [ 2904.964731][T15750] ? path_get+0x5d/0x80 [ 2904.968878][T15750] ? aa_get_task_label+0x288/0x540 [ 2904.973981][T15750] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2904.980208][T15750] ? apparmor_task_getsecid+0xc2/0x110 [ 2904.985647][T15750] ima_file_check+0xb9/0x100 [ 2904.990214][T15750] ? process_measurement+0x17e0/0x17e0 [ 2904.995648][T15750] ? may_open+0x1f6/0x420 [ 2904.999960][T15750] path_openat+0x15b5/0x27e0 [ 2905.004539][T15750] ? path_lookupat+0x850/0x850 [ 2905.009299][T15750] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2905.015298][T15750] do_filp_open+0x190/0x3d0 [ 2905.019800][T15750] ? may_open_dev+0xf0/0xf0 [ 2905.024288][T15750] ? do_raw_spin_lock+0x120/0x2b0 [ 2905.029315][T15750] ? rwlock_bug.part.0+0x90/0x90 [ 2905.034241][T15750] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2905.040490][T15750] ? _find_next_bit+0x1e3/0x260 [ 2905.045328][T15750] ? _raw_spin_unlock+0x1a/0x30 [ 2905.050190][T15750] ? alloc_fd+0x2e6/0x660 [ 2905.054506][T15750] do_sys_openat2+0x16d/0x420 [ 2905.059167][T15750] ? build_open_flags+0x6f0/0x6f0 [ 2905.064177][T15750] ? __context_tracking_exit+0x9f/0xb0 [ 2905.069649][T15750] ? lock_downgrade+0x6e0/0x6e0 [ 2905.074502][T15750] __x64_sys_openat+0x13f/0x1f0 [ 2905.079341][T15750] ? __ia32_sys_open+0x1c0/0x1c0 [ 2905.084264][T15750] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2905.090255][T15750] ? syscall_enter_from_user_mode+0x27/0x70 [ 2905.096133][T15750] do_syscall_64+0x3a/0xb0 [ 2905.100565][T15750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2905.106459][T15750] RIP: 0033:0x4196c4 [ 2905.110350][T15750] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2905.117324][T16126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2905.129938][T15750] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2905.129967][T15750] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2905.129985][T15750] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2905.130002][T15750] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2905.130018][T15750] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2905.130033][T15750] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2905.218091][T16126] usb 3-1: not running at top speed; connect to a high speed hub [ 2905.257306][T23877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2905.297396][T16126] usb 3-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 2905.307446][T23877] usb 5-1: not running at top speed; connect to a high speed hub [ 2905.308225][T16126] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2905.328227][T16126] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2905.398161][T23877] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2905.407859][T23877] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2905.507237][ T6155] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 2905.577523][T16126] usb 3-1: string descriptor 0 read error: -22 [ 2905.583826][T16126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2905.592949][T16126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.640848][T16126] cdc_ether 3-1:1.0: skipping garbage [ 2905.646248][T16126] usb 3-1: bad CDC descriptors [ 2905.687390][T23877] usb 5-1: string descriptor 0 read error: -22 [ 2905.693768][T23877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2905.702953][T23877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.711238][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2905.758163][T23877] cdc_ether: probe of 5-1:1.0 failed with error -22 11:55:30 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0xc, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0xa64c3) 11:55:30 executing program 5 (fault-call:0 fault-nth:22): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:30 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000340)=""/36) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff75f5, 0x86040) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0xffff, 0x8000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x15, 0x69, &(0x7f00000002c0)="576de617a27b1374d68592192d5b71c07e9d2c22f643568307738bc8515e666d648d8ba000028c3b98e05fcc5930f66963d0a785afd3415edbe2c32be4e9f2d545a5b5fbe75d1369c5eee04f5e60982dafc4536005333bb152fea1ef72bfa2152485e32025a894e416"}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/124) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2905.848655][T23877] usb 3-1: USB disconnect, device number 4 [ 2905.920500][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 2905.920517][ T33] audit: type=1800 audit(1625918130.685:1887): pid=15777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15571 res=0 errno=0 [ 2905.951728][T15777] FAULT_INJECTION: forcing a failure. [ 2905.951728][T15777] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.964562][T15777] CPU: 0 PID: 15777 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2905.973330][T15777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2905.983397][T15777] Call Trace: [ 2905.986685][T15777] dump_stack+0x143/0x1db [ 2905.991042][T15777] should_fail.cold+0x5/0xa [ 2905.995565][T15777] ? ima_add_digest_entry+0x4e/0x510 [ 2906.000862][T15777] should_failslab+0x5/0x10 [ 2906.005379][T15777] kmem_cache_alloc_trace+0x55/0x2a0 [ 2906.010674][T15777] ima_add_digest_entry+0x4e/0x510 [ 2906.015798][T15777] ima_add_template_entry+0x446/0x790 11:55:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0xb, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0xa64c3) [ 2906.021197][T15777] ? ima_get_binary_runtime_size+0x40/0x40 [ 2906.027018][T15777] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2906.028587][ T8202] usb 5-1: USB disconnect, device number 96 [ 2906.032747][T15777] ? ima_calc_field_array_hash+0x377/0x430 [ 2906.032777][T15777] ima_store_template+0xdb/0x140 [ 2906.032801][T15777] ima_store_measurement+0x208/0x5a0 [ 2906.039009][ T33] audit: type=1800 audit(1625918130.705:1888): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15635 res=0 errno=0 [ 2906.044468][T15777] ? ima_collect_measurement+0x570/0x570 [ 2906.044496][T15777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2906.044523][T15777] ? d_absolute_path+0x12e/0x180 [ 2906.092704][T15777] ? __d_path+0x160/0x160 [ 2906.097047][T15777] ? kmem_cache_alloc+0x32c/0x360 [ 2906.102087][T15777] process_measurement+0x11fb/0x17e0 [ 2906.107396][T15777] ? mmap_violation_check+0x1e0/0x1e0 [ 2906.112784][T15777] ? tomoyo_path_number_perm+0x590/0x590 [ 2906.118434][T15777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2906.124427][T15777] ? find_held_lock+0x2d/0x110 [ 2906.129228][T15777] ? aa_get_task_label+0x25f/0x540 [ 2906.134345][T15777] ? lock_downgrade+0x6e0/0x6e0 [ 2906.139216][T15777] ? fsnotify+0x1070/0x1070 [ 2906.143730][T15777] ? ext4_file_write_iter+0x1980/0x1980 [ 2906.149281][T15777] ? path_get+0x5d/0x80 [ 2906.153480][T15777] ? aa_get_task_label+0x288/0x540 [ 2906.158603][T15777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2906.164867][T15777] ? apparmor_task_getsecid+0xc2/0x110 11:55:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0xa64c3) [ 2906.170353][T15777] ima_file_check+0xb9/0x100 [ 2906.174960][T15777] ? process_measurement+0x17e0/0x17e0 [ 2906.180432][T15777] ? may_open+0x1f6/0x420 [ 2906.184774][T15777] path_openat+0x15b5/0x27e0 [ 2906.189380][T15777] ? path_lookupat+0x850/0x850 [ 2906.194156][T15777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2906.200164][T15777] do_filp_open+0x190/0x3d0 [ 2906.204677][T15777] ? may_open_dev+0xf0/0xf0 [ 2906.209180][T15777] ? do_raw_spin_lock+0x120/0x2b0 [ 2906.214212][T15777] ? rwlock_bug.part.0+0x90/0x90 [ 2906.219161][T15777] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2906.225427][T15777] ? _find_next_bit+0x1e3/0x260 [ 2906.230285][T15777] ? _raw_spin_unlock+0x1a/0x30 [ 2906.235136][T15777] ? alloc_fd+0x2e6/0x660 [ 2906.239467][T15777] do_sys_openat2+0x16d/0x420 [ 2906.244146][T15777] ? build_open_flags+0x6f0/0x6f0 [ 2906.249175][T15777] ? __context_tracking_exit+0x9f/0xb0 [ 2906.254651][T15777] ? lock_downgrade+0x6e0/0x6e0 [ 2906.259512][T15777] __x64_sys_openat+0x13f/0x1f0 [ 2906.264375][T15777] ? __ia32_sys_open+0x1c0/0x1c0 [ 2906.269324][T15777] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2906.275295][T15777] ? syscall_enter_from_user_mode+0x27/0x70 [ 2906.281182][T15777] do_syscall_64+0x3a/0xb0 [ 2906.285585][T15777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2906.291488][T15777] RIP: 0033:0x4196c4 [ 2906.295380][T15777] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2906.314991][T15777] RSP: 002b:00007f2057b8ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2906.323389][T15777] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2906.331353][T15777] RDX: 00000000000a64c3 RSI: 00007f2057b8cd60 RDI: 00000000ffffff9c [ 2906.339345][T15777] RBP: 00007f2057b8cd60 R08: 0000000000000000 R09: 0000000000000000 [ 2906.347303][T15777] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2906.355259][T15777] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 [ 2906.363537][T15777] ima: OUT OF MEMORY ERROR creating queue entry [ 2906.371599][ T33] audit: type=1804 audit(1625918131.135:1889): pid=15777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723431363833383934322F73797A6B616C6C65722E6C466C4D39372F353230342F48C7C060 dev="sda1" ino=15571 res=0 errno=0 [ 2906.427262][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2906.597131][ T8202] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 2906.717130][ T6155] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 2906.757130][T23877] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 2906.918160][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2906.997504][ T8202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2907.037606][ T8202] usb 5-1: not running at top speed; connect to a high speed hub [ 2907.117628][ T8202] usb 5-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 2907.127935][ T8202] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2907.140829][ T8202] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2907.188118][T23877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2907.207279][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2907.227168][T23877] usb 3-1: not running at top speed; connect to a high speed hub [ 2907.307196][T23877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2907.317406][T23877] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2907.330388][T23877] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2907.337218][ T6155] usb usb4-port1: unable to enumerate USB device [ 2907.427466][ T8202] usb 5-1: string descriptor 0 read error: -22 [ 2907.433737][ T8202] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2907.442831][ T8202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2907.488267][ T8202] cdc_ether 5-1:1.0: skipping garbage [ 2907.493655][ T8202] usb 5-1: bad CDC descriptors [ 2907.607612][T23877] usb 3-1: string descriptor 0 read error: -22 [ 2907.613812][T23877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2907.622870][T23877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2907.688026][T23877] usb 3-1: bad CDC descriptors 11:55:32 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x3, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:32 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0xa64c3) 11:55:32 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2dc4c65b, 0x3d5240) read$hidraw(r0, &(0x7f0000000080)=""/227, 0xe3) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000300)="e0bc46ccacfc6850a9245bef582c7dc1dd6f6a9502a49bbf718a6bcd1356399aa236d3c4cf58f83798838650faffb11f426211c8132dcdab9e44518ccb2cf65b40bf17be7ac29b30b9b5c73dcd1a4f9bd477685cd556da8bee80d4bbf44e327de69b5652bb862a8a473806b49557106ec905a6af6935da1537aa10a374f218fb4d8bf03688eadc7698f5f871f764f83c9f29b6c7d17d6354d79ca46124dbfe3636f1fb09386983fd4c2db5252ec5f7ed6d789fc69ecdfacef8a86e949c18d085cdcf25f85c7248133cf3b4a7c3ccf004b8983eec6708382a0b254bcbcd9f76d3012e") r2 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x7fff, 0x202200) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000880)={0x577, "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"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:32 executing program 5 (fault-call:0 fault-nth:23): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x18, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2907.719887][T23877] usb 5-1: USB disconnect, device number 97 [ 2907.841444][T15826] FAULT_INJECTION: forcing a failure. [ 2907.841444][T15826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2907.847146][ T33] audit: type=1800 audit(1625918132.606:1890): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15718 res=0 errno=0 [ 2907.854556][T15826] CPU: 0 PID: 15826 Comm: syz-executor.5 Not tainted 5.13.0-rc7-syzkaller #0 [ 2907.884459][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2907.894514][T15826] Call Trace: [ 2907.897795][T15826] dump_stack+0x143/0x1db [ 2907.902147][T15826] should_fail.cold+0x5/0xa [ 2907.906653][T15826] _copy_to_user+0x2c/0x150 [ 2907.911189][T15826] simple_read_from_buffer+0xcc/0x160 [ 2907.916568][T15826] proc_fail_nth_read+0x187/0x220 [ 2907.917164][ T33] audit: type=1800 audit(1625918132.686:1891): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15298 res=0 errno=0 [ 2907.921595][T15826] ? proc_sessionid_read+0x220/0x220 [ 2907.921627][T15826] ? security_file_permission+0x248/0x560 [ 2907.953852][T15826] ? proc_sessionid_read+0x220/0x220 [ 2907.959152][T15826] vfs_read+0x1b5/0x570 [ 2907.963337][T15826] ksys_read+0x12d/0x250 [ 2907.967594][T15826] ? vfs_write+0x9e0/0x9e0 [ 2907.972025][T15826] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2907.978017][T15826] ? syscall_enter_from_user_mode+0x27/0x70 [ 2907.983891][T15826] do_syscall_64+0x3a/0xb0 [ 2907.988283][T15826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2907.994156][T15826] RIP: 0033:0x41935c [ 2907.998028][T15826] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2908.017610][T15826] RSP: 002b:00007f2057b8d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2908.026093][T15826] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000041935c [ 2908.034044][T15826] RDX: 000000000000000f RSI: 00007f2057b8d1e0 RDI: 0000000000000003 [ 2908.042006][T15826] RBP: 00007f2057b8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2908.049958][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2908.057913][T15826] R13: 00007ffca8bec45f R14: 00007f2057b8d300 R15: 0000000000022000 11:55:32 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0xd, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x18, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:32 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0xa64c3) 11:55:32 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2908.089553][T28469] usb 3-1: USB disconnect, device number 5 11:55:32 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/99) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/99) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x9, 0xe7e, 0x400}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x315, 0x169200) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000003c0)=""/159) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000480)=[0x7, 0x6]) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000002c0)=""/243) 11:55:32 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xc00000000000000, 0xa64c3) [ 2908.217052][ T33] audit: type=1800 audit(1625918132.966:1892): pid=15842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15718 res=0 errno=0 11:55:33 executing program 1: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2908.281286][ T33] audit: type=1800 audit(1625918132.986:1893): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15683 res=0 errno=0 [ 2908.338507][ T33] audit: type=1800 audit(1625918133.106:1894): pid=15853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15298 res=0 errno=0 [ 2908.467557][ T6155] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 2908.577020][T23877] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 2908.646989][T28469] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 2908.747494][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2908.976945][T23877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2909.017455][T23877] usb 5-1: not running at top speed; connect to a high speed hub [ 2909.046984][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2909.086993][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2909.097747][T23877] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2909.107467][T23877] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2909.136971][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2909.166993][T28469] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2909.177204][T28469] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2909.190150][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2909.346938][T23877] usb 5-1: string descriptor 0 read error: -22 [ 2909.353182][T23877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2909.362330][T23877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2909.408093][T23877] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2909.416721][ T6155] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 2909.447119][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2909.453321][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2909.462367][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2909.507876][T28469] usb 3-1: bad CDC descriptors [ 2909.623950][ T8202] usb 5-1: USB disconnect, device number 98 [ 2909.696895][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2909.717608][T16126] usb 3-1: USB disconnect, device number 6 [ 2910.086868][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2910.207486][ T6155] usb usb4-port1: attempt power cycle [ 2910.617394][ T6155] usb 4-1: new full-speed USB device number 3 using dummy_hcd 11:55:35 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x4, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0xa64c3) 11:55:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0xa64c3) 11:55:35 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x80000001, 0x100d1f]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:35 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0xa64c3) 11:55:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0xe, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2910.796965][ T6155] usb 4-1: device descriptor read/8, error -61 11:55:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1200000000000000, 0xa64c3) [ 2910.875395][ T33] audit: type=1800 audit(1625918135.636:1895): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14147 res=0 errno=0 11:55:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0xa64c3) 11:55:35 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x7ffe]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000100)=""/100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/91) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:35 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2dc4c65b, 0x3d5240) read$hidraw(r0, &(0x7f0000000080)=""/227, 0xe3) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000300)="e0bc46ccacfc6850a9245bef582c7dc1dd6f6a9502a49bbf718a6bcd1356399aa236d3c4cf58f83798838650faffb11f426211c8132dcdab9e44518ccb2cf65b40bf17be7ac29b30b9b5c73dcd1a4f9bd477685cd556da8bee80d4bbf44e327de69b5652bb862a8a473806b49557106ec905a6af6935da1537aa10a374f218fb4d8bf03688eadc7698f5f871f764f83c9f29b6c7d17d6354d79ca46124dbfe3636f1fb09386983fd4c2db5252ec5f7ed6d789fc69ecdfacef8a86e949c18d085cdcf25f85c7248133cf3b4a7c3ccf004b8983eec6708382a0b254bcbcd9f76d3012e") r2 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x7fff, 0x202200) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000880)={0x577, "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"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2910.941962][ T33] audit: type=1800 audit(1625918135.656:1896): pid=15888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14161 res=0 errno=0 11:55:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0xa64c3) 11:55:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0xa64c3) [ 2911.007102][ T6155] usb 4-1: device descriptor read/8, error -71 [ 2911.032283][ T33] audit: type=1800 audit(1625918135.776:1897): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14147 res=0 errno=0 [ 2911.088514][ T33] audit: type=1800 audit(1625918135.786:1898): pid=15904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14161 res=0 errno=0 [ 2911.120516][ T33] audit: type=1800 audit(1625918135.856:1899): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14035 res=0 errno=0 [ 2911.156885][T16126] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 2911.496778][ T6155] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 2911.566905][T16126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2911.606909][T16126] usb 3-1: not running at top speed; connect to a high speed hub [ 2911.686940][T16126] usb 3-1: config 1 has an invalid descriptor of length 134, skipping remainder of the config [ 2911.696888][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2911.697353][T16126] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2911.716310][T16126] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2911.966911][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2912.006877][T16126] usb 3-1: string descriptor 0 read error: -22 [ 2912.013309][T16126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2912.022500][T16126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2912.067660][T16126] usb 3-1: bad CDC descriptors [ 2912.086836][ T6155] usb usb4-port1: unable to enumerate USB device [ 2912.276653][T16126] usb 3-1: USB disconnect, device number 7 11:55:38 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x5, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:38 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x400000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/204) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:38 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x7ffe]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000100)=""/100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/91) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:38 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0xa64c3) 11:55:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0xa64c3) 11:55:38 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0xf, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2913.937745][ T33] audit: type=1800 audit(1625918138.706:1900): pid=15929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14419 res=0 errno=0 11:55:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0xa64c3) 11:55:38 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00000000000000, 0xa64c3) 11:55:38 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x7ffe]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000100)=""/100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/91) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2913.987039][ T33] audit: type=1800 audit(1625918138.736:1901): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14481 res=0 errno=0 11:55:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0xa64c3) 11:55:38 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x48000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000015c0)=""/66) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001400), 0x1, 0x4000) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001440)=0x1000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001580)=0x4) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001780)=""/4090) r5 = syz_open_dev$hiddev(&(0x7f0000000380), 0x0, 0x480040) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000003c0)) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x1f, 0xc40) r7 = syz_open_dev$evdev(&(0x7f0000001480), 0x7fffffff, 0x501040) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f00000014c0)=""/151) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f00000002c0)=""/189) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2914.064966][ T33] audit: type=1800 audit(1625918138.816:1902): pid=15943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14387 res=0 errno=0 11:55:38 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0xa64c3) [ 2914.105269][ T33] audit: type=1800 audit(1625918138.866:1903): pid=15946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14387 res=0 errno=0 [ 2914.153822][ T33] audit: type=1800 audit(1625918138.866:1904): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14481 res=0 errno=0 [ 2914.212520][T28469] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 2914.386512][ T6155] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 2914.626631][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2914.666607][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2914.677209][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2914.746632][T28469] usb 3-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config [ 2914.757011][T28469] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2914.769883][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2915.016660][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2915.022993][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2915.032066][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2915.066580][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2915.087429][T28469] usb 3-1: bad CDC descriptors [ 2915.297826][T16126] usb 3-1: USB disconnect, device number 8 [ 2915.336540][ T6155] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 2915.616450][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2916.006356][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2916.126441][ T6155] usb usb4-port1: attempt power cycle [ 2916.536306][ T6155] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 2916.706892][ T6155] usb 4-1: device descriptor read/8, error -61 11:55:41 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x6, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:41 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0xa64c3) 11:55:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0xa64c3) 11:55:41 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x80000) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:41 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x7ffe]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000100)=""/100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/91) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:41 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x10, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2916.967830][ T6155] usb 4-1: device descriptor read/8, error -71 [ 2916.974188][ T33] audit: type=1800 audit(1625918141.736:1905): pid=15973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14579 res=0 errno=0 11:55:41 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0xa64c3) 11:55:41 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/95) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:41 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1200000000000000, 0xa64c3) [ 2917.052098][ T33] audit: type=1800 audit(1625918141.766:1906): pid=15974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14643 res=0 errno=0 11:55:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xa526000000000000, 0xa64c3) 11:55:41 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x53, 0xfff, 0x9f5, {0x1000, 0x5}, {0x1004, 0x1dc7}, @rumble={0x2, 0x2}}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/40) [ 2917.149509][ T33] audit: type=1800 audit(1625918141.916:1907): pid=15988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14643 res=0 errno=0 11:55:42 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0xa64c3) [ 2917.227482][ T33] audit: type=1800 audit(1625918141.936:1908): pid=15990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14659 res=0 errno=0 [ 2917.251772][ T33] audit: type=1800 audit(1625918141.966:1909): pid=15994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14707 res=0 errno=0 [ 2917.289298][ T33] audit: type=1800 audit(1625918142.016:1910): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14867 res=0 errno=0 [ 2917.326411][T28469] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 2917.486260][ T6155] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 2917.677160][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2917.736319][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2917.776341][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2917.876450][T28469] usb 3-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config [ 2917.886766][T28469] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2917.899825][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2917.956253][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2918.086841][ T6155] usb usb4-port1: unable to enumerate USB device [ 2918.146230][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2918.152456][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2918.161609][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.207156][T28469] usb 3-1: bad CDC descriptors [ 2918.417070][T28469] usb 3-1: USB disconnect, device number 9 11:55:44 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x7, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:44 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/29) 11:55:44 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/95) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:44 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0xa64c3) 11:55:44 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0xa64c3) 11:55:44 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x11, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:44 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0xa64c3) [ 2920.073138][ T33] audit: type=1800 audit(1625918144.836:1911): pid=16016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15012 res=0 errno=0 11:55:44 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0xa64c3) [ 2920.144992][ T33] audit: type=1800 audit(1625918144.876:1912): pid=16022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15072 res=0 errno=0 11:55:45 executing program 1: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/20) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:45 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/240) 11:55:45 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0xa64c3) 11:55:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0xa64c3) [ 2920.237787][ T33] audit: type=1800 audit(1625918144.896:1913): pid=16023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15076 res=0 errno=0 [ 2920.297604][ T33] audit: type=1800 audit(1625918144.967:1914): pid=16029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14513 res=0 errno=0 [ 2920.346131][T28469] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 2920.426120][ T6155] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 2920.706612][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2920.786080][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2920.826214][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2920.906273][T28469] usb 3-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 2920.916552][T28469] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2920.929565][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2921.096040][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2921.176106][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2921.182377][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2921.191454][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2921.256885][T28469] usb 3-1: bad CDC descriptors [ 2921.385927][ T6155] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 2921.467585][T28469] usb 3-1: USB disconnect, device number 10 [ 2921.655946][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2922.046324][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2922.165984][ T6155] usb usb4-port1: attempt power cycle [ 2922.576333][ T6155] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 2922.746023][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2923.016025][ T6155] usb 4-1: device descriptor read/8, error -61 11:55:47 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x9, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:47 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa44c3) 11:55:47 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x1000) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/13) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xa64c3) 11:55:47 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0xa64c3) 11:55:47 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x12, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffff000, 0xa64c3) [ 2923.162113][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 2923.162129][ T33] audit: type=1800 audit(1625918147.927:1918): pid=16061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15097 res=0 errno=0 11:55:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0xa64c3) [ 2923.249911][ T33] audit: type=1800 audit(1625918147.967:1919): pid=16060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15112 res=0 errno=0 11:55:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0xa64c3) [ 2923.296460][ T33] audit: type=1800 audit(1625918147.987:1920): pid=16063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15113 res=0 errno=0 11:55:48 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x11, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x14, 0xd5, &(0x7f0000000000)="ff4db69674654ba3c50288ba8068b90f539816637b787af638592a0a8a288844beefda970f2f3e1ee9cd2122888bfd3888c57d9906a1046142275faa43f629b87ae2cf7ebd1780f1337c9b2ea4e37c96c7b12d3ae8b52e6046d014ce47965bc79b1c5c0fe06b7c78ac9e3b37dd14c8549242f4ecb8bdc0aac6aa407904b251e84e2dcd7e28a8ec94f9b322d7b03c53917d3739590c99685fad6c751082e2c79b550b3b459f7b9c9a7d3b66ad3c45a1210a6cbcae14ac97145d9e31ee0626437a41a6f792daacfbb8c9aceb14d9f05f7389a26c1ce2"}) 11:55:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0xa64c3) [ 2923.328516][ T33] audit: type=1800 audit(1625918148.057:1921): pid=16071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15097 res=0 errno=0 [ 2923.393054][ T33] audit: type=1800 audit(1625918148.137:1922): pid=16076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15088 res=0 errno=0 [ 2923.445913][T16126] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 2923.452247][ T33] audit: type=1800 audit(1625918148.177:1923): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15114 res=0 errno=0 [ 2923.476583][ T33] audit: type=1800 audit(1625918148.187:1924): pid=16081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15116 res=0 errno=0 [ 2923.505894][ T6155] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 2923.705894][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2923.855879][T16126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2923.895871][T16126] usb 3-1: not running at top speed; connect to a high speed hub [ 2923.975915][T16126] usb 3-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 2923.986377][T16126] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2923.999260][T16126] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2924.005881][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2924.125819][ T6155] usb usb4-port1: unable to enumerate USB device [ 2924.245848][T16126] usb 3-1: string descriptor 0 read error: -22 [ 2924.252065][T16126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2924.261119][T16126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2924.316645][T16126] usb 3-1: bad CDC descriptors [ 2924.526891][T16126] usb 3-1: USB disconnect, device number 11 11:55:50 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0xa, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x250d02) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xec, 0x80100) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/229) r2 = syz_open_dev$evdev(&(0x7f0000000380), 0x7fff, 0x54b840) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000003c0)=""/50) syz_open_dev$evdev(&(0x7f0000000080), 0x1f, 0x20cd42) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000400)=""/104) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xd, 0x240900) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000100)=[0x5adc, 0x7fff]) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x400000, 0x8]) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000340)={0x0, 0x6, 0x4e, 0x400, 0x800, 0x8}) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f00000002c0)=""/106) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:50 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x1000) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/13) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:50 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0xa64c3) 11:55:50 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x200000000, 0xc000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x14, 0x37, &(0x7f0000000040)="1eb2ae0470b5b3a111cf952f86520a0e826fbb37d2d59cab09c5ad966454003b3baa71a782433fa9a3d3e83b9cdb0122f0948e1fc606bf"}) 11:55:50 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x2, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:51 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0xa64c3) [ 2926.240254][ T33] audit: type=1800 audit(1625918151.007:1925): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15141 res=0 errno=0 [ 2926.268243][ T33] audit: type=1800 audit(1625918151.007:1926): pid=16104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15128 res=0 errno=0 11:55:51 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x40) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1ff, 0x111200) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/29) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/210) 11:55:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x200000000, 0xc000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x14, 0x37, &(0x7f0000000040)="1eb2ae0470b5b3a111cf952f86520a0e826fbb37d2d59cab09c5ad966454003b3baa71a782433fa9a3d3e83b9cdb0122f0948e1fc606bf"}) 11:55:51 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x2, 0xe7, &(0x7f0000000080)="bc604628cc63cc3fdf4849fbbb298e40c9ff6182c091293921dafddeddffabb1c8a6eda5b277641cbf9b078f0358fb0daf87e91a519cfee2ea41171c0e255e742630ba1e1f9256af8d7b98d5b2922ef2739ed85dad47bfd3b327159c0c58efc69fc09a36dcb82e92545c1a6a847626a4cbf3afab4b39d59b3e797340e0c3ed7b52f0182b6acbea4ed55aa17989d8c646bc91a14d44c8ec22184213c22800ee8056aa755750dbd09041e5a3a4b98dc774a5b655c816e3da03dd44b1072625b6962b2d0db29bb63324d0c1129219ac314e9cf9712005cf13200e0b52b2b53b24efc6fe1c9fe88f5d"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2926.358686][ T33] audit: type=1800 audit(1625918151.127:1927): pid=16117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15123 res=0 errno=0 11:55:51 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00, 0xa64c3) 11:55:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0xa64c3) [ 2926.545625][T16126] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2926.665522][ T6155] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 2926.935501][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2926.985648][T16126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2927.025655][T16126] usb 3-1: not running at top speed; connect to a high speed hub [ 2927.105531][T16126] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2927.114242][T16126] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2927.355460][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2927.355623][T16126] usb 3-1: string descriptor 0 read error: -22 [ 2927.367927][T16126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2927.376991][T16126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2927.625456][ T6155] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 2927.639609][T28469] usb 3-1: USB disconnect, device number 12 [ 2927.895418][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2928.285374][ T6155] usb 4-1: device descriptor read/64, error 18 [ 2928.405449][ T6155] usb usb4-port1: attempt power cycle [ 2928.815327][ T6155] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 2928.985405][ T6155] usb 4-1: device descriptor read/8, error -61 11:55:54 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0xf, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x10000, 0x448d41) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/136) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000000)=""/118) 11:55:54 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200, 0xa64c3) 11:55:54 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/182) 11:55:54 executing program 4 (fault-call:0 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:55:54 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x3, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2929.243517][ T6155] usb 4-1: device descriptor read/8, error -71 [ 2929.287097][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 2929.287113][ T33] audit: type=1800 audit(1625918154.057:1931): pid=16146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15159 res=0 errno=0 [ 2929.292326][T16147] FAULT_INJECTION: forcing a failure. [ 2929.292326][T16147] name failslab, interval 1, probability 0, space 0, times 0 [ 2929.305257][ T33] audit: type=1800 audit(1625918154.067:1932): pid=16149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15161 res=0 errno=0 [ 2929.314531][T16147] CPU: 1 PID: 16147 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2929.357005][T16147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2929.367048][T16147] Call Trace: [ 2929.370320][T16147] dump_stack+0x143/0x1db [ 2929.374634][T16147] should_fail.cold+0x5/0xa [ 2929.379118][T16147] ? getname_flags.part.0+0x50/0x4f0 [ 2929.384387][T16147] should_failslab+0x5/0x10 [ 2929.388870][T16147] kmem_cache_alloc+0x5b/0x360 [ 2929.393614][T16147] getname_flags.part.0+0x50/0x4f0 [ 2929.398719][T16147] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2929.404681][T16147] getname+0x8e/0xd0 [ 2929.408568][T16147] do_sys_openat2+0xf5/0x420 [ 2929.413144][T16147] ? build_open_flags+0x6f0/0x6f0 [ 2929.418146][T16147] ? __context_tracking_exit+0x9f/0xb0 [ 2929.423587][T16147] ? lock_downgrade+0x6e0/0x6e0 [ 2929.428418][T16147] __x64_sys_openat+0x13f/0x1f0 [ 2929.433248][T16147] ? __ia32_sys_open+0x1c0/0x1c0 [ 2929.438167][T16147] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2929.444130][T16147] ? syscall_enter_from_user_mode+0x27/0x70 [ 2929.450004][T16147] do_syscall_64+0x3a/0xb0 [ 2929.454401][T16147] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2929.460274][T16147] RIP: 0033:0x4196c4 [ 2929.464145][T16147] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2929.483729][T16147] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2929.492132][T16147] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2929.500168][T16147] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2929.508118][T16147] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2929.516070][T16147] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2929.524045][T16147] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 11:55:54 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0xa64c3) 11:55:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x4000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/74) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:54 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffb, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:54 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0xa64c3) 11:55:54 executing program 4 (fault-call:0 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2929.637791][ T33] audit: type=1800 audit(1625918154.407:1933): pid=16160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15144 res=0 errno=0 [ 2929.689448][ T33] audit: type=1800 audit(1625918154.457:1934): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15135 res=0 errno=0 [ 2929.713328][T16167] FAULT_INJECTION: forcing a failure. [ 2929.713328][T16167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2929.726480][T16167] CPU: 1 PID: 16167 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 11:55:54 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="d94bca14f0a617a1c057618b40f53c989c45d6d8097b6d6e53372ad2f5b89ac883f383fe45974e3b", 0x28) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8a8, 0x101000) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000180)=""/128) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/159) [ 2929.735247][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2929.745299][T16167] Call Trace: [ 2929.748664][T16167] dump_stack+0x143/0x1db [ 2929.752998][T16167] should_fail.cold+0x5/0xa [ 2929.757516][T16167] strncpy_from_user+0x34/0x3e0 [ 2929.762394][T16167] getname_flags.part.0+0x95/0x4f0 [ 2929.767522][T16167] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2929.773522][T16167] getname+0x8e/0xd0 [ 2929.777415][T16167] do_sys_openat2+0xf5/0x420 [ 2929.782002][T16167] ? build_open_flags+0x6f0/0x6f0 [ 2929.787010][T16167] ? __context_tracking_exit+0x9f/0xb0 [ 2929.792466][T16167] ? lock_downgrade+0x6e0/0x6e0 [ 2929.797305][T16167] __x64_sys_openat+0x13f/0x1f0 [ 2929.802158][T16167] ? __ia32_sys_open+0x1c0/0x1c0 [ 2929.807078][T16167] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2929.813054][T16167] ? syscall_enter_from_user_mode+0x27/0x70 [ 2929.818941][T16167] do_syscall_64+0x3a/0xb0 [ 2929.823337][T16167] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2929.829212][T16167] RIP: 0033:0x4196c4 [ 2929.833084][T16167] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2929.852670][T16167] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2929.861151][T16167] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2929.869104][T16167] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2929.877056][T16167] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2929.885008][T16167] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2929.892963][T16167] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2929.902158][T28469] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2929.912683][ T33] audit: type=1800 audit(1625918154.517:1935): pid=16170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15152 res=0 errno=0 [ 2929.975328][ T6155] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 2930.145389][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2930.305232][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2930.345367][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2930.415865][ T6155] usb 4-1: device descriptor read/8, error -61 [ 2930.425593][T28469] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2930.535333][ T6155] usb usb4-port1: unable to enumerate USB device [ 2930.665296][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2930.671536][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2930.680640][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2930.934318][T16126] usb 3-1: USB disconnect, device number 13 11:55:57 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0xa64c3) 11:55:57 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x101000) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000003c0)=""/243) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x52, 0x0, 0x8, {0x1, 0x80}, {0x3f, 0xb09}, @cond=[{0x800, 0x8, 0x7, 0x401, 0x800, 0x55aa}, {0x2, 0x8001, 0x81f3, 0x452, 0x80, 0x200}]}) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x440000) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000002c0)=""/250) 11:55:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000001000)=""/71) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:55:57 executing program 4 (fault-call:0 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:55:57 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x5, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2932.355609][ T33] audit: type=1800 audit(1625918157.127:1936): pid=16191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15184 res=0 errno=0 [ 2932.391066][T16194] FAULT_INJECTION: forcing a failure. [ 2932.391066][T16194] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.403749][T16194] CPU: 0 PID: 16194 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2932.412505][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2932.422552][T16194] Call Trace: [ 2932.425815][T16194] dump_stack+0x143/0x1db [ 2932.430142][T16194] should_fail.cold+0x5/0xa [ 2932.434628][T16194] ? __alloc_file+0x21/0x280 [ 2932.439200][T16194] should_failslab+0x5/0x10 [ 2932.443706][T16194] kmem_cache_alloc+0x5b/0x360 [ 2932.448462][T16194] __alloc_file+0x21/0x280 [ 2932.452878][T16194] alloc_empty_file+0x6d/0x170 [ 2932.457631][T16194] path_openat+0xe3/0x27e0 [ 2932.462037][T16194] ? __lock_acquire+0x16a7/0x5230 [ 2932.467047][T16194] ? path_lookupat+0x850/0x850 [ 2932.471803][T16194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2932.477777][T16194] do_filp_open+0x190/0x3d0 [ 2932.482282][T16194] ? may_open_dev+0xf0/0xf0 [ 2932.486768][T16194] ? alloc_fd+0x2e6/0x660 [ 2932.491085][T16194] ? lock_downgrade+0x6e0/0x6e0 [ 2932.495924][T16194] ? do_raw_spin_lock+0x120/0x2b0 [ 2932.500936][T16194] ? rwlock_bug.part.0+0x90/0x90 [ 2932.505852][T16194] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2932.512092][T16194] ? _find_next_bit+0x1e3/0x260 [ 2932.516929][T16194] ? _raw_spin_unlock+0x1a/0x30 [ 2932.521764][T16194] ? alloc_fd+0x2e6/0x660 [ 2932.526074][T16194] do_sys_openat2+0x16d/0x420 [ 2932.530739][T16194] ? build_open_flags+0x6f0/0x6f0 [ 2932.535741][T16194] ? __context_tracking_exit+0x9f/0xb0 [ 2932.541194][T16194] ? lock_downgrade+0x6e0/0x6e0 [ 2932.546029][T16194] __x64_sys_openat+0x13f/0x1f0 [ 2932.550860][T16194] ? __ia32_sys_open+0x1c0/0x1c0 [ 2932.555790][T16194] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2932.561756][T16194] ? syscall_enter_from_user_mode+0x27/0x70 [ 2932.567641][T16194] do_syscall_64+0x3a/0xb0 [ 2932.572045][T16194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2932.577935][T16194] RIP: 0033:0x4196c4 [ 2932.581808][T16194] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2932.601395][T16194] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2932.609789][T16194] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2932.617744][T16194] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2932.625709][T16194] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2932.633660][T16194] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2932.641613][T16194] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 11:55:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0xa64c3) 11:55:57 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5421, &(0x7f0000000080)={0x0, 0x3e, 0x0, 0x0, "84b60375eb8037b738ed4fef7e6b6606981e71bc83395fcfb70a11f000"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x252400) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x12, 0x6a, &(0x7f00000002c0)="7a275dfdc6896408355684b7e88813cff836efe769b2a2bd6eb3627f59cb82e7988ca63e51fc2f8b857f894ba136caa117198d6f524c67c89c9bc7f5e129ec7eb2fbb5a743812d6c591b05905fd162c14987fd041f858e4cf1607c41599dcaffc08500209029c0f4eed5"}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000080)=0x4) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000100)=0x7c0) 11:55:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x8100) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/50) [ 2932.708452][ T33] audit: type=1800 audit(1625918157.127:1937): pid=16193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15196 res=0 errno=0 11:55:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x269c, 0xa64c3) 11:55:57 executing program 4 (fault-call:0 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2932.764779][ T33] audit: type=1800 audit(1625918157.507:1938): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15175 res=0 errno=0 11:55:57 executing program 0: ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x3, 0x7fffffff, 0x5}, 0x37e, [0xfffffff7, 0x163dd80b, 0x1, 0xff, 0xd61, 0x95ca, 0x40, 0x3, 0x85dd, 0xf4, 0x9, 0xc0000000, 0x9, 0x4, 0x10000, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x6, 0x4, 0x800, 0x5, 0x80, 0xffffffe3, 0x6, 0x3, 0x3, 0x4, 0xfff, 0x400, 0xa8, 0x5, 0x8, 0x7, 0xa1, 0x1, 0x6, 0x400, 0x6, 0x9, 0x5, 0x10000, 0x81, 0x5, 0x46, 0x3c, 0x10000, 0x1, 0x2, 0x21f0, 0x6, 0x5, 0x10000, 0x1, 0xf66, 0x0, 0x4f91, 0x4, 0xfff, 0x1, 0x1ff, 0x3, 0xac, 0x2, 0x7, 0xb9a0, 0x6, 0x2, 0x8, 0x10000, 0xfffffff7, 0x2, 0x1619, 0x7ff, 0x6, 0x1, 0x0, 0x1, 0xf2, 0x3, 0x9, 0x7ff, 0x6, 0xffff, 0x1ff, 0x5, 0x10001, 0x8001, 0x6, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x80000000, 0x3f, 0x3, 0x1000, 0x2, 0x7ff, 0x0, 0x3, 0x400, 0x5, 0x9, 0x4, 0x40, 0x5, 0x8, 0x4, 0x3dd, 0x7, 0x1ff, 0x1ff, 0x337d, 0x1, 0x3, 0xf7f, 0xbf, 0x101, 0x3, 0x7, 0x6, 0xffff, 0x101, 0x2, 0x90000, 0x0, 0x1, 0xfe1, 0xffffff08, 0x9, 0x7, 0x81, 0x400, 0x5, 0x2, 0x7ff, 0x7, 0x9f, 0x1f, 0x0, 0x4, 0xffffffff, 0x2, 0x20, 0xffffffff, 0x9, 0x100, 0x8, 0x9, 0x400, 0x1000, 0x81, 0xeb, 0x1, 0x80000000, 0x3f, 0x3f, 0xffffffc0, 0xd0000000, 0x10000, 0x1, 0x6, 0x7fff, 0xbf8, 0x0, 0x1ff, 0x0, 0x0, 0x1ff00000, 0x9, 0x5, 0x7, 0x1, 0x3, 0x8000, 0x9b8, 0x3, 0xffffa305, 0x3ff, 0x6, 0x99, 0x9, 0x4, 0x8, 0x81, 0x2, 0x80000001, 0xfffffffe, 0x2df9, 0x42f2, 0x9, 0x7, 0x4, 0x2, 0x3, 0xbe2, 0x5, 0x1ff, 0xff, 0x1ff, 0x401, 0x0, 0x7, 0xfffff7fd, 0x7fff, 0x8, 0x81, 0x9, 0x20, 0x1, 0x8, 0x1, 0x4, 0x7, 0x0, 0x4, 0x9, 0x0, 0xffff, 0x9, 0x4, 0x8000, 0x1ff, 0x10001, 0x200, 0x4, 0x7, 0x21, 0x9, 0x10001, 0xfffffffa, 0x1, 0x0, 0x1, 0x3880000, 0x1ff, 0xc6f8, 0x7, 0x1000, 0x4, 0x401, 0xffff, 0x80000000, 0x800, 0x8000, 0xfff, 0x7ff, 0x9, 0x4cdb, 0x1, 0x800, 0x40, 0x641f, 0x1, 0x0, 0x240000, 0x8, 0x7, 0x5, 0x2, 0x400, 0x1f, 0x101, 0x0, 0x383e, 0x0, 0x8000, 0x10000, 0xc51, 0xffffffff, 0x51c, 0x1, 0x0, 0xb5c7, 0xed3, 0xfffffffc, 0x2, 0x9f3, 0xffffffff, 0x8, 0xb2, 0x5, 0xff, 0xfffffffe, 0x8, 0x1, 0x8, 0x8, 0x800, 0x7, 0x9, 0x4, 0x1, 0x9, 0x21, 0x6, 0x10001, 0x97, 0xaa, 0x6, 0x3, 0x20007, 0x8, 0x6, 0xfffffc48, 0x2, 0xf1cd, 0x426, 0x6, 0x81, 0x0, 0x0, 0xfffffff7, 0x9, 0x0, 0x56, 0x6, 0x0, 0x81, 0x40, 0xc398, 0x6, 0x7, 0x995, 0x7, 0x0, 0x10000, 0x10001, 0x9, 0x8001, 0x6, 0x3, 0x9, 0x8000, 0x8, 0x0, 0xfffffff7, 0x1, 0x101, 0x3ff, 0x6, 0x400, 0x2, 0x7, 0x4, 0xfffffff9, 0x3, 0x80000000, 0x9, 0xffffffff, 0x40, 0x80d, 0x0, 0x6, 0x101, 0x8, 0x7ca, 0x800, 0x2, 0x0, 0x0, 0x7fff, 0x101, 0x9, 0x3, 0x8, 0x4, 0x5, 0x8, 0x835, 0x3ff, 0xe95, 0x5, 0x7f, 0x4, 0x5c81, 0x5, 0x6, 0x5, 0xa000000, 0xfffff000, 0x4e12, 0x80000001, 0x0, 0x1, 0x200, 0x3, 0x4, 0x9, 0x0, 0x9, 0x10000, 0x8, 0x7fffffff, 0x800, 0x9, 0x8, 0x3ff, 0x7, 0x6, 0xffffffff, 0xe49, 0xfffffff7, 0x7, 0x5, 0x9, 0x3f, 0x1f, 0xf1c, 0xffff, 0x4, 0x5, 0x1, 0x3f, 0x8001, 0x2afa, 0xffff0000, 0x6, 0x800, 0x6, 0xff, 0x6db, 0x10001, 0x6, 0x20, 0x5, 0x400, 0x800, 0x3, 0x0, 0x1, 0x4, 0x3ff, 0x0, 0x0, 0x8, 0x8, 0x4, 0x9, 0x3f, 0x2, 0x9, 0x2bf, 0x4e, 0xfff, 0x0, 0x3, 0x7f, 0x5, 0x20, 0xff, 0xac, 0x7, 0xad3, 0x1, 0x6, 0x0, 0x81, 0x8, 0x101, 0x7, 0x2, 0x2e2a, 0x2, 0x9b, 0x3, 0x80000000, 0x0, 0xe9, 0x95, 0xffffffdd, 0x7, 0x3, 0x20, 0x3ff, 0x9, 0xef24, 0x7, 0x1, 0x3d77, 0x3, 0x80000000, 0x5, 0x5, 0x80000001, 0x0, 0x5, 0xac, 0x3, 0x10000, 0x3, 0x3, 0x1, 0x7, 0x3, 0x400, 0x6, 0x536, 0x0, 0x8, 0x2, 0x3, 0x3, 0x3ff, 0x2, 0xfffff780, 0x3ff, 0x77e7, 0xfffeffff, 0x6, 0x80, 0x243, 0xc2, 0x80000000, 0x9, 0x3, 0x6eb0, 0x7, 0x27e, 0x4, 0x3, 0x400, 0x7df, 0x1, 0x0, 0x100, 0x1, 0x2fb4, 0x4a2, 0x1, 0x4c4, 0x5, 0x9, 0x9, 0x1, 0x80000000, 0x3000, 0x5ee, 0x1, 0x7fffffff, 0x1, 0x7, 0x4, 0x8001, 0x360, 0x4, 0x3, 0x4c, 0x80000001, 0x9, 0x1, 0x6, 0x5, 0x9, 0x0, 0x6, 0x5, 0x40, 0xb69, 0x9, 0xffffffff, 0x0, 0x7, 0x2, 0x9, 0x401, 0x101, 0xcc23, 0x4, 0x2, 0x4, 0x3ff, 0x100, 0x5, 0xfffffff7, 0x80, 0x4d92, 0x10001, 0x0, 0xa8, 0x10001, 0x785, 0x7fff, 0x10000, 0xffffffff, 0x0, 0x1, 0x800, 0x101, 0x7, 0x0, 0x8, 0x3f, 0x3, 0x1ff, 0x808, 0x3, 0x0, 0x4, 0xff, 0x6, 0x3f, 0x1000, 0x3, 0x1ff, 0x94, 0xdf1, 0x5, 0x5688, 0xffff, 0x200, 0x0, 0x10001, 0x2, 0x80, 0x1, 0x6, 0xffff, 0x5, 0x7, 0x9, 0x1, 0x2, 0x4, 0x4, 0xfffffff9, 0x7, 0x0, 0x9, 0x5, 0x8000, 0xffff, 0x3, 0x1, 0x1f, 0x4, 0x7ff, 0x9, 0x7f, 0x100, 0x7, 0x20, 0x2, 0x3, 0x4, 0x9ea3, 0x9, 0x92, 0x0, 0x0, 0xc4a, 0x9, 0x4, 0x8, 0x8001, 0xff00, 0x77e, 0x0, 0x0, 0x3, 0x5, 0x1, 0x3, 0x190, 0x7, 0x2, 0x9, 0x1, 0x1, 0x1, 0x158, 0x20, 0xe5, 0x8, 0xffff, 0x8000, 0x3, 0x6, 0xb, 0xff, 0x1ff, 0x8000, 0x1, 0x8, 0xad, 0x36, 0x5, 0x8, 0x400, 0xa8f, 0x400, 0x5, 0x3, 0x80000001, 0x3ff, 0x0, 0x2, 0x8000, 0x1, 0x0, 0x7, 0x6, 0x7fff, 0xcab, 0x101, 0xfffffff9, 0x5, 0xfffff35c, 0x3ff, 0x9, 0x3, 0x8, 0xfffffffa, 0x2, 0xffff8000, 0x3, 0x7, 0x5, 0x5483, 0x8, 0x1, 0x5, 0x3f, 0xc6, 0x9, 0x40, 0x40000, 0xa35, 0x7750, 0x401, 0x2, 0x3ff, 0xf419, 0x5, 0x2, 0x6e, 0x800, 0xffffffff, 0x7ff, 0x6, 0x8, 0x0, 0x3, 0x8000000, 0x6, 0x7, 0x0, 0x8000, 0x7ff, 0x4, 0x401, 0x3f, 0x9, 0x8, 0x903, 0x0, 0x3ff, 0x2, 0x5d97, 0x1d01c477, 0x0, 0x2, 0x4, 0x7fffffff, 0x8, 0x3, 0x7, 0x1, 0xa8b6, 0x81, 0x80000000, 0x2, 0x5, 0x7fffffff, 0x4, 0xfffffff8, 0x0, 0x800, 0xfffffff7, 0x7, 0xfffffff7, 0x9, 0x81, 0x1, 0xa72c, 0x6, 0x1, 0x2, 0x10000000, 0x401, 0x8, 0x2f22, 0x2, 0x3, 0xf73, 0xee2, 0xff, 0x5, 0x2, 0x2, 0x5, 0x4, 0xc11d, 0x400, 0x20, 0xf, 0x7, 0x80000000, 0x2, 0x40, 0x4000, 0x3926, 0x4c, 0x3, 0x8, 0x1, 0x81, 0x0, 0x7, 0x101, 0x2, 0x3, 0x96e, 0x4, 0x1, 0x800, 0x9, 0x100, 0x4, 0x1, 0x1, 0xf9e, 0x0, 0xfffffff9, 0x6278, 0x7fffffff, 0x8, 0x5, 0x7, 0x7, 0x6, 0x3, 0x0, 0x0, 0x10000, 0x5, 0x3, 0x5, 0x7f, 0x4, 0x1, 0x728, 0x80000001, 0xd58, 0x4, 0x1, 0x80000001, 0x7, 0x40, 0x2f720968, 0x9, 0x800, 0x8, 0x6, 0x6bc, 0xf1, 0x2, 0xfff, 0x10001, 0xc207, 0xff, 0x4, 0x100, 0x9, 0x6, 0x7, 0x6, 0x0, 0x81, 0x3, 0x7, 0x6, 0x0, 0x73a, 0x10000, 0x8, 0x8def, 0xffffffff, 0x8, 0x3b, 0x4, 0x9, 0x7fff, 0x7, 0xfff, 0x6, 0x1, 0xffff7f56, 0x6, 0x3, 0x1, 0xfffffffd, 0x101, 0x6, 0x0, 0x8, 0x4, 0x1, 0xfffffff7, 0x180000, 0x6, 0x0, 0x4, 0x80000000, 0x87, 0x6, 0x1, 0x4000, 0x0, 0x3c, 0x0, 0xfff, 0x6, 0x8000, 0x7, 0x1f, 0x80000000, 0x1, 0x6, 0x7ff, 0x2, 0x1, 0x101, 0x800, 0x0, 0x8, 0x4, 0x0, 0x2e, 0x4d6e5d92, 0x10000000, 0x2, 0xfffffc00, 0x6, 0x1ff, 0x9, 0x100, 0xfffffeff, 0x3f, 0x20, 0xb8d, 0xfffffffc, 0x101, 0x1, 0x3, 0x1c00, 0x8, 0xb8f5, 0x81, 0x2, 0x8, 0xfffffff8, 0x4, 0x4, 0x6, 0x800, 0x1, 0x7fff8, 0x4, 0x401, 0x2, 0x7fffffff, 0x10000, 0x7fffffff, 0x6, 0x5, 0x5, 0x3ff, 0x3, 0x400, 0x2, 0x97d, 0x1, 0x0, 0xff, 0x101, 0x1, 0x8001, 0x5, 0x3, 0x40, 0x9, 0x3ff, 0x6, 0x7e, 0x5, 0x8, 0x2, 0xf3, 0xfffff001, 0x2, 0x9, 0x355, 0x7, 0xe25, 0x6, 0x1, 0x7, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x6, 0x336, 0x7, 0x9f, 0x7fffffff, 0x80000000, 0x9a]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000001040)=""/43) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2932.820525][ T33] audit: type=1800 audit(1625918157.517:1939): pid=16209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15187 res=0 errno=0 [ 2932.845329][T16126] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 2932.866796][T16216] FAULT_INJECTION: forcing a failure. [ 2932.866796][T16216] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.879461][T16216] CPU: 1 PID: 16216 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2932.887380][ T33] audit: type=1800 audit(1625918157.588:1940): pid=16213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15164 res=0 errno=0 [ 2932.888228][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2932.888244][T16216] Call Trace: [ 2932.888253][T16216] dump_stack+0x143/0x1db [ 2932.927100][T16216] should_fail.cold+0x5/0xa [ 2932.931600][T16216] ? __alloc_file+0x21/0x280 [ 2932.936181][T16216] should_failslab+0x5/0x10 [ 2932.940670][T16216] kmem_cache_alloc+0x5b/0x360 [ 2932.945419][T16216] __alloc_file+0x21/0x280 [ 2932.949823][T16216] alloc_empty_file+0x6d/0x170 [ 2932.954567][T16216] path_openat+0xe3/0x27e0 [ 2932.958968][T16216] ? __lock_acquire+0x16a7/0x5230 [ 2932.963978][T16216] ? path_lookupat+0x850/0x850 [ 2932.968724][T16216] ? alloc_pages+0x194/0x2a0 [ 2932.973294][T16216] ? __kasan_init_slab_obj+0x21/0x30 [ 2932.978559][T16216] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2932.984522][T16216] do_filp_open+0x190/0x3d0 [ 2932.989003][T16216] ? may_open_dev+0xf0/0xf0 [ 2932.993481][T16216] ? alloc_fd+0x2e6/0x660 [ 2932.997794][T16216] ? lock_downgrade+0x6e0/0x6e0 [ 2933.002637][T16216] ? do_raw_spin_lock+0x120/0x2b0 [ 2933.007643][T16216] ? rwlock_bug.part.0+0x90/0x90 [ 2933.012567][T16216] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2933.018788][T16216] ? _find_next_bit+0x1e3/0x260 [ 2933.023618][T16216] ? _raw_spin_unlock+0x1a/0x30 [ 2933.028446][T16216] ? alloc_fd+0x2e6/0x660 [ 2933.032755][T16216] do_sys_openat2+0x16d/0x420 [ 2933.037415][T16216] ? build_open_flags+0x6f0/0x6f0 [ 2933.042425][T16216] ? __context_tracking_exit+0x9f/0xb0 [ 2933.047872][T16216] ? lock_downgrade+0x6e0/0x6e0 [ 2933.052706][T16216] __x64_sys_openat+0x13f/0x1f0 [ 2933.057554][T16216] ? __ia32_sys_open+0x1c0/0x1c0 [ 2933.062479][T16216] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2933.068439][T16216] ? syscall_enter_from_user_mode+0x27/0x70 [ 2933.074313][T16216] do_syscall_64+0x3a/0xb0 [ 2933.078706][T16216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2933.084592][T16216] RIP: 0033:0x4196c4 [ 2933.088471][T16216] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2933.108063][T16216] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2933.116472][T16216] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2933.124430][T16216] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2933.132402][T16216] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2933.140362][T16216] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2933.148317][T16216] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2933.225384][T28469] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2933.514979][T16126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2933.555051][T16126] usb 3-1: not running at top speed; connect to a high speed hub [ 2933.595110][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2933.635084][T16126] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2933.875032][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2933.881273][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2933.885042][T16126] usb 3-1: string descriptor 0 read error: -22 [ 2933.890378][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2933.898658][T16126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2933.913633][T16126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.946308][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 11:55:58 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x2, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:58 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x44c242) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/180) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/212) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:55:58 executing program 4 (fault-call:0 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:55:58 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0xa64c3) 11:55:58 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3f, 0x50080) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/70) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/95) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x81, 0x80) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000300)="6a5138a70530af5983"}) r5 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000040)=""/78) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000140)=""/5) [ 2934.155339][T16126] usb 4-1: USB disconnect, device number 17 [ 2934.229898][T16238] FAULT_INJECTION: forcing a failure. [ 2934.229898][T16238] name failslab, interval 1, probability 0, space 0, times 0 [ 2934.242600][T16238] CPU: 1 PID: 16238 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2934.251364][T16238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2934.261421][T16238] Call Trace: [ 2934.264702][T16238] dump_stack+0x143/0x1db [ 2934.269039][T16238] should_fail.cold+0x5/0xa [ 2934.273572][T16238] ? __d_alloc+0x2a/0x950 [ 2934.277900][T16238] should_failslab+0x5/0x10 [ 2934.282385][T16238] kmem_cache_alloc+0x5b/0x360 [ 2934.287131][T16238] __d_alloc+0x2a/0x950 [ 2934.291277][T16238] d_alloc+0x4a/0x230 [ 2934.295241][T16238] d_alloc_parallel+0xe9/0x1980 [ 2934.300093][T16238] ? __d_lookup+0x3ff/0x710 [ 2934.304581][T16238] ? lock_downgrade+0x6e0/0x6e0 [ 2934.309434][T16238] ? find_held_lock+0x2d/0x110 [ 2934.314197][T16238] ? __d_lookup_rcu+0x6c0/0x6c0 [ 2934.319067][T16238] ? __d_lookup+0x428/0x710 [ 2934.323565][T16238] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2934.329532][T16238] lookup_open.isra.0+0x86c/0x1300 [ 2934.334651][T16238] ? hashlen_string+0xf0/0xf0 [ 2934.339317][T16238] ? verify_cpu+0x100/0x100 [ 2934.343804][T16238] ? verify_cpu+0x100/0x100 [ 2934.348289][T16238] path_openat+0x9b4/0x27e0 [ 2934.352785][T16238] ? path_lookupat+0x850/0x850 [ 2934.357536][T16238] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2934.363510][T16238] do_filp_open+0x190/0x3d0 [ 2934.367994][T16238] ? may_open_dev+0xf0/0xf0 [ 2934.372474][T16238] ? do_raw_spin_lock+0x120/0x2b0 [ 2934.377476][T16238] ? rwlock_bug.part.0+0x90/0x90 [ 2934.382397][T16238] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2934.388616][T16238] ? _find_next_bit+0x1e3/0x260 [ 2934.393445][T16238] ? _raw_spin_unlock+0x1a/0x30 [ 2934.398276][T16238] ? alloc_fd+0x2e6/0x660 [ 2934.402582][T16238] do_sys_openat2+0x16d/0x420 [ 2934.407241][T16238] ? build_open_flags+0x6f0/0x6f0 [ 2934.412250][T16238] ? __context_tracking_exit+0x9f/0xb0 [ 2934.417690][T16238] ? lock_downgrade+0x6e0/0x6e0 [ 2934.422525][T16238] __x64_sys_openat+0x13f/0x1f0 [ 2934.427357][T16238] ? __ia32_sys_open+0x1c0/0x1c0 [ 2934.432281][T16238] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2934.438258][T16238] ? syscall_enter_from_user_mode+0x27/0x70 [ 2934.444129][T16238] do_syscall_64+0x3a/0xb0 [ 2934.448521][T16238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2934.454393][T16238] RIP: 0033:0x4196c4 [ 2934.458265][T16238] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2934.477866][T16238] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2934.486265][T16238] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2934.494233][T16238] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2934.502186][T16238] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2934.510136][T16238] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2934.518084][T16238] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 11:55:59 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x6, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:55:59 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0xa64c3) [ 2934.539407][ T8202] usb 3-1: USB disconnect, device number 14 [ 2934.559088][ T33] kauditd_printk_skb: 1 callbacks suppressed [ 2934.559102][ T33] audit: type=1800 audit(1625918159.328:1942): pid=16240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15250 res=0 errno=0 11:55:59 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1fffffd, 0x200000) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x10000, 0x6e1c]) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2, 0x5]) 11:55:59 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x9c26, 0xa64c3) 11:55:59 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x4, 0xd, 0x6, 0x8, "4f1605ac88d3c64aa11ab029ff5bb69ccf6458a3bb3c2d9d27508fb0c9fc910a"}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/249) [ 2934.653145][ T33] audit: type=1800 audit(1625918159.398:1943): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15363 res=0 errno=0 11:55:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0xa64c3) 11:55:59 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x8]) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2934.759284][ T33] audit: type=1800 audit(1625918159.528:1944): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=13938 res=0 errno=0 [ 2934.827419][ T33] audit: type=1800 audit(1625918159.588:1945): pid=16272 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15142 res=0 errno=0 [ 2934.884951][T16126] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 2935.044831][ T8202] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 2935.245002][T16126] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2935.444844][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2935.484901][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2935.495099][T16126] usb 4-1: string descriptor 0 read error: -22 [ 2935.501296][T16126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2935.510396][T16126] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2935.555889][T16126] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2935.565137][ T8202] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 11:56:00 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x3, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:00 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0xa64c3) 11:56:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 11:56:00 executing program 4 (fault-call:0 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:00 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f00000000c0)=""/65) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x57, 0x7ff, 0x3f, {0x5, 0x81}, {0x51f8, 0x6}, @ramp={0x8c, 0x615, {0x3ff, 0x12, 0x1, 0x845f}}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x4001) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000080)) [ 2935.768524][T28469] usb 4-1: USB disconnect, device number 18 [ 2935.825411][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2935.837773][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2935.847082][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.856936][T16289] FAULT_INJECTION: forcing a failure. [ 2935.856936][T16289] name failslab, interval 1, probability 0, space 0, times 0 [ 2935.869745][T16289] CPU: 1 PID: 16289 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2935.872397][ T33] audit: type=1800 audit(1625918160.638:1946): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15539 res=0 errno=0 [ 2935.878507][T16289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2935.878522][T16289] Call Trace: [ 2935.878530][T16289] dump_stack+0x143/0x1db [ 2935.878553][T16289] should_fail.cold+0x5/0xa [ 2935.878578][T16289] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2935.927607][T16289] should_failslab+0x5/0x10 [ 2935.932130][T16289] __kmalloc+0x72/0x310 [ 2935.936302][T16289] tomoyo_realpath_from_path+0xc3/0x620 [ 2935.941869][T16289] ? tomoyo_profile+0x42/0x50 [ 2935.946560][T16289] tomoyo_path_number_perm+0x1d5/0x590 [ 2935.952034][T16289] ? tomoyo_path_number_perm+0x18d/0x590 [ 2935.954190][ T33] audit: type=1800 audit(1625918160.718:1947): pid=16290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15475 res=0 errno=0 [ 2935.957674][T16289] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2935.957708][T16289] ? find_held_lock+0x2d/0x110 [ 2935.957739][T16289] ? d_alloc_parallel+0x91f/0x1980 [ 2935.957769][T16289] ? lock_downgrade+0x6e0/0x6e0 [ 2935.999427][T16289] ? find_held_lock+0x2d/0x110 [ 2936.004199][T16289] tomoyo_path_mknod+0x10d/0x190 [ 2936.009135][T16289] ? tomoyo_path_chown+0x1b0/0x1b0 [ 2936.014273][T16289] security_path_mknod+0xf9/0x170 [ 2936.019311][T16289] lookup_open.isra.0+0x471/0x1300 [ 2936.024446][T16289] ? hashlen_string+0xf0/0xf0 [ 2936.029113][T16289] ? verify_cpu+0x100/0x100 [ 2936.033599][T16289] ? verify_cpu+0x100/0x100 [ 2936.038084][T16289] path_openat+0x9b4/0x27e0 [ 2936.042575][T16289] ? path_lookupat+0x850/0x850 [ 2936.047371][T16289] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2936.053351][T16289] do_filp_open+0x190/0x3d0 [ 2936.057850][T16289] ? may_open_dev+0xf0/0xf0 [ 2936.062333][T16289] ? do_raw_spin_lock+0x120/0x2b0 [ 2936.067339][T16289] ? rwlock_bug.part.0+0x90/0x90 [ 2936.072254][T16289] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2936.078476][T16289] ? _find_next_bit+0x1e3/0x260 [ 2936.083310][T16289] ? _raw_spin_unlock+0x1a/0x30 [ 2936.088140][T16289] ? alloc_fd+0x2e6/0x660 [ 2936.092451][T16289] do_sys_openat2+0x16d/0x420 [ 2936.097127][T16289] ? build_open_flags+0x6f0/0x6f0 [ 2936.102134][T16289] ? __context_tracking_exit+0x9f/0xb0 [ 2936.107575][T16289] ? lock_downgrade+0x6e0/0x6e0 [ 2936.112415][T16289] __x64_sys_openat+0x13f/0x1f0 [ 2936.117254][T16289] ? __ia32_sys_open+0x1c0/0x1c0 [ 2936.122177][T16289] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2936.128276][T16289] ? syscall_enter_from_user_mode+0x27/0x70 [ 2936.134163][T16289] do_syscall_64+0x3a/0xb0 [ 2936.138569][T16289] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2936.144451][T16289] RIP: 0033:0x4196c4 [ 2936.148332][T16289] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2936.167925][T16289] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2936.176319][T16289] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2936.184271][T16289] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2936.192228][T16289] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2936.200202][T16289] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2936.208160][T16289] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2936.216281][T16289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2936.230619][ T33] audit: type=1800 audit(1625918160.998:1948): pid=16289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15381 res=0 errno=0 [ 2936.252273][T28469] usb 4-1: new full-speed USB device number 19 using dummy_hcd 11:56:01 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x7, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:01 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0xa64c3) 11:56:01 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2182) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/31) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/29) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:01 executing program 4 (fault-call:0 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:01 executing program 1: r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x55, 0x1, 0x7, 0x1, 0x1, 0x5b, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0xfe, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x5, 0xed}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xf5, 0x7, 0x1f, 0x40, 0x89}, 0x94, &(0x7f00000000c0)={0x5, 0xf, 0x94, 0x5, [@generic={0x4d, 0x10, 0x4, "76ec5a33fc4e2c47462f5d2de812e2ffa471519fe1f498162cfa2048061dcf7c36793392ab447b0a99ae4db7b345301a7554e54753e069b780dbc1e4638c30bbe4a87575ff5fcd59c5ae"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2a9db2173f12a6ef9fe7f5f22e07d02f"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9c, 0x1, 0x1, 0x1, 0xf7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x82, 0x9, 0x1f, 0x7, 0x20}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xee, 0xf0f, 0x281, [0xc0f0, 0xff00c0, 0x1010011]}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xa7a}}]}) syz_usb_control_io$printer(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x0, 0x9, 0x8d, {0x8d, 0x19, "dd16d35a3eac4e20f5310ac34105834bb362d3317c062fc0d29ca57f87ab4351329aa20985728a517ceeb8fa6c3a68df3b10990eb9499d496e65d42c2934a917aac86ac5b94979017b39fe253fedc1cc5fcfcd38003051f3c13fc042ae061232036b5082763efeb0a1831032db8724b38c4e5fcf69ddc7df55edc92cdaa65c426029280217caaba6627c96"}}, &(0x7f0000000400)={0x0, 0x3, 0xba, @string={0xba, 0x3, "835e4a1110e15c538698f0d1e2f49cb454563735986e666dee1a9b1180761c2724d0a2b6991efecbcb93c3536c2d91d76f56fa4ae69106baff96bc63e213366b1b43b2077e9b703e5e898b0dbb69656feb2108cfe379e7a60eebe2ebb8601ad337915a714c65251b4ba646f757ed4d47692da8cc6699ca8e93ff99a0d74f91ae9b92c6fe11c1dec5e57fd9b6451aa2afc29fbd062ecb32760602fad368998e43f6a3ec42eb7a0ba17d770f00018a09e516b5432bbafdc5a7"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000500)={0x0, 0x14, 0x8e, "9ab2308156fbe389cc1e7db10845423760fdabb96f8be7fc9290603f4995ee348e7d11579123f728cdb62b83bc788676b107ca7cdc55d636a305858c69951b80e8e1398c46b95281ba99bf46992f29366be3c7e1955fd169f263f6827e9c83c59c40e023e62362db0766f6088c564d9c44e6a51349ea49d8c19e21cba941389424b5d134fb70762d34605a13a5c6"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xb3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)={0x20, 0x1, 0x1, 0xbd}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x2}}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2936.485538][ T6155] usb 3-1: USB disconnect, device number 15 [ 2936.553069][ T33] audit: type=1800 audit(1625918161.318:1949): pid=16314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15555 res=0 errno=0 [ 2936.584767][T16318] FAULT_INJECTION: forcing a failure. [ 2936.584767][T16318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:56:01 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0xa64c3) [ 2936.594921][ T33] audit: type=1800 audit(1625918161.338:1950): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15586 res=0 errno=0 [ 2936.598041][T16318] CPU: 1 PID: 16318 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2936.627987][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2936.638050][T16318] Call Trace: [ 2936.641330][T16318] dump_stack+0x143/0x1db [ 2936.645678][T16318] should_fail.cold+0x5/0xa [ 2936.650200][T16318] prepare_alloc_pages+0x172/0x4f0 [ 2936.655327][T16318] __alloc_pages+0x12f/0x4f0 [ 2936.659935][T16318] ? __alloc_pages_slowpath.constprop.0+0x2060/0x2060 [ 2936.666735][T16318] ? __lock_acquire+0x16a7/0x5230 [ 2936.671780][T16318] alloc_pages+0x18c/0x2a0 [ 2936.676212][T16318] allocate_slab+0x2c5/0x4c0 [ 2936.676820][ T33] audit: type=1800 audit(1625918161.378:1951): pid=16322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15634 res=0 errno=0 11:56:01 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0xa64c3) [ 2936.680804][T16318] ___slab_alloc+0x4bd/0x820 [ 2936.680834][T16318] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2936.680867][T16318] ? fs_reclaim_acquire+0xb2/0x160 [ 2936.717473][T16318] ? kmem_cache_alloc+0x1d6/0x360 [ 2936.722509][T16318] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2936.728240][T16318] ? __slab_alloc+0x68/0x80 [ 2936.732752][T16318] __slab_alloc+0x68/0x80 [ 2936.737093][T16318] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2936.742831][T16318] __kmalloc+0x2f4/0x310 [ 2936.747086][T16318] tomoyo_realpath_from_path+0xc3/0x620 [ 2936.752654][T16318] ? tomoyo_profile+0x42/0x50 [ 2936.757346][T16318] tomoyo_path_number_perm+0x1d5/0x590 [ 2936.762816][T16318] ? tomoyo_path_number_perm+0x18d/0x590 [ 2936.768458][T16318] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2936.774271][T16318] ? find_held_lock+0x2d/0x110 [ 2936.779040][T16318] ? d_alloc_parallel+0x91f/0x1980 [ 2936.784175][T16318] ? lock_downgrade+0x6e0/0x6e0 [ 2936.789036][T16318] ? find_held_lock+0x2d/0x110 [ 2936.793841][T16318] tomoyo_path_mknod+0x10d/0x190 [ 2936.798781][T16318] ? tomoyo_path_chown+0x1b0/0x1b0 [ 2936.803907][T16318] security_path_mknod+0xf9/0x170 [ 2936.808938][T16318] lookup_open.isra.0+0x471/0x1300 [ 2936.814066][T16318] ? hashlen_string+0xf0/0xf0 [ 2936.818755][T16318] ? verify_cpu+0x100/0x100 [ 2936.823258][T16318] ? verify_cpu+0x100/0x100 [ 2936.827769][T16318] path_openat+0x9b4/0x27e0 [ 2936.832291][T16318] ? path_lookupat+0x850/0x850 [ 2936.837071][T16318] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2936.843067][T16318] do_filp_open+0x190/0x3d0 [ 2936.847554][T16318] ? may_open_dev+0xf0/0xf0 [ 2936.852038][T16318] ? do_raw_spin_lock+0x120/0x2b0 [ 2936.857052][T16318] ? rwlock_bug.part.0+0x90/0x90 [ 2936.861971][T16318] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2936.868188][T16318] ? _find_next_bit+0x1e3/0x260 [ 2936.873010][T16318] ? _raw_spin_unlock+0x1a/0x30 [ 2936.877836][T16318] ? alloc_fd+0x2e6/0x660 [ 2936.882163][T16318] do_sys_openat2+0x16d/0x420 [ 2936.886844][T16318] ? build_open_flags+0x6f0/0x6f0 [ 2936.891851][T16318] ? __context_tracking_exit+0x9f/0xb0 [ 2936.897289][T16318] ? lock_downgrade+0x6e0/0x6e0 [ 2936.902125][T16318] __x64_sys_openat+0x13f/0x1f0 [ 2936.906972][T16318] ? __ia32_sys_open+0x1c0/0x1c0 [ 2936.911893][T16318] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2936.917850][T16318] ? syscall_enter_from_user_mode+0x27/0x70 [ 2936.923775][T16318] do_syscall_64+0x3a/0xb0 [ 2936.928173][T16318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2936.934050][T16318] RIP: 0033:0x4196c4 [ 2936.937929][T16318] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2936.957518][T16318] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2936.965910][T16318] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2936.973856][T16318] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2936.981803][T16318] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2936.989750][T16318] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2936.997720][T16318] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2937.054776][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2937.164770][T23877] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 2937.314776][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2937.321019][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2937.330109][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2937.364826][ T6155] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 2937.375947][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2937.414685][T23877] usb 2-1: Invalid ep0 maxpacket: 512 11:56:02 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x4, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:02 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/100) 11:56:02 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0xa64c3) 11:56:02 executing program 4 (fault-call:0 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2937.564652][T23877] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 2937.589590][T28469] usb 4-1: USB disconnect, device number 19 [ 2937.646578][T16340] FAULT_INJECTION: forcing a failure. [ 2937.646578][T16340] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.659274][T16340] CPU: 1 PID: 16340 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2937.668044][T16340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2937.678101][T16340] Call Trace: [ 2937.681382][T16340] dump_stack+0x143/0x1db [ 2937.685727][T16340] should_fail.cold+0x5/0xa [ 2937.690247][T16340] ? ext4_init_journal_params+0x350/0x350 11:56:02 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0xa64c3) [ 2937.695982][T16340] ? ext4_alloc_inode+0x1a/0x640 [ 2937.700940][T16340] should_failslab+0x5/0x10 [ 2937.705460][T16340] kmem_cache_alloc+0x5b/0x360 [ 2937.710236][T16340] ? ext4_init_journal_params+0x350/0x350 [ 2937.715967][T16340] ext4_alloc_inode+0x1a/0x640 [ 2937.720742][T16340] ? ext4_init_journal_params+0x350/0x350 [ 2937.726470][T16340] alloc_inode+0x61/0x230 [ 2937.730836][T16340] new_inode+0x27/0x2f0 [ 2937.735006][T16340] __ext4_new_inode+0x34f/0x5510 [ 2937.739952][T16340] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2937.745950][T16340] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2937.751762][T16340] ? trace_hardirqs_on+0x5b/0x1a0 [ 2937.756804][T16340] ? find_held_lock+0x2d/0x110 [ 2937.761585][T16340] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2937.767136][T16340] ? do_raw_spin_unlock+0x171/0x230 [ 2937.772348][T16340] ? d_splice_alias+0x4c6/0xc60 [ 2937.773523][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2937.777209][T16340] ? ext4_create+0x447/0x4d0 [ 2937.777237][T16340] ext4_create+0x2d6/0x4d0 [ 2937.777263][T16340] ? ext4_mknod+0x4e0/0x4e0 [ 2937.777286][T16340] ? generic_permission+0x126/0x5b0 [ 2937.777315][T16340] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2937.809754][T16340] ? security_inode_permission+0xc5/0xf0 [ 2937.815416][T16340] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2937.821667][T16340] ? ext4_mknod+0x4e0/0x4e0 [ 2937.824782][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2937.826173][T16340] lookup_open.isra.0+0xf23/0x1300 [ 2937.826205][T16340] ? hashlen_string+0xf0/0xf0 [ 2937.826232][T16340] ? verify_cpu+0x100/0x100 [ 2937.834872][T23877] usb 2-1: Invalid ep0 maxpacket: 512 [ 2937.839009][T16340] ? verify_cpu+0x100/0x100 [ 2937.839036][T16340] path_openat+0x9b4/0x27e0 [ 2937.839064][T16340] ? path_lookupat+0x850/0x850 [ 2937.844392][T23877] usb usb2-port1: attempt power cycle [ 2937.848209][T16340] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2937.848241][T16340] do_filp_open+0x190/0x3d0 [ 2937.848262][T16340] ? may_open_dev+0xf0/0xf0 [ 2937.848282][T16340] ? do_raw_spin_lock+0x120/0x2b0 [ 2937.848303][T16340] ? rwlock_bug.part.0+0x90/0x90 [ 2937.848323][T16340] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2937.848349][T16340] ? _find_next_bit+0x1e3/0x260 [ 2937.904923][ T6155] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2937.908617][T16340] ? _raw_spin_unlock+0x1a/0x30 [ 2937.908645][T16340] ? alloc_fd+0x2e6/0x660 [ 2937.908666][T16340] do_sys_openat2+0x16d/0x420 [ 2937.908689][T16340] ? build_open_flags+0x6f0/0x6f0 [ 2937.936369][T16340] ? __context_tracking_exit+0x9f/0xb0 [ 2937.941811][T16340] ? lock_downgrade+0x6e0/0x6e0 [ 2937.946643][T16340] __x64_sys_openat+0x13f/0x1f0 [ 2937.951488][T16340] ? __ia32_sys_open+0x1c0/0x1c0 [ 2937.956405][T16340] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2937.962376][T16340] ? syscall_enter_from_user_mode+0x27/0x70 [ 2937.968257][T16340] do_syscall_64+0x3a/0xb0 [ 2937.972663][T16340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2937.978554][T16340] RIP: 0033:0x4196c4 [ 2937.982432][T16340] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2938.002021][T16340] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2938.010412][T16340] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2938.018367][T16340] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2938.026318][T16340] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2938.034279][T16340] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2938.042227][T16340] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2938.134730][T28469] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 2938.154901][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2938.161155][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2938.170253][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2938.284626][T23877] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 2938.375131][T23877] usb 2-1: Invalid ep0 maxpacket: 512 11:56:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0xf, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:03 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/58) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000001c0)=""/1) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) syz_open_dev$evdev(&(0x7f00000000c0), 0x3ff, 0x100) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/140) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0xb2b0, 0x300cab3cf0f9338e) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000180)=""/41) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)) 11:56:03 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0xa64c3) 11:56:03 executing program 4 (fault-call:0 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2938.425817][ T6155] usb 3-1: USB disconnect, device number 16 [ 2938.497709][T16363] FAULT_INJECTION: forcing a failure. [ 2938.497709][T16363] name failslab, interval 1, probability 0, space 0, times 0 [ 2938.498870][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2938.510545][T16363] CPU: 1 PID: 16363 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2938.529033][T23877] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 2938.532097][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2938.549658][T16363] Call Trace: [ 2938.552937][T16363] dump_stack+0x143/0x1db [ 2938.557279][T16363] should_fail.cold+0x5/0xa [ 2938.561800][T16363] ? security_inode_alloc+0x34/0x160 [ 2938.567098][T16363] should_failslab+0x5/0x10 [ 2938.571615][T16363] kmem_cache_alloc+0x5b/0x360 [ 2938.576394][T16363] security_inode_alloc+0x34/0x160 [ 2938.581524][T16363] inode_init_always+0x52e/0xc40 [ 2938.586476][T16363] alloc_inode+0x82/0x230 [ 2938.590813][T16363] new_inode+0x27/0x2f0 [ 2938.594973][T16363] __ext4_new_inode+0x34f/0x5510 [ 2938.599920][T16363] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2938.605902][T16363] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2938.611709][T16363] ? trace_hardirqs_on+0x5b/0x1a0 [ 2938.616755][T16363] ? find_held_lock+0x2d/0x110 [ 2938.621509][T16363] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2938.627054][T16363] ? do_raw_spin_unlock+0x171/0x230 [ 2938.632236][T16363] ? d_splice_alias+0x4c6/0xc60 [ 2938.634611][T23877] usb 2-1: Invalid ep0 maxpacket: 512 [ 2938.637067][T16363] ? ext4_create+0x447/0x4d0 [ 2938.637095][T16363] ext4_create+0x2d6/0x4d0 [ 2938.637121][T16363] ? ext4_mknod+0x4e0/0x4e0 [ 2938.643155][T23877] usb usb2-port1: unable to enumerate USB device [ 2938.647042][T16363] ? generic_permission+0x126/0x5b0 [ 2938.647075][T16363] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2938.647106][T16363] ? security_inode_permission+0xc5/0xf0 [ 2938.647136][T16363] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2938.647180][T16363] ? ext4_mknod+0x4e0/0x4e0 [ 2938.690131][T16363] lookup_open.isra.0+0xf23/0x1300 [ 2938.695230][T16363] ? hashlen_string+0xf0/0xf0 [ 2938.699904][T16363] ? verify_cpu+0x100/0x100 [ 2938.704387][T16363] ? verify_cpu+0x100/0x100 [ 2938.708872][T16363] path_openat+0x9b4/0x27e0 [ 2938.713358][T16363] ? path_lookupat+0x850/0x850 [ 2938.718100][T16363] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2938.724062][T16363] do_filp_open+0x190/0x3d0 [ 2938.728560][T16363] ? may_open_dev+0xf0/0xf0 [ 2938.733041][T16363] ? do_raw_spin_lock+0x120/0x2b0 [ 2938.738047][T16363] ? rwlock_bug.part.0+0x90/0x90 [ 2938.742961][T16363] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2938.749211][T16363] ? _find_next_bit+0x1e3/0x260 [ 2938.754054][T16363] ? _raw_spin_unlock+0x1a/0x30 [ 2938.758929][T16363] ? alloc_fd+0x2e6/0x660 [ 2938.763243][T16363] do_sys_openat2+0x16d/0x420 [ 2938.767907][T16363] ? build_open_flags+0x6f0/0x6f0 [ 2938.772939][T16363] ? __context_tracking_exit+0x9f/0xb0 [ 2938.778389][T16363] ? lock_downgrade+0x6e0/0x6e0 [ 2938.783255][T16363] __x64_sys_openat+0x13f/0x1f0 [ 2938.788093][T16363] ? __ia32_sys_open+0x1c0/0x1c0 [ 2938.793039][T16363] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2938.799003][T16363] ? syscall_enter_from_user_mode+0x27/0x70 [ 2938.804889][T16363] do_syscall_64+0x3a/0xb0 [ 2938.809304][T16363] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2938.814633][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2938.815209][T16363] RIP: 0033:0x4196c4 [ 2938.815228][T16363] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2938.815251][T16363] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 [ 2938.821427][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2938.825240][T16363] ORIG_RAX: 0000000000000101 [ 2938.825251][T16363] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2938.825266][T16363] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2938.825279][T16363] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2938.825294][T16363] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2938.825310][T16363] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2938.904822][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2938.955458][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2938.974597][ T6155] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2939.166800][T28469] usb 4-1: USB disconnect, device number 20 [ 2939.374590][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2939.414668][ T6155] usb 3-1: not running at top speed; connect to a high speed hub 11:56:04 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/89) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/25) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/16) 11:56:04 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0xa64c3) 11:56:04 executing program 4 (fault-call:0 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffff9, 0x200000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/152) 11:56:04 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x5, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2939.494609][ T6155] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2939.590079][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 2939.590093][ T33] audit: type=1800 audit(1625918164.358:1957): pid=16387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15820 res=0 errno=0 [ 2939.605398][T16391] FAULT_INJECTION: forcing a failure. [ 2939.605398][T16391] name failslab, interval 1, probability 0, space 0, times 0 [ 2939.630228][T16391] CPU: 1 PID: 16391 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2939.638999][T16391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2939.649067][T16391] Call Trace: [ 2939.652351][T16391] dump_stack+0x143/0x1db [ 2939.653032][ T33] audit: type=1800 audit(1625918164.418:1958): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14389 res=0 errno=0 [ 2939.656685][T16391] should_fail.cold+0x5/0xa [ 2939.656719][T16391] ? tomoyo_realpath_from_path+0xc3/0x620 11:56:04 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0xa64c3) [ 2939.656751][T16391] should_failslab+0x5/0x10 [ 2939.656778][T16391] __kmalloc+0x72/0x310 [ 2939.656803][T16391] ? lock_chain_count+0x20/0x20 [ 2939.656832][T16391] tomoyo_realpath_from_path+0xc3/0x620 [ 2939.656862][T16391] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2939.656892][T16391] tomoyo_check_open_permission+0x272/0x380 [ 2939.656922][T16391] ? tomoyo_path_number_perm+0x590/0x590 [ 2939.724996][T16391] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2939.731002][T16391] ? path_get+0x5d/0x80 [ 2939.734537][ T33] audit: type=1800 audit(1625918164.498:1959): pid=16397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15824 res=0 errno=0 [ 2939.735172][T16391] ? lock_downgrade+0x6e0/0x6e0 [ 2939.761242][T16391] ? do_raw_spin_lock+0x120/0x2b0 [ 2939.766277][T16391] tomoyo_file_open+0xa3/0xd0 [ 2939.770974][T16391] security_file_open+0x52/0x4f0 [ 2939.774642][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2939.775923][T16391] do_dentry_open+0x353/0x1090 11:56:04 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0xa64c3) [ 2939.775952][T16391] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2939.775984][T16391] ? may_open+0x1f6/0x420 [ 2939.782181][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2939.786860][T16391] path_openat+0x1c0e/0x27e0 [ 2939.786892][T16391] ? path_lookupat+0x850/0x850 [ 2939.786920][T16391] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2939.793144][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2939.797441][T16391] do_filp_open+0x190/0x3d0 [ 2939.797465][T16391] ? may_open_dev+0xf0/0xf0 [ 2939.797487][T16391] ? do_raw_spin_lock+0x120/0x2b0 [ 2939.843685][T16391] ? rwlock_bug.part.0+0x90/0x90 [ 2939.848641][T16391] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2939.850138][ T33] audit: type=1800 audit(1625918164.618:1960): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15824 res=0 errno=0 [ 2939.854895][T16391] ? _find_next_bit+0x1e3/0x260 [ 2939.854926][T16391] ? _raw_spin_unlock+0x1a/0x30 [ 2939.854953][T16391] ? alloc_fd+0x2e6/0x660 11:56:04 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0xa64c3) [ 2939.854977][T16391] do_sys_openat2+0x16d/0x420 [ 2939.894831][T16391] ? build_open_flags+0x6f0/0x6f0 [ 2939.899860][T16391] ? __context_tracking_exit+0x9f/0xb0 [ 2939.904916][T28469] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 2939.905315][T16391] ? lock_downgrade+0x6e0/0x6e0 [ 2939.917700][T16391] __x64_sys_openat+0x13f/0x1f0 [ 2939.922569][T16391] ? __ia32_sys_open+0x1c0/0x1c0 [ 2939.927514][T16391] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2939.933506][T16391] ? syscall_enter_from_user_mode+0x27/0x70 [ 2939.939402][T16391] do_syscall_64+0x3a/0xb0 [ 2939.943828][T16391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2939.949722][T16391] RIP: 0033:0x4196c4 [ 2939.953619][T16391] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2939.973236][T16391] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2939.981661][T16391] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2939.989636][T16391] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2939.997611][T16391] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2939.998141][ T33] audit: type=1800 audit(1625918164.768:1961): pid=16403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15812 res=0 errno=0 [ 2940.005582][T16391] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2940.005600][T16391] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2940.005802][T16391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2940.050104][ T33] audit: type=1800 audit(1625918164.818:1962): pid=16391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15823 res=0 errno=0 11:56:04 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x10, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:04 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:04 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0xa64c3) 11:56:04 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/150) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000002c0)=""/167) 11:56:04 executing program 4 (fault-call:0 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2940.186172][ T8202] usb 3-1: USB disconnect, device number 17 11:56:05 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0xa64c3) [ 2940.256081][ T33] audit: type=1800 audit(1625918165.028:1963): pid=16415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15829 res=0 errno=0 [ 2940.277354][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2940.320017][T16421] FAULT_INJECTION: forcing a failure. [ 2940.320017][T16421] name failslab, interval 1, probability 0, space 0, times 0 [ 2940.332751][T16421] CPU: 0 PID: 16421 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2940.341530][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2940.350120][ T33] audit: type=1800 audit(1625918165.108:1964): pid=16425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15839 res=0 errno=0 [ 2940.351579][T16421] Call Trace: [ 2940.351589][T16421] dump_stack+0x143/0x1db [ 2940.380419][T16421] should_fail.cold+0x5/0xa [ 2940.384937][T16421] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2940.390319][T16421] should_failslab+0x5/0x10 [ 2940.394814][T16421] __kmalloc+0x72/0x310 [ 2940.398956][T16421] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2940.404134][T16421] tomoyo_encode+0x28/0x50 [ 2940.408540][T16421] tomoyo_realpath_from_path+0x186/0x620 [ 2940.414163][T16421] tomoyo_check_open_permission+0x272/0x380 [ 2940.420041][T16421] ? tomoyo_path_number_perm+0x590/0x590 [ 2940.425662][T16421] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2940.431632][T16421] ? path_get+0x5d/0x80 [ 2940.435768][T16421] ? lock_downgrade+0x6e0/0x6e0 [ 2940.440604][T16421] ? do_raw_spin_lock+0x120/0x2b0 [ 2940.445607][T16421] tomoyo_file_open+0xa3/0xd0 [ 2940.450271][T16421] security_file_open+0x52/0x4f0 [ 2940.455212][T16421] do_dentry_open+0x353/0x1090 [ 2940.459963][T16421] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2940.466194][T16421] ? may_open+0x1f6/0x420 [ 2940.470517][T16421] path_openat+0x1c0e/0x27e0 [ 2940.475101][T16421] ? path_lookupat+0x850/0x850 [ 2940.479857][T16421] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2940.485827][T16421] do_filp_open+0x190/0x3d0 [ 2940.490320][T16421] ? may_open_dev+0xf0/0xf0 [ 2940.494813][T16421] ? do_raw_spin_lock+0x120/0x2b0 [ 2940.499821][T16421] ? rwlock_bug.part.0+0x90/0x90 [ 2940.504733][T16421] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2940.510953][T16421] ? _find_next_bit+0x1e3/0x260 [ 2940.515779][T16421] ? _raw_spin_unlock+0x1a/0x30 [ 2940.520610][T16421] ? alloc_fd+0x2e6/0x660 [ 2940.524930][T16421] do_sys_openat2+0x16d/0x420 [ 2940.529591][T16421] ? build_open_flags+0x6f0/0x6f0 [ 2940.534595][T16421] ? __context_tracking_exit+0x9f/0xb0 [ 2940.540046][T16421] ? lock_downgrade+0x6e0/0x6e0 [ 2940.544899][T16421] __x64_sys_openat+0x13f/0x1f0 [ 2940.549730][T16421] ? __ia32_sys_open+0x1c0/0x1c0 [ 2940.554642][T16421] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2940.560634][T16421] ? syscall_enter_from_user_mode+0x27/0x70 [ 2940.566514][T16421] do_syscall_64+0x3a/0xb0 [ 2940.570915][T16421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2940.576797][T16421] RIP: 0033:0x4196c4 [ 2940.580675][T16421] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2940.600267][T16421] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2940.608657][T16421] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 11:56:05 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0xa64c3) [ 2940.616609][T16421] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2940.624565][T16421] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2940.632517][T16421] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2940.640470][T16421] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2940.648658][T16421] ERROR: Out of memory at tomoyo_realpath_from_path. 11:56:05 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x2000) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/31) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0xa5043) [ 2940.703876][ T33] audit: type=1800 audit(1625918165.448:1965): pid=16423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15840 res=0 errno=0 [ 2940.754292][ T33] audit: type=1800 audit(1625918165.518:1966): pid=16431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15830 res=0 errno=0 [ 2940.824611][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2940.830806][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2940.840729][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2940.887947][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2940.984360][ T8202] usb 3-1: new full-speed USB device number 18 using dummy_hcd 11:56:05 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x6, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:05 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x2, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:05 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0xa64c3) 11:56:05 executing program 4 (fault-call:0 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2941.096147][T16126] usb 4-1: USB disconnect, device number 21 [ 2941.158314][T16451] FAULT_INJECTION: forcing a failure. [ 2941.158314][T16451] name failslab, interval 1, probability 0, space 0, times 0 [ 2941.170996][T16451] CPU: 0 PID: 16451 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2941.179768][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2941.189826][T16451] Call Trace: [ 2941.193102][T16451] dump_stack+0x143/0x1db [ 2941.197439][T16451] should_fail.cold+0x5/0xa [ 2941.202049][T16451] ? integrity_inode_get+0x5a/0x270 [ 2941.207254][T16451] should_failslab+0x5/0x10 [ 2941.211771][T16451] kmem_cache_alloc+0x5b/0x360 [ 2941.216539][T16451] ? ima_get_action+0x7a/0xa0 [ 2941.221217][T16451] integrity_inode_get+0x5a/0x270 [ 2941.226237][T16451] process_measurement+0x33d/0x17e0 [ 2941.231419][T16451] ? mmap_violation_check+0x1e0/0x1e0 [ 2941.236797][T16451] ? tomoyo_path_number_perm+0x590/0x590 [ 2941.242453][T16451] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2941.248435][T16451] ? find_held_lock+0x2d/0x110 [ 2941.253179][T16451] ? aa_get_task_label+0x25f/0x540 [ 2941.258273][T16451] ? lock_downgrade+0x6e0/0x6e0 [ 2941.263111][T16451] ? fsnotify+0x1070/0x1070 [ 2941.267602][T16451] ? ext4_file_write_iter+0x1980/0x1980 [ 2941.273130][T16451] ? path_get+0x5d/0x80 [ 2941.277268][T16451] ? aa_get_task_label+0x288/0x540 [ 2941.282389][T16451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2941.288686][T16451] ? apparmor_task_getsecid+0xc2/0x110 [ 2941.294134][T16451] ima_file_check+0xb9/0x100 [ 2941.298701][T16451] ? process_measurement+0x17e0/0x17e0 [ 2941.304136][T16451] ? may_open+0x1f6/0x420 [ 2941.308448][T16451] path_openat+0x15b5/0x27e0 [ 2941.313035][T16451] ? path_lookupat+0x850/0x850 [ 2941.317784][T16451] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2941.323739][T16451] do_filp_open+0x190/0x3d0 [ 2941.328217][T16451] ? may_open_dev+0xf0/0xf0 [ 2941.332696][T16451] ? do_raw_spin_lock+0x120/0x2b0 [ 2941.337699][T16451] ? rwlock_bug.part.0+0x90/0x90 [ 2941.342645][T16451] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2941.348862][T16451] ? _find_next_bit+0x1e3/0x260 [ 2941.353692][T16451] ? _raw_spin_unlock+0x1a/0x30 [ 2941.358534][T16451] ? alloc_fd+0x2e6/0x660 [ 2941.362855][T16451] do_sys_openat2+0x16d/0x420 [ 2941.367522][T16451] ? build_open_flags+0x6f0/0x6f0 [ 2941.372541][T16451] ? __context_tracking_exit+0x9f/0xb0 [ 2941.377997][T16451] ? lock_downgrade+0x6e0/0x6e0 [ 2941.382853][T16451] __x64_sys_openat+0x13f/0x1f0 [ 2941.387702][T16451] ? __ia32_sys_open+0x1c0/0x1c0 [ 2941.392621][T16451] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2941.398582][T16451] ? syscall_enter_from_user_mode+0x27/0x70 [ 2941.404390][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2941.404451][T16451] do_syscall_64+0x3a/0xb0 [ 2941.416448][T16451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2941.422349][T16451] RIP: 0033:0x4196c4 [ 2941.426236][T16451] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2941.444483][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2941.445835][T16451] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2941.445862][T16451] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2941.445879][T16451] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2941.477833][T16451] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2941.485788][T16451] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2941.493739][T16451] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2941.524387][ T8202] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2941.574317][T16126] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 2941.764406][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2941.770710][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2941.779787][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2941.934349][T16126] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 11:56:06 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0xa64c3) 11:56:06 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:06 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x12, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:06 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x5, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000080), 0x5, 0x200000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000300)=""/151) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/143) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)=0x3f) 11:56:06 executing program 4 (fault-call:0 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2942.034822][ T8202] usb 3-1: USB disconnect, device number 18 [ 2942.082739][T16470] FAULT_INJECTION: forcing a failure. [ 2942.082739][T16470] name failslab, interval 1, probability 0, space 0, times 0 [ 2942.095566][T16470] CPU: 0 PID: 16470 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2942.104338][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2942.114393][T16470] Call Trace: [ 2942.117672][T16470] dump_stack+0x143/0x1db [ 2942.122027][T16470] should_fail.cold+0x5/0xa [ 2942.126566][T16470] should_failslab+0x5/0x10 [ 2942.131080][T16470] __kmalloc_track_caller+0x79/0x300 [ 2942.136373][T16470] ? ima_collect_measurement+0x342/0x570 [ 2942.142013][T16470] krealloc+0x7e/0xd0 [ 2942.145996][T16470] ima_collect_measurement+0x342/0x570 [ 2942.151463][T16470] ? ima_get_action+0xa0/0xa0 [ 2942.156165][T16470] ? ima_get_cache_status+0x1d0/0x1d0 [ 2942.161543][T16470] process_measurement+0xd1c/0x17e0 [ 2942.166745][T16470] ? mmap_violation_check+0x1e0/0x1e0 [ 2942.172122][T16470] ? tomoyo_path_number_perm+0x590/0x590 [ 2942.177773][T16470] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2942.183787][T16470] ? find_held_lock+0x2d/0x110 [ 2942.184420][T16126] usb 4-1: string descriptor 0 read error: -22 [ 2942.188649][T16470] ? aa_get_task_label+0x25f/0x540 [ 2942.188680][T16470] ? lock_downgrade+0x6e0/0x6e0 [ 2942.188712][T16470] ? fsnotify+0x1070/0x1070 [ 2942.201831][T16126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2942.204797][T16470] ? ext4_file_write_iter+0x1980/0x1980 [ 2942.204823][T16470] ? path_get+0x5d/0x80 [ 2942.204851][T16470] ? aa_get_task_label+0x288/0x540 11:56:06 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffff7ffffc, 0x484040) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2040) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000180)=[0x25a8, 0x4]) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/28) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/216) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000200)={0x51, 0xad5b, 0x200, {0x0, 0x1}, {0x0, 0x2}, @period={0x5c, 0x8, 0x19, 0x8, 0x0, {0x0, 0x8e0e, 0x800, 0x7}, 0x7, &(0x7f00000001c0)=[0x4, 0xff, 0x81, 0x9, 0x46b, 0x2, 0x8001]}}) 11:56:06 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0xa64c3) 11:56:07 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2942.204874][T16470] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2942.204898][T16470] ? apparmor_task_getsecid+0xc2/0x110 [ 2942.204918][T16470] ima_file_check+0xb9/0x100 [ 2942.209398][T16126] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2942.218381][T16470] ? process_measurement+0x17e0/0x17e0 [ 2942.218404][T16470] ? may_open+0x1f6/0x420 [ 2942.218426][T16470] path_openat+0x15b5/0x27e0 [ 2942.218451][T16470] ? path_lookupat+0x850/0x850 [ 2942.276507][T16470] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2942.282515][T16470] do_filp_open+0x190/0x3d0 [ 2942.287034][T16470] ? may_open_dev+0xf0/0xf0 [ 2942.291547][T16470] ? do_raw_spin_lock+0x120/0x2b0 [ 2942.296578][T16470] ? rwlock_bug.part.0+0x90/0x90 [ 2942.301534][T16470] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2942.307794][T16470] ? _find_next_bit+0x1e3/0x260 [ 2942.312692][T16470] ? _raw_spin_unlock+0x1a/0x30 [ 2942.315190][T16126] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2942.317540][T16470] ? alloc_fd+0x2e6/0x660 [ 2942.328439][T16470] do_sys_openat2+0x16d/0x420 [ 2942.333127][T16470] ? build_open_flags+0x6f0/0x6f0 [ 2942.338159][T16470] ? __context_tracking_exit+0x9f/0xb0 [ 2942.343626][T16470] ? lock_downgrade+0x6e0/0x6e0 [ 2942.348478][T16470] __x64_sys_openat+0x13f/0x1f0 [ 2942.353327][T16470] ? __ia32_sys_open+0x1c0/0x1c0 [ 2942.358267][T16470] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2942.364261][T16470] ? syscall_enter_from_user_mode+0x27/0x70 [ 2942.370163][T16470] do_syscall_64+0x3a/0xb0 [ 2942.374593][T16470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2942.380502][T16470] RIP: 0033:0x4196c4 [ 2942.384426][T16470] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2942.404034][T16470] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2942.412477][T16470] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2942.420441][T16470] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2942.428389][T16470] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2942.436338][T16470] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2942.444375][T16470] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 11:56:07 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x7, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:07 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0xa64c3) 11:56:07 executing program 4 (fault-call:0 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:07 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x83, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x0, 0x40, 0x84, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5193178c"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xff, 0x8000, 0x1f}, {0x6, 0x24, 0x1a, 0x4, 0x18}, [@obex={0x5, 0x24, 0x15, 0x7fff}, @country_functional={0xc, 0x24, 0x7, 0x1, 0x7ff, [0x0, 0x1, 0x5]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x9, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x14, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x40, 0x1, 0x60, 0x40, 0xff}, 0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="050f32000226100a8b8f5c1e329f808f6792467c1e2dd96c2b9588694f3e0de4a7779c87d398a148a3b502071002b3090000"]}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x4000) syz_open_dev$evdev(&(0x7f0000000440), 0x7fffffff, 0x84400) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000300)=""/28) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/9) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x80000000, 0x2400) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000340)=""/215) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000200)=""/192) 11:56:07 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000000)=""/57) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2942.524790][T28469] usb 4-1: USB disconnect, device number 22 [ 2942.554239][ T8202] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 2942.617594][T16504] FAULT_INJECTION: forcing a failure. [ 2942.617594][T16504] name failslab, interval 1, probability 0, space 0, times 0 [ 2942.630283][T16504] CPU: 1 PID: 16504 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2942.639060][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2942.649119][T16504] Call Trace: [ 2942.652394][T16504] dump_stack+0x143/0x1db [ 2942.656731][T16504] should_fail.cold+0x5/0xa [ 2942.661229][T16504] ? audit_log_start.part.0+0x27d/0x760 [ 2942.666764][T16504] should_failslab+0x5/0x10 [ 2942.671257][T16504] kmem_cache_alloc+0x5b/0x360 [ 2942.676011][T16504] audit_log_start.part.0+0x27d/0x760 [ 2942.681375][T16504] ? audit_log_task_context+0x160/0x160 [ 2942.686911][T16504] ? audit_filter+0x319/0xb90 [ 2942.691574][T16504] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2942.697545][T16504] ? audit_compare_dname_path+0x120/0x120 [ 2942.703337][T16504] ? lock_acquire+0x19d/0x700 [ 2942.708009][T16504] ? fs_reclaim_acquire+0xb2/0x160 [ 2942.713110][T16504] ? find_held_lock+0x2d/0x110 [ 2942.717860][T16504] audit_log_start+0x5f/0x90 [ 2942.722432][T16504] integrity_audit_message+0x100/0x430 [ 2942.727873][T16504] ? integrity_kernel_read+0xb0/0xb0 [ 2942.733138][T16504] integrity_audit_msg+0x3d/0x50 [ 2942.738055][T16504] ima_collect_measurement+0x3d4/0x570 [ 2942.743500][T16504] ? ima_get_action+0xa0/0xa0 [ 2942.748159][T16504] ? ima_get_cache_status+0x1d0/0x1d0 [ 2942.753511][T16504] process_measurement+0xd1c/0x17e0 [ 2942.758722][T16504] ? mmap_violation_check+0x1e0/0x1e0 [ 2942.764083][T16504] ? tomoyo_path_number_perm+0x590/0x590 [ 2942.769701][T16504] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2942.775667][T16504] ? find_held_lock+0x2d/0x110 [ 2942.780416][T16504] ? aa_get_task_label+0x25f/0x540 [ 2942.785512][T16504] ? lock_downgrade+0x6e0/0x6e0 [ 2942.790357][T16504] ? fsnotify+0x1070/0x1070 [ 2942.794860][T16504] ? ext4_file_write_iter+0x1980/0x1980 [ 2942.800396][T16504] ? path_get+0x5d/0x80 [ 2942.804539][T16504] ? aa_get_task_label+0x288/0x540 [ 2942.809639][T16504] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2942.815863][T16504] ? apparmor_task_getsecid+0xc2/0x110 [ 2942.821300][T16504] ima_file_check+0xb9/0x100 [ 2942.825865][T16504] ? process_measurement+0x17e0/0x17e0 [ 2942.831299][T16504] ? may_open+0x1f6/0x420 [ 2942.835606][T16504] path_openat+0x15b5/0x27e0 [ 2942.840199][T16504] ? path_lookupat+0x850/0x850 [ 2942.845037][T16504] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2942.851000][T16504] do_filp_open+0x190/0x3d0 [ 2942.855481][T16504] ? may_open_dev+0xf0/0xf0 [ 2942.859970][T16504] ? do_raw_spin_lock+0x120/0x2b0 [ 2942.864971][T16504] ? rwlock_bug.part.0+0x90/0x90 [ 2942.869884][T16504] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2942.876106][T16504] ? _find_next_bit+0x1e3/0x260 [ 2942.880944][T16504] ? _raw_spin_unlock+0x1a/0x30 [ 2942.885780][T16504] ? alloc_fd+0x2e6/0x660 [ 2942.890113][T16504] do_sys_openat2+0x16d/0x420 [ 2942.894778][T16504] ? build_open_flags+0x6f0/0x6f0 [ 2942.899790][T16504] ? __context_tracking_exit+0x9f/0xb0 [ 2942.905235][T16504] ? lock_downgrade+0x6e0/0x6e0 [ 2942.910075][T16504] __x64_sys_openat+0x13f/0x1f0 [ 2942.914909][T16504] ? __ia32_sys_open+0x1c0/0x1c0 [ 2942.919833][T16504] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2942.925795][T16504] ? syscall_enter_from_user_mode+0x27/0x70 [ 2942.931676][T16504] do_syscall_64+0x3a/0xb0 [ 2942.936070][T16504] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2942.941942][T16504] RIP: 0033:0x4196c4 [ 2942.945812][T16504] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 11:56:07 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0xa64c3) [ 2942.965405][T16504] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2942.973881][T16504] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2942.981832][T16504] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2942.989788][T16504] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2942.997743][T16504] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2943.005712][T16504] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 11:56:07 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xba3, 0x400000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/192) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:07 executing program 4 (fault-call:0 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:07 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0xa64c3) [ 2943.109499][T16520] FAULT_INJECTION: forcing a failure. [ 2943.109499][T16520] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.122509][T16520] CPU: 0 PID: 16520 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2943.131294][T16520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2943.141354][T16520] Call Trace: [ 2943.144637][T16520] dump_stack+0x143/0x1db [ 2943.148981][T16520] should_fail.cold+0x5/0xa [ 2943.153494][T16520] ? __alloc_skb+0x20b/0x340 11:56:07 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x9c260000, 0xa64c3) 11:56:07 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x8802) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001580)=""/179) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x6, 0x101880) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000300)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xbf6a, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001300)=""/78) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "84b60375eb8037ff38ed4fef7ecee89b036b6626981e71bc83395fcfb70a11f0"}) r4 = syz_open_dev$evdev(&(0x7f0000001440), 0xc2b, 0x80000) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000001480)=""/11) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001380)=""/186) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2943.158089][T16520] should_failslab+0x5/0x10 [ 2943.162606][T16520] kmem_cache_alloc_node+0x55/0x390 [ 2943.167834][T16520] __alloc_skb+0x20b/0x340 [ 2943.172279][T16520] audit_log_start.part.0+0x2a2/0x760 [ 2943.177663][T16520] ? audit_log_task_context+0x160/0x160 [ 2943.183236][T16520] ? audit_filter+0x319/0xb90 [ 2943.187922][T16520] ? lock_chain_count+0x20/0x20 [ 2943.192787][T16520] ? audit_compare_dname_path+0x120/0x120 [ 2943.198519][T16520] ? lock_acquire+0x19d/0x700 [ 2943.203212][T16520] ? ___slab_alloc+0x17c/0x820 [ 2943.207990][T16520] audit_log_start+0x5f/0x90 [ 2943.212600][T16520] integrity_audit_message+0x100/0x430 [ 2943.218072][T16520] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2943.224115][T16520] ? integrity_kernel_read+0xb0/0xb0 [ 2943.229424][T16520] integrity_audit_msg+0x3d/0x50 [ 2943.234363][T16520] ima_collect_measurement+0x3d4/0x570 [ 2943.239835][T16520] ? ima_get_action+0xa0/0xa0 [ 2943.244514][T16520] ? ima_get_cache_status+0x1d0/0x1d0 [ 2943.249869][T16520] process_measurement+0xd1c/0x17e0 [ 2943.255166][T16520] ? mmap_violation_check+0x1e0/0x1e0 [ 2943.260540][T16520] ? tomoyo_path_number_perm+0x590/0x590 [ 2943.266179][T16520] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2943.272187][T16520] ? find_held_lock+0x2d/0x110 [ 2943.277041][T16520] ? aa_get_task_label+0x25f/0x540 [ 2943.282141][T16520] ? lock_downgrade+0x6e0/0x6e0 [ 2943.286994][T16520] ? fsnotify+0x1070/0x1070 [ 2943.291499][T16520] ? ext4_file_write_iter+0x1980/0x1980 [ 2943.297048][T16520] ? path_get+0x5d/0x80 [ 2943.301193][T16520] ? aa_get_task_label+0x288/0x540 [ 2943.306376][T16520] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2943.312617][T16520] ? apparmor_task_getsecid+0xc2/0x110 [ 2943.318059][T16520] ima_file_check+0xb9/0x100 [ 2943.322637][T16520] ? process_measurement+0x17e0/0x17e0 [ 2943.328094][T16520] ? may_open+0x1f6/0x420 [ 2943.332404][T16520] path_openat+0x15b5/0x27e0 [ 2943.334245][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2943.336979][T16520] ? path_lookupat+0x850/0x850 [ 2943.337012][T16520] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2943.337046][T16520] do_filp_open+0x190/0x3d0 [ 2943.359838][T16520] ? may_open_dev+0xf0/0xf0 [ 2943.364351][T16520] ? do_raw_spin_lock+0x120/0x2b0 [ 2943.369372][T16520] ? rwlock_bug.part.0+0x90/0x90 [ 2943.374314][T16520] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2943.380551][T16520] ? _find_next_bit+0x1e3/0x260 [ 2943.384359][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2943.385406][T16520] ? _raw_spin_unlock+0x1a/0x30 [ 2943.385435][T16520] ? alloc_fd+0x2e6/0x660 [ 2943.385461][T16520] do_sys_openat2+0x16d/0x420 [ 2943.406934][T16520] ? build_open_flags+0x6f0/0x6f0 [ 2943.411943][T16520] ? __context_tracking_exit+0x9f/0xb0 [ 2943.417382][T16520] ? lock_downgrade+0x6e0/0x6e0 [ 2943.422215][T16520] __x64_sys_openat+0x13f/0x1f0 [ 2943.427044][T16520] ? __ia32_sys_open+0x1c0/0x1c0 [ 2943.431985][T16520] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2943.437948][T16520] ? syscall_enter_from_user_mode+0x27/0x70 [ 2943.443828][T16520] do_syscall_64+0x3a/0xb0 [ 2943.448240][T16520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2943.454137][T16520] RIP: 0033:0x4196c4 [ 2943.458013][T16520] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2943.464359][ T8202] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2943.477611][T16520] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2943.477642][T16520] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2943.477661][T16520] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2943.477680][T16520] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2943.477696][T16520] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2943.477710][T16520] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2943.478936][ T6155] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 2943.487395][ T8202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2943.704177][T28469] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 2943.764195][ T6155] usb 1-1: Invalid ep0 maxpacket: 32 [ 2943.784228][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2943.790465][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2943.799539][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2943.845074][ T8202] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2943.914158][ T6155] usb 1-1: new low-speed USB device number 67 using dummy_hcd 11:56:08 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0xa64c3) [ 2944.055206][ T7101] usb 3-1: USB disconnect, device number 19 [ 2944.104423][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2944.164679][ T6155] usb 1-1: Invalid ep0 maxpacket: 32 [ 2944.170095][ T6155] usb usb1-port1: attempt power cycle [ 2944.414142][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2944.420354][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2944.429427][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2944.484716][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2944.624086][ T6155] usb 1-1: new low-speed USB device number 68 using dummy_hcd 11:56:09 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x9, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:09 executing program 4 (fault-call:0 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:09 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2944.695465][T28469] usb 4-1: USB disconnect, device number 23 [ 2944.722410][ T6155] usb 1-1: Invalid ep0 maxpacket: 32 [ 2944.748585][T16557] FAULT_INJECTION: forcing a failure. [ 2944.748585][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 2944.761506][T16557] CPU: 0 PID: 16557 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2944.770272][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2944.780352][T16557] Call Trace: [ 2944.783630][T16557] dump_stack+0x143/0x1db [ 2944.787969][T16557] should_fail.cold+0x5/0xa [ 2944.792494][T16557] should_failslab+0x5/0x10 [ 2944.797009][T16557] __kmalloc_node_track_caller+0x7d/0x330 [ 2944.802723][T16557] ? audit_log_start.part.0+0x2a2/0x760 [ 2944.808275][T16557] __alloc_skb+0xde/0x340 [ 2944.812624][T16557] audit_log_start.part.0+0x2a2/0x760 [ 2944.817988][T16557] ? audit_log_task_context+0x160/0x160 [ 2944.823524][T16557] ? audit_filter+0x319/0xb90 [ 2944.828193][T16557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2944.834160][T16557] ? audit_compare_dname_path+0x120/0x120 [ 2944.839878][T16557] ? lock_acquire+0x19d/0x700 [ 2944.844539][T16557] ? fs_reclaim_acquire+0xb2/0x160 [ 2944.849633][T16557] ? find_held_lock+0x2d/0x110 [ 2944.854394][T16557] audit_log_start+0x5f/0x90 [ 2944.858968][T16557] integrity_audit_message+0x100/0x430 [ 2944.864407][T16557] ? integrity_kernel_read+0xb0/0xb0 [ 2944.869671][T16557] integrity_audit_msg+0x3d/0x50 [ 2944.874583][T16557] ima_collect_measurement+0x3d4/0x570 [ 2944.880025][T16557] ? ima_get_action+0xa0/0xa0 [ 2944.884684][T16557] ? ima_get_cache_status+0x1d0/0x1d0 [ 2944.890035][T16557] process_measurement+0xd1c/0x17e0 [ 2944.895214][T16557] ? mmap_violation_check+0x1e0/0x1e0 [ 2944.900572][T16557] ? tomoyo_path_number_perm+0x590/0x590 [ 2944.906194][T16557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2944.912168][T16557] ? find_held_lock+0x2d/0x110 [ 2944.916924][T16557] ? aa_get_task_label+0x25f/0x540 [ 2944.922025][T16557] ? lock_downgrade+0x6e0/0x6e0 [ 2944.926877][T16557] ? fsnotify+0x1070/0x1070 [ 2944.931383][T16557] ? ext4_file_write_iter+0x1980/0x1980 [ 2944.936911][T16557] ? path_get+0x5d/0x80 [ 2944.941052][T16557] ? aa_get_task_label+0x288/0x540 [ 2944.946143][T16557] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2944.952371][T16557] ? apparmor_task_getsecid+0xc2/0x110 [ 2944.957813][T16557] ima_file_check+0xb9/0x100 [ 2944.962378][T16557] ? process_measurement+0x17e0/0x17e0 [ 2944.967817][T16557] ? may_open+0x1f6/0x420 [ 2944.972139][T16557] path_openat+0x15b5/0x27e0 [ 2944.976717][T16557] ? path_lookupat+0x850/0x850 [ 2944.981490][T16557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2944.987541][T16557] do_filp_open+0x190/0x3d0 [ 2944.992066][T16557] ? may_open_dev+0xf0/0xf0 [ 2944.996561][T16557] ? do_raw_spin_lock+0x120/0x2b0 [ 2945.001571][T16557] ? rwlock_bug.part.0+0x90/0x90 [ 2945.006491][T16557] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2945.012719][T16557] ? _find_next_bit+0x1e3/0x260 [ 2945.017565][T16557] ? _raw_spin_unlock+0x1a/0x30 [ 2945.022404][T16557] ? alloc_fd+0x2e6/0x660 [ 2945.026720][T16557] do_sys_openat2+0x16d/0x420 [ 2945.031383][T16557] ? build_open_flags+0x6f0/0x6f0 [ 2945.036412][T16557] ? __context_tracking_exit+0x9f/0xb0 [ 2945.041861][T16557] ? lock_downgrade+0x6e0/0x6e0 [ 2945.046700][T16557] __x64_sys_openat+0x13f/0x1f0 [ 2945.051537][T16557] ? __ia32_sys_open+0x1c0/0x1c0 [ 2945.056470][T16557] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2945.062433][T16557] ? syscall_enter_from_user_mode+0x27/0x70 [ 2945.068306][T16557] do_syscall_64+0x3a/0xb0 [ 2945.072701][T16557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2945.078574][T16557] RIP: 0033:0x4196c4 [ 2945.082443][T16557] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2945.102031][T16557] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2945.110432][T16557] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2945.118388][T16557] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2945.126349][T16557] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2945.134301][T16557] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2945.142251][T16557] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2945.150581][T16557] audit_log_lost: 22 callbacks suppressed [ 2945.150595][T16557] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 2945.164089][T16557] audit: out of memory in audit_log_start [ 2945.234071][ T6155] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 2945.294058][ T8202] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 2945.324468][ T6155] usb 1-1: Invalid ep0 maxpacket: 32 [ 2945.329924][ T6155] usb usb1-port1: unable to enumerate USB device 11:56:10 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x401, 0x0, 0x4959f70a, 0x2, 0x3b, 0x4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x10000, 0xfff, 0x78e9, 0xc00, 0x2, 0x9}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) 11:56:10 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/34, 0x22) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/144) 11:56:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0xa64c3) 11:56:10 executing program 4 (fault-call:0 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2945.514053][T28469] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 2945.600130][T16570] FAULT_INJECTION: forcing a failure. [ 2945.600130][T16570] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.611990][ T33] audit: type=1800 audit(1625918170.379:1986): pid=16572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14689 res=0 errno=0 [ 2945.612817][T16570] CPU: 0 PID: 16570 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2945.642742][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2945.647897][ T33] audit: type=1800 audit(1625918170.419:1987): pid=16573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14721 res=0 errno=0 [ 2945.652787][T16570] Call Trace: [ 2945.652797][T16570] dump_stack+0x143/0x1db [ 2945.652824][T16570] should_fail.cold+0x5/0xa [ 2945.686125][T16570] ? aa_label_snxprint+0x4e4/0x910 [ 2945.691243][T16570] ? aa_label_asxprint+0x86/0x130 [ 2945.696273][T16570] should_failslab+0x5/0x10 11:56:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0xa64c3) [ 2945.700788][T16570] __kmalloc+0x72/0x310 [ 2945.704957][T16570] aa_label_asxprint+0x86/0x130 [ 2945.709826][T16570] apparmor_secid_to_secctx+0x84/0x150 [ 2945.715298][T16570] security_secid_to_secctx+0x6c/0xb0 [ 2945.720688][T16570] audit_log_task_context+0xec/0x160 [ 2945.723865][ T33] audit: type=1800 audit(1625918170.489:1988): pid=16575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14721 res=0 errno=0 11:56:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0xa64c3) [ 2945.725988][T16570] ? audit_log_format+0x110/0x110 [ 2945.726022][T16570] ? from_kuid+0x85/0xc0 [ 2945.726049][T16570] integrity_audit_message+0x250/0x430 [ 2945.726075][T16570] ? integrity_kernel_read+0xb0/0xb0 [ 2945.748583][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2945.752323][T16570] integrity_audit_msg+0x3d/0x50 [ 2945.752350][T16570] ima_collect_measurement+0x3d4/0x570 [ 2945.752378][T16570] ? ima_get_action+0xa0/0xa0 [ 2945.789920][T16570] ? ima_get_cache_status+0x1d0/0x1d0 [ 2945.795320][T16570] process_measurement+0xd1c/0x17e0 [ 2945.800534][T16570] ? mmap_violation_check+0x1e0/0x1e0 [ 2945.804800][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2945.805927][T16570] ? tomoyo_path_number_perm+0x590/0x590 [ 2945.805964][T16570] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2945.805998][T16570] ? find_held_lock+0x2d/0x110 [ 2945.822677][ T33] audit: type=1800 audit(1625918170.589:1989): pid=16577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14721 res=0 errno=0 11:56:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0xa64c3) [ 2945.825259][T16570] ? aa_get_task_label+0x25f/0x540 [ 2945.825292][T16570] ? lock_downgrade+0x6e0/0x6e0 [ 2945.825323][T16570] ? fsnotify+0x1070/0x1070 [ 2945.825350][T16570] ? ext4_file_write_iter+0x1980/0x1980 [ 2945.825374][T16570] ? path_get+0x5d/0x80 [ 2945.825400][T16570] ? aa_get_task_label+0x288/0x540 [ 2945.877903][ T33] audit: type=1800 audit(1625918170.649:1990): pid=16579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14721 res=0 errno=0 [ 2945.880511][T16570] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2945.880548][T16570] ? apparmor_task_getsecid+0xc2/0x110 [ 2945.880579][T16570] ima_file_check+0xb9/0x100 [ 2945.903229][ T8202] usb 3-1: config 1 has an invalid interface number: 2 but max is 0 [ 2945.908158][T16570] ? process_measurement+0x17e0/0x17e0 [ 2945.908188][T16570] ? may_open+0x1f6/0x420 [ 2945.908216][T16570] path_openat+0x15b5/0x27e0 [ 2945.908247][T16570] ? path_lookupat+0x850/0x850 [ 2945.908276][T16570] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 11:56:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0xa64c3) [ 2945.913729][ T8202] usb 3-1: config 1 has no interface number 0 [ 2945.918293][T16570] do_filp_open+0x190/0x3d0 [ 2945.918319][T16570] ? may_open_dev+0xf0/0xf0 [ 2945.918342][T16570] ? do_raw_spin_lock+0x120/0x2b0 [ 2945.932121][ T8202] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2945.936040][T16570] ? rwlock_bug.part.0+0x90/0x90 [ 2945.936064][T16570] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2945.936091][T16570] ? _find_next_bit+0x1e3/0x260 [ 2945.936113][T16570] ? _raw_spin_unlock+0x1a/0x30 11:56:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0xa64c3) [ 2945.936135][T16570] ? alloc_fd+0x2e6/0x660 [ 2945.936156][T16570] do_sys_openat2+0x16d/0x420 [ 2945.940719][ T8202] usb 3-1: config 1 interface 2 has no altsetting 0 [ 2945.945447][T16570] ? build_open_flags+0x6f0/0x6f0 [ 2945.945470][T16570] ? __context_tracking_exit+0x9f/0xb0 [ 2945.945493][T16570] ? lock_downgrade+0x6e0/0x6e0 [ 2945.945515][T16570] __x64_sys_openat+0x13f/0x1f0 [ 2945.945534][T16570] ? __ia32_sys_open+0x1c0/0x1c0 [ 2945.945553][T16570] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2945.945581][T16570] ? syscall_enter_from_user_mode+0x27/0x70 [ 2945.945603][T16570] do_syscall_64+0x3a/0xb0 [ 2945.945621][T16570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2945.945644][T16570] RIP: 0033:0x4196c4 [ 2946.001214][ T33] audit: type=1800 audit(1625918170.769:1991): pid=16581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14721 res=0 errno=0 [ 2946.001979][T16570] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2946.002008][T16570] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 [ 2946.055602][ T33] audit: type=1800 audit(1625918170.829:1992): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14721 res=0 errno=0 [ 2946.058812][T16570] ORIG_RAX: 0000000000000101 [ 2946.058825][T16570] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2946.058844][T16570] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2946.058862][T16570] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2946.058878][T16570] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2946.173216][T16570] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2946.181536][T16570] audit: error in audit_log_task_context [ 2946.204025][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2946.219353][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2946.228464][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.284725][ T8202] usb 3-1: bad CDC descriptors [ 2946.434009][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2946.496611][ T8202] usb 3-1: USB disconnect, device number 20 [ 2946.723948][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2946.730275][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2946.739358][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2946.784954][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 11:56:11 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0xa, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:11 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0xa64c3) 11:56:11 executing program 4 (fault-call:0 fault-nth:17): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:11 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) syz_open_dev$evdev(&(0x7f0000000400), 0x3, 0x40801) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000440)=""/226) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xfb2, 0x200240) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/166) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x9, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000001c0)=""/23) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000380)=[0x9, 0x4]) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000002c0)=""/178) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r5 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000003c0)={0x80, 0x3, 0x1f, 0x401, "a510d22275cba103fa294adece753a3c3d9560894b3b06f6587e708371ddd633"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x501801) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x264c1) 11:56:11 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2946.994321][ T8202] usb 4-1: USB disconnect, device number 24 [ 2947.100634][T16619] FAULT_INJECTION: forcing a failure. [ 2947.100634][T16619] name failslab, interval 1, probability 0, space 0, times 0 [ 2947.113402][T16619] CPU: 1 PID: 16619 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2947.122195][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2947.132258][T16619] Call Trace: [ 2947.135543][T16619] dump_stack+0x143/0x1db [ 2947.139887][T16619] should_fail.cold+0x5/0xa [ 2947.144415][T16619] ? ima_d_path+0x4d/0x1f0 [ 2947.148844][T16619] should_failslab+0x5/0x10 [ 2947.153361][T16619] kmem_cache_alloc+0x5b/0x360 [ 2947.158133][T16619] ima_d_path+0x4d/0x1f0 [ 2947.162380][T16619] process_measurement+0x137d/0x17e0 [ 2947.167675][T16619] ? mmap_violation_check+0x1e0/0x1e0 [ 2947.173070][T16619] ? tomoyo_path_number_perm+0x590/0x590 [ 2947.178720][T16619] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2947.184711][T16619] ? find_held_lock+0x2d/0x110 [ 2947.189477][T16619] ? aa_get_task_label+0x25f/0x540 [ 2947.194597][T16619] ? lock_downgrade+0x6e0/0x6e0 [ 2947.199466][T16619] ? fsnotify+0x1070/0x1070 [ 2947.203971][T16619] ? ext4_file_write_iter+0x1980/0x1980 [ 2947.209518][T16619] ? path_get+0x5d/0x80 [ 2947.213679][T16619] ? aa_get_task_label+0x288/0x540 [ 2947.218803][T16619] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2947.225056][T16619] ? apparmor_task_getsecid+0xc2/0x110 [ 2947.230535][T16619] ima_file_check+0xb9/0x100 [ 2947.235137][T16619] ? process_measurement+0x17e0/0x17e0 [ 2947.240607][T16619] ? may_open+0x1f6/0x420 [ 2947.244957][T16619] path_openat+0x15b5/0x27e0 11:56:11 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0xa64c3) 11:56:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000, 0xa64c3) 11:56:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x4923c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/74) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000400)=""/151) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000000000, 0x701100) 11:56:12 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0xa64c3) 11:56:12 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0xa64c3) [ 2947.249561][T16619] ? path_lookupat+0x850/0x850 [ 2947.254331][T16619] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2947.260315][T16619] do_filp_open+0x190/0x3d0 [ 2947.264814][T16619] ? may_open_dev+0xf0/0xf0 [ 2947.269317][T16619] ? do_raw_spin_lock+0x120/0x2b0 [ 2947.274345][T16619] ? rwlock_bug.part.0+0x90/0x90 [ 2947.279280][T16619] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2947.285528][T16619] ? _find_next_bit+0x1e3/0x260 [ 2947.290472][T16619] ? _raw_spin_unlock+0x1a/0x30 [ 2947.295330][T16619] ? alloc_fd+0x2e6/0x660 11:56:12 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0xa64c3) [ 2947.299660][T16619] do_sys_openat2+0x16d/0x420 [ 2947.304345][T16619] ? build_open_flags+0x6f0/0x6f0 [ 2947.309371][T16619] ? __context_tracking_exit+0x9f/0xb0 [ 2947.314862][T16619] ? lock_downgrade+0x6e0/0x6e0 [ 2947.319728][T16619] __x64_sys_openat+0x13f/0x1f0 [ 2947.324590][T16619] ? __ia32_sys_open+0x1c0/0x1c0 [ 2947.329538][T16619] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2947.335626][T16619] ? syscall_enter_from_user_mode+0x27/0x70 [ 2947.341535][T16619] do_syscall_64+0x3a/0xb0 [ 2947.345980][T16619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2947.351869][T16619] RIP: 0033:0x4196c4 [ 2947.355766][T16619] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2947.375356][T16619] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2947.383842][T16619] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2947.391795][T16619] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2947.399759][T16619] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2947.407735][T16619] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2947.415732][T16619] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2947.583866][T28469] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 2947.773846][ T8202] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 2947.984432][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2948.023948][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2948.124451][T28469] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 2948.132476][T28469] usb 3-1: config 1 has no interface number 0 [ 2948.133976][ T8202] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2948.140426][T28469] usb 3-1: config 1 interface 3 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2948.161112][T28469] usb 3-1: config 1 interface 3 has no altsetting 0 [ 2948.393866][ T8202] usb 4-1: string descriptor 0 read error: -22 [ 2948.400147][ T8202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2948.403944][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2948.409233][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2948.417693][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2948.432397][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2948.467670][ T8202] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2948.494666][T28469] usb 3-1: bad CDC descriptors 11:56:13 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0xf, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:13 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0xa64c3) 11:56:13 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x9e0, 0x44e502) 11:56:13 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x1, 0x311202) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:13 executing program 4 (fault-call:0 fault-nth:18): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2948.678108][ T8202] usb 4-1: USB disconnect, device number 25 11:56:13 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2948.753092][T22565] usb 3-1: USB disconnect, device number 21 11:56:13 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0xedd, 0x6, 0x1, 0x23}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2948.808993][T16663] FAULT_INJECTION: forcing a failure. [ 2948.808993][T16663] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.821683][T16663] CPU: 1 PID: 16663 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2948.830452][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2948.840517][T16663] Call Trace: [ 2948.843800][T16663] dump_stack+0x143/0x1db [ 2948.848144][T16663] should_fail.cold+0x5/0xa [ 2948.852667][T16663] ? ima_alloc_init_template+0xb4/0x750 [ 2948.858229][T16663] should_failslab+0x5/0x10 [ 2948.862744][T16663] __kmalloc+0x72/0x310 [ 2948.866918][T16663] ima_alloc_init_template+0xb4/0x750 [ 2948.872303][T16663] ? dentry_path_raw+0x30/0x30 [ 2948.877080][T16663] ima_store_measurement+0x1d7/0x5a0 [ 2948.882374][T16663] ? ima_collect_measurement+0x570/0x570 [ 2948.888009][T16663] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2948.894257][T16663] ? d_absolute_path+0x12e/0x180 [ 2948.899199][T16663] ? __d_path+0x160/0x160 [ 2948.903539][T16663] ? kmem_cache_alloc+0x32c/0x360 11:56:13 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x400000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:13 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0xa64c3) [ 2948.908572][T16663] process_measurement+0x11fb/0x17e0 [ 2948.913862][T16663] ? mmap_violation_check+0x1e0/0x1e0 [ 2948.919236][T16663] ? tomoyo_path_number_perm+0x590/0x590 [ 2948.924875][T16663] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2948.930884][T16663] ? find_held_lock+0x2d/0x110 [ 2948.935658][T16663] ? aa_get_task_label+0x25f/0x540 [ 2948.940774][T16663] ? lock_downgrade+0x6e0/0x6e0 [ 2948.945639][T16663] ? fsnotify+0x1070/0x1070 [ 2948.950156][T16663] ? ext4_file_write_iter+0x1980/0x1980 [ 2948.955714][T16663] ? path_get+0x5d/0x80 [ 2948.959882][T16663] ? aa_get_task_label+0x288/0x540 [ 2948.965011][T16663] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2948.971268][T16663] ? apparmor_task_getsecid+0xc2/0x110 [ 2948.976729][T16663] ima_file_check+0xb9/0x100 [ 2948.981325][T16663] ? process_measurement+0x17e0/0x17e0 [ 2948.986817][T16663] ? may_open+0x1f6/0x420 [ 2948.991159][T16663] path_openat+0x15b5/0x27e0 [ 2948.995781][T16663] ? path_lookupat+0x850/0x850 [ 2949.000560][T16663] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 11:56:13 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/185) [ 2949.006578][T16663] do_filp_open+0x190/0x3d0 [ 2949.011082][T16663] ? may_open_dev+0xf0/0xf0 [ 2949.015593][T16663] ? do_raw_spin_lock+0x120/0x2b0 [ 2949.020621][T16663] ? rwlock_bug.part.0+0x90/0x90 [ 2949.025652][T16663] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2949.031908][T16663] ? _find_next_bit+0x1e3/0x260 [ 2949.036765][T16663] ? _raw_spin_unlock+0x1a/0x30 [ 2949.041677][T16663] ? alloc_fd+0x2e6/0x660 [ 2949.046018][T16663] do_sys_openat2+0x16d/0x420 [ 2949.050714][T16663] ? build_open_flags+0x6f0/0x6f0 11:56:13 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0xa64c3) [ 2949.055752][T16663] ? __context_tracking_exit+0x9f/0xb0 [ 2949.061232][T16663] ? lock_downgrade+0x6e0/0x6e0 [ 2949.066207][T16663] __x64_sys_openat+0x13f/0x1f0 [ 2949.071074][T16663] ? __ia32_sys_open+0x1c0/0x1c0 [ 2949.076026][T16663] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2949.082018][T16663] ? syscall_enter_from_user_mode+0x27/0x70 [ 2949.087914][T16663] do_syscall_64+0x3a/0xb0 [ 2949.092506][T16663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2949.098404][T16663] RIP: 0033:0x4196c4 11:56:13 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x800) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffeffffff8, 0x2082) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/212) read$char_usb(r0, &(0x7f0000000300)=""/23, 0x17) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f, 0xa64c3) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1ff, 0x101000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000200)=""/216) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x7f, 0x88502) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000180)=""/59) [ 2949.102301][T16663] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2949.121910][T16663] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2949.130411][T16663] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2949.138382][T16663] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2949.146352][T16663] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2949.154329][T16663] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2949.162305][T16663] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2949.473894][ T8202] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 2949.543704][T22565] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 2949.833789][ T8202] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2949.943692][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2949.983870][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2950.063901][T22565] usb 3-1: config 1 has an invalid interface number: 4 but max is 0 [ 2950.071940][T22565] usb 3-1: config 1 has no interface number 0 [ 2950.078505][T22565] usb 3-1: config 1 interface 4 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2950.088275][T22565] usb 3-1: config 1 interface 4 has no altsetting 0 [ 2950.094947][ T8202] usb 4-1: string descriptor 0 read error: -22 [ 2950.101136][ T8202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2950.110203][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2950.174794][ T8202] cdc_ether: probe of 4-1:1.0 failed with error -22 11:56:15 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x105980) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)='s}\fJ'}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x327941) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x200, 0x1) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000140)=[0x8001, 0x3]) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0xe) 11:56:15 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x24000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x11, 0x29c, &(0x7f0000001780)="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"}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x7, 0x40) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000002c0)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:15 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0xa64c3) 11:56:15 executing program 4 (fault-call:0 fault-nth:19): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2950.387178][T28469] usb 4-1: USB disconnect, device number 26 [ 2950.403870][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2950.410116][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2950.419229][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.461836][ T33] kauditd_printk_skb: 17 callbacks suppressed [ 2950.461851][ T33] audit: type=1800 audit(1625918175.229:2009): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15194 res=0 errno=0 [ 2950.489184][T16714] FAULT_INJECTION: forcing a failure. [ 2950.489184][T16714] name failslab, interval 1, probability 0, space 0, times 0 [ 2950.502155][T16714] CPU: 1 PID: 16714 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2950.510938][T16714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2950.515912][ T33] audit: type=1800 audit(1625918175.249:2010): pid=16714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15208 res=0 errno=0 [ 2950.520983][T16714] Call Trace: [ 2950.520991][T16714] dump_stack+0x143/0x1db [ 2950.521016][T16714] should_fail.cold+0x5/0xa [ 2950.521041][T16714] ? ima_alloc_init_template+0x199/0x750 [ 2950.559918][T16714] should_failslab+0x5/0x10 [ 2950.564436][T16714] __kmalloc+0x72/0x310 [ 2950.565237][ T33] audit: type=1800 audit(1625918175.339:2011): pid=16717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14497 res=0 errno=0 [ 2950.568586][T16714] ima_alloc_init_template+0x199/0x750 [ 2950.568614][T16714] ? dentry_path_raw+0x30/0x30 [ 2950.600046][T16714] ima_store_measurement+0x1d7/0x5a0 [ 2950.605337][T16714] ? ima_collect_measurement+0x570/0x570 [ 2950.610975][T16714] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2950.617222][T16714] ? d_absolute_path+0x12e/0x180 [ 2950.622178][T16714] ? __d_path+0x160/0x160 [ 2950.626507][T16714] ? kmem_cache_alloc+0x32c/0x360 [ 2950.631530][T16714] process_measurement+0x11fb/0x17e0 [ 2950.636799][T16714] ? mmap_violation_check+0x1e0/0x1e0 [ 2950.642155][T16714] ? tomoyo_path_number_perm+0x590/0x590 [ 2950.647796][T16714] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2950.653781][T16714] ? find_held_lock+0x2d/0x110 [ 2950.658524][T16714] ? aa_get_task_label+0x25f/0x540 [ 2950.663621][T16714] ? lock_downgrade+0x6e0/0x6e0 [ 2950.668466][T16714] ? fsnotify+0x1070/0x1070 [ 2950.672974][T16714] ? ext4_file_write_iter+0x1980/0x1980 [ 2950.678570][T16714] ? path_get+0x5d/0x80 [ 2950.682714][T16714] ? aa_get_task_label+0x288/0x540 [ 2950.687830][T16714] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2950.694100][T16714] ? apparmor_task_getsecid+0xc2/0x110 [ 2950.699542][T16714] ima_file_check+0xb9/0x100 [ 2950.704136][T16714] ? process_measurement+0x17e0/0x17e0 [ 2950.709577][T16714] ? may_open+0x1f6/0x420 [ 2950.713915][T16714] path_openat+0x15b5/0x27e0 [ 2950.718502][T16714] ? path_lookupat+0x850/0x850 [ 2950.723245][T16714] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2950.729216][T16714] do_filp_open+0x190/0x3d0 [ 2950.733724][T16714] ? may_open_dev+0xf0/0xf0 [ 2950.738223][T16714] ? do_raw_spin_lock+0x120/0x2b0 [ 2950.743228][T16714] ? rwlock_bug.part.0+0x90/0x90 [ 2950.748145][T16714] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2950.754460][T16714] ? _find_next_bit+0x1e3/0x260 [ 2950.759312][T16714] ? _raw_spin_unlock+0x1a/0x30 [ 2950.764149][T16714] ? alloc_fd+0x2e6/0x660 [ 2950.768458][T16714] do_sys_openat2+0x16d/0x420 [ 2950.773129][T16714] ? build_open_flags+0x6f0/0x6f0 [ 2950.778151][T16714] ? __context_tracking_exit+0x9f/0xb0 [ 2950.783617][T16714] ? lock_downgrade+0x6e0/0x6e0 [ 2950.788483][T16714] __x64_sys_openat+0x13f/0x1f0 [ 2950.793340][T16714] ? __ia32_sys_open+0x1c0/0x1c0 [ 2950.798261][T16714] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2950.804260][T16714] ? syscall_enter_from_user_mode+0x27/0x70 [ 2950.810168][T16714] do_syscall_64+0x3a/0xb0 [ 2950.814591][T16714] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2950.820486][T16714] RIP: 0033:0x4196c4 [ 2950.824360][T16714] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2950.844044][T16714] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2950.852475][T16714] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2950.860471][T16714] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2950.868532][T16714] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2950.876502][T16714] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2950.884500][T16714] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2950.923627][ T33] audit: type=1804 audit(1625918175.689:2012): pid=16714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723832343833303437362F73797A6B616C6C65722E35656F4C35612F353336312F48C7C060 dev="sda1" ino=15208 res=0 errno=0 [ 2950.956018][T28469] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 2950.964562][T22565] usb 3-1: bad CDC descriptors 11:56:15 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:15 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0xa64c3) 11:56:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/62) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x400000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/33) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x2400) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/80) r2 = syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2100) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000014c0)=""/133) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000001580)=""/167) r3 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001640), 0xfffffffffffffffd, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000003c0)=""/147) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r5 = syz_open_dev$evdev(&(0x7f00000002c0), 0xa18, 0x1) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000480)=""/4096) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000300)=""/180) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:15 executing program 4 (fault-call:0 fault-nth:20): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2951.174741][T22565] usb 3-1: USB disconnect, device number 22 11:56:16 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00000000000000, 0xa64c3) [ 2951.261200][ T33] audit: type=1800 audit(1625918176.029:2013): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15213 res=0 errno=0 [ 2951.299861][T16742] FAULT_INJECTION: forcing a failure. [ 2951.299861][T16742] name failslab, interval 1, probability 0, space 0, times 0 [ 2951.312729][T16742] CPU: 1 PID: 16742 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2951.321484][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2951.331516][T16742] Call Trace: [ 2951.334776][T16742] dump_stack+0x143/0x1db [ 2951.339092][T16742] should_fail.cold+0x5/0xa [ 2951.343582][T16742] ? ima_write_template_field_data+0x47/0x1c0 [ 2951.349641][T16742] should_failslab+0x5/0x10 [ 2951.354138][T16742] __kmalloc+0x72/0x310 [ 2951.358280][T16742] ? ima_alloc_init_template+0x199/0x750 [ 2951.363895][T16742] ima_write_template_field_data+0x47/0x1c0 [ 2951.369771][T16742] ima_eventdigest_init_common+0xed/0x250 [ 2951.375472][T16742] ? ima_write_template_field_data+0x1c0/0x1c0 [ 2951.381608][T16742] ? lock_acquire+0x19d/0x700 [ 2951.386274][T16742] ? fs_reclaim_acquire+0xb2/0x160 [ 2951.391380][T16742] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2951.396917][T16742] ima_alloc_init_template+0x39e/0x750 [ 2951.402364][T16742] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2951.407553][T16742] ima_store_measurement+0x1d7/0x5a0 [ 2951.412832][T16742] ? ima_collect_measurement+0x570/0x570 [ 2951.418456][T16742] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2951.424684][T16742] ? d_absolute_path+0x12e/0x180 [ 2951.429603][T16742] ? __d_path+0x160/0x160 [ 2951.433913][T16742] ? kmem_cache_alloc+0x32c/0x360 [ 2951.438916][T16742] process_measurement+0x11fb/0x17e0 [ 2951.444191][T16742] ? mmap_violation_check+0x1e0/0x1e0 [ 2951.449642][T16742] ? tomoyo_path_number_perm+0x590/0x590 [ 2951.455276][T16742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2951.461237][T16742] ? find_held_lock+0x2d/0x110 [ 2951.465997][T16742] ? aa_get_task_label+0x25f/0x540 [ 2951.471099][T16742] ? lock_downgrade+0x6e0/0x6e0 [ 2951.475958][T16742] ? fsnotify+0x1070/0x1070 [ 2951.480449][T16742] ? ext4_file_write_iter+0x1980/0x1980 [ 2951.485986][T16742] ? path_get+0x5d/0x80 [ 2951.490143][T16742] ? aa_get_task_label+0x288/0x540 [ 2951.495242][T16742] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2951.501475][T16742] ? apparmor_task_getsecid+0xc2/0x110 [ 2951.507102][T16742] ima_file_check+0xb9/0x100 [ 2951.511681][T16742] ? process_measurement+0x17e0/0x17e0 [ 2951.517128][T16742] ? may_open+0x1f6/0x420 [ 2951.521447][T16742] path_openat+0x15b5/0x27e0 [ 2951.526045][T16742] ? path_lookupat+0x850/0x850 [ 2951.530812][T16742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2951.536781][T16742] do_filp_open+0x190/0x3d0 [ 2951.541269][T16742] ? may_open_dev+0xf0/0xf0 [ 2951.545856][T16742] ? do_raw_spin_lock+0x120/0x2b0 [ 2951.550858][T16742] ? rwlock_bug.part.0+0x90/0x90 [ 2951.555791][T16742] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2951.562024][T16742] ? _find_next_bit+0x1e3/0x260 [ 2951.566856][T16742] ? _raw_spin_unlock+0x1a/0x30 [ 2951.571694][T16742] ? alloc_fd+0x2e6/0x660 [ 2951.576004][T16742] do_sys_openat2+0x16d/0x420 [ 2951.580664][T16742] ? build_open_flags+0x6f0/0x6f0 [ 2951.585664][T16742] ? __context_tracking_exit+0x9f/0xb0 [ 2951.591102][T16742] ? lock_downgrade+0x6e0/0x6e0 [ 2951.595938][T16742] __x64_sys_openat+0x13f/0x1f0 [ 2951.600787][T16742] ? __ia32_sys_open+0x1c0/0x1c0 [ 2951.605709][T16742] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2951.611681][T16742] ? syscall_enter_from_user_mode+0x27/0x70 [ 2951.617562][T16742] do_syscall_64+0x3a/0xb0 [ 2951.621974][T16742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2951.627850][T16742] RIP: 0033:0x4196c4 [ 2951.631723][T16742] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2951.651412][T16742] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2951.659805][T16742] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2951.667760][T16742] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2951.675734][T16742] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2951.683689][T16742] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2951.691658][T16742] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2951.703770][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 11:56:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000, 0x274c1) [ 2951.746934][ T33] audit: type=1800 audit(1625918176.039:2014): pid=16740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15215 res=0 errno=0 [ 2951.776308][ T33] audit: type=1800 audit(1625918176.069:2015): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15216 res=0 errno=0 [ 2951.807223][ T33] audit: type=1800 audit(1625918176.579:2016): pid=16751 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15211 res=0 errno=0 [ 2951.850839][ T33] audit: type=1804 audit(1625918176.579:2017): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723832343833303437362F73797A6B616C6C65722E35656F4C35612F353336322F48C7C060 dev="sda1" ino=15216 res=0 errno=0 [ 2952.003600][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2952.009913][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2952.018992][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2952.084481][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2952.153539][T22565] usb 3-1: new full-speed USB device number 23 using dummy_hcd 11:56:17 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x18, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:17 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x101, 0x1) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/101) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:17 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0xa64c3) 11:56:17 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0xa64c3) 11:56:17 executing program 4 (fault-call:0 fault-nth:21): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2952.294405][T28469] usb 4-1: USB disconnect, device number 27 [ 2952.371729][ T33] audit: type=1800 audit(1625918177.139:2018): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15232 res=0 errno=0 [ 2952.404457][T16774] FAULT_INJECTION: forcing a failure. [ 2952.404457][T16774] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.417342][T16774] CPU: 0 PID: 16774 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2952.426122][T16774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2952.436184][T16774] Call Trace: [ 2952.439463][T16774] dump_stack+0x143/0x1db [ 2952.443799][T16774] should_fail.cold+0x5/0xa [ 2952.448310][T16774] ? ima_write_template_field_data+0xeb/0x1c0 [ 2952.454384][T16774] should_failslab+0x5/0x10 [ 2952.458893][T16774] __kmalloc+0x72/0x310 [ 2952.463031][T16774] ima_write_template_field_data+0xeb/0x1c0 [ 2952.468915][T16774] ima_alloc_init_template+0x39e/0x750 [ 2952.474384][T16774] ima_store_measurement+0x1d7/0x5a0 [ 2952.479677][T16774] ? ima_collect_measurement+0x570/0x570 [ 2952.485360][T16774] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2952.491580][T16774] ? d_absolute_path+0x12e/0x180 [ 2952.496493][T16774] ? __d_path+0x160/0x160 [ 2952.500802][T16774] ? kmem_cache_alloc+0x32c/0x360 [ 2952.505807][T16774] process_measurement+0x11fb/0x17e0 [ 2952.511084][T16774] ? mmap_violation_check+0x1e0/0x1e0 [ 2952.516452][T16774] ? tomoyo_path_number_perm+0x590/0x590 [ 2952.522072][T16774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2952.528041][T16774] ? find_held_lock+0x2d/0x110 [ 2952.532794][T16774] ? aa_get_task_label+0x25f/0x540 [ 2952.537927][T16774] ? lock_downgrade+0x6e0/0x6e0 [ 2952.542760][T16774] ? fsnotify+0x1070/0x1070 [ 2952.547258][T16774] ? ext4_file_write_iter+0x1980/0x1980 [ 2952.552795][T16774] ? path_get+0x5d/0x80 [ 2952.553495][T22565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2952.556947][T16774] ? aa_get_task_label+0x288/0x540 [ 2952.556978][T16774] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2952.557009][T16774] ? apparmor_task_getsecid+0xc2/0x110 [ 2952.581353][T16774] ima_file_check+0xb9/0x100 [ 2952.585945][T16774] ? process_measurement+0x17e0/0x17e0 [ 2952.591400][T16774] ? may_open+0x1f6/0x420 [ 2952.595832][T16774] path_openat+0x15b5/0x27e0 [ 2952.600432][T16774] ? path_lookupat+0x850/0x850 [ 2952.603674][T22565] usb 3-1: not running at top speed; connect to a high speed hub [ 2952.605175][T16774] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2952.618057][T16774] ? trace_hardirqs_on+0x5b/0x1a0 [ 2952.623068][T16774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2952.629037][T16774] do_filp_open+0x190/0x3d0 [ 2952.633548][T16774] ? may_open_dev+0xf0/0xf0 [ 2952.638032][T16774] ? do_raw_spin_lock+0x120/0x2b0 [ 2952.643041][T16774] ? rwlock_bug.part.0+0x90/0x90 [ 2952.647955][T16774] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2952.654178][T16774] ? _find_next_bit+0x1e3/0x260 [ 2952.659109][T16774] ? _raw_spin_unlock+0x1a/0x30 [ 2952.663945][T16774] ? alloc_fd+0x2e6/0x660 [ 2952.668271][T16774] do_sys_openat2+0x16d/0x420 [ 2952.672933][T16774] ? build_open_flags+0x6f0/0x6f0 [ 2952.677954][T16774] ? irqentry_enter+0x2b/0x50 [ 2952.682650][T16774] __x64_sys_openat+0x13f/0x1f0 [ 2952.683607][T22565] usb 3-1: config 1 has an invalid interface number: 5 but max is 0 [ 2952.687587][T16774] ? __ia32_sys_open+0x1c0/0x1c0 [ 2952.687616][T16774] ? trace_hardirqs_on+0x38/0x1a0 [ 2952.687644][T16774] do_syscall_64+0x3a/0xb0 [ 2952.695638][T22565] usb 3-1: config 1 has no interface number 0 [ 2952.700509][T16774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2952.713809][T22565] usb 3-1: config 1 interface 5 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2952.715953][T16774] RIP: 0033:0x4196c4 [ 2952.715974][T16774] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2952.715999][T16774] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 [ 2952.721881][T22565] usb 3-1: config 1 interface 5 has no altsetting 0 [ 2952.731477][T16774] ORIG_RAX: 0000000000000101 [ 2952.731489][T16774] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2952.731506][T16774] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2952.731524][T16774] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2952.731540][T16774] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2952.731557][T16774] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2952.983449][T22565] usb 3-1: string descriptor 0 read error: -22 [ 2952.989657][T22565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2952.998726][T22565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2953.044297][T22565] usb 3-1: bad CDC descriptors [ 2953.123438][T28469] usb 4-1: new full-speed USB device number 28 using dummy_hcd 11:56:18 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x6, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:18 executing program 0: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x440000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x20, 0x5, 0x7, 0x83b3, 0x10000, 0x2}) 11:56:18 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200000000000000, 0xa64c3) 11:56:18 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:18 executing program 4 (fault-call:0 fault-nth:22): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2953.255264][ T7101] usb 3-1: USB disconnect, device number 23 [ 2953.352619][T16797] FAULT_INJECTION: forcing a failure. [ 2953.352619][T16797] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.365426][T16797] CPU: 0 PID: 16797 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2953.374193][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2953.384261][T16797] Call Trace: [ 2953.387540][T16797] dump_stack+0x143/0x1db [ 2953.391880][T16797] should_fail.cold+0x5/0xa [ 2953.396400][T16797] ? ima_add_digest_entry+0x4e/0x510 11:56:18 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0xa64c3) 11:56:18 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2953.401699][T16797] should_failslab+0x5/0x10 [ 2953.406220][T16797] kmem_cache_alloc_trace+0x55/0x2a0 [ 2953.411526][T16797] ima_add_digest_entry+0x4e/0x510 [ 2953.416650][T16797] ima_add_template_entry+0x446/0x790 [ 2953.422028][T16797] ? ima_get_binary_runtime_size+0x40/0x40 [ 2953.427833][T16797] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2953.433552][T16797] ? ima_calc_field_array_hash+0x377/0x430 [ 2953.439368][T16797] ima_store_template+0xdb/0x140 [ 2953.444320][T16797] ima_store_measurement+0x208/0x5a0 [ 2953.449691][T16797] ? ima_collect_measurement+0x570/0x570 [ 2953.455323][T16797] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2953.461567][T16797] ? d_absolute_path+0x12e/0x180 [ 2953.466505][T16797] ? __d_path+0x160/0x160 [ 2953.470830][T16797] ? kmem_cache_alloc+0x32c/0x360 [ 2953.475849][T16797] process_measurement+0x11fb/0x17e0 [ 2953.481115][T16797] ? mmap_violation_check+0x1e0/0x1e0 [ 2953.486464][T16797] ? tomoyo_path_number_perm+0x590/0x590 [ 2953.492094][T16797] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.498061][T16797] ? find_held_lock+0x2d/0x110 [ 2953.502814][T16797] ? aa_get_task_label+0x25f/0x540 [ 2953.507911][T16797] ? lock_downgrade+0x6e0/0x6e0 [ 2953.512794][T16797] ? fsnotify+0x1070/0x1070 [ 2953.517292][T16797] ? ext4_file_write_iter+0x1980/0x1980 [ 2953.522845][T16797] ? path_get+0x5d/0x80 [ 2953.527003][T16797] ? aa_get_task_label+0x288/0x540 [ 2953.532210][T16797] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2953.538439][T16797] ? apparmor_task_getsecid+0xc2/0x110 [ 2953.543888][T16797] ima_file_check+0xb9/0x100 [ 2953.548465][T16797] ? process_measurement+0x17e0/0x17e0 [ 2953.553951][T16797] ? may_open+0x1f6/0x420 [ 2953.558282][T16797] path_openat+0x15b5/0x27e0 [ 2953.562855][T16797] ? path_lookupat+0x850/0x850 [ 2953.567622][T16797] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.573597][T16797] do_filp_open+0x190/0x3d0 [ 2953.578097][T16797] ? may_open_dev+0xf0/0xf0 [ 2953.582585][T16797] ? do_raw_spin_lock+0x120/0x2b0 [ 2953.587626][T16797] ? rwlock_bug.part.0+0x90/0x90 [ 2953.592546][T16797] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2953.598768][T16797] ? _find_next_bit+0x1e3/0x260 [ 2953.603622][T16797] ? _raw_spin_unlock+0x1a/0x30 [ 2953.608457][T16797] ? alloc_fd+0x2e6/0x660 [ 2953.612771][T16797] do_sys_openat2+0x16d/0x420 [ 2953.617448][T16797] ? build_open_flags+0x6f0/0x6f0 [ 2953.622472][T16797] ? __context_tracking_exit+0x9f/0xb0 [ 2953.627920][T16797] ? lock_downgrade+0x6e0/0x6e0 [ 2953.632756][T16797] __x64_sys_openat+0x13f/0x1f0 [ 2953.637590][T16797] ? __ia32_sys_open+0x1c0/0x1c0 [ 2953.642532][T16797] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2953.648502][T16797] ? syscall_enter_from_user_mode+0x27/0x70 [ 2953.654407][T16797] do_syscall_64+0x3a/0xb0 [ 2953.658801][T16797] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2953.664686][T16797] RIP: 0033:0x4196c4 [ 2953.668558][T16797] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2953.688249][T16797] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2953.696668][T16797] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2953.704627][T16797] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2953.712605][T16797] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2953.720579][T16797] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2953.728534][T16797] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2953.736771][T16797] ima: OUT OF MEMORY ERROR creating queue entry [ 2953.853411][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2954.093364][ T7101] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 2954.104180][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2954.110496][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2954.119684][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2954.174082][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 11:56:19 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x1d, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:19 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0xa64c3) 11:56:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000001180)=""/92) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/46) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/121) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0xc00) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000180)=""/4096) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0xc1, 0x10, 0x8, 0x5, "a289bb0f1b2b2b697ba36c4ae2cc9d7ace96cf00a1c53b5caf11daf06fdcb3d1"}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000001280)=""/152) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000001200)=""/106) 11:56:19 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/193) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:19 executing program 4 (fault-call:0 fault-nth:23): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2954.384488][T28469] usb 4-1: USB disconnect, device number 28 [ 2954.448075][T16823] FAULT_INJECTION: forcing a failure. [ 2954.448075][T16823] name failslab, interval 1, probability 0, space 0, times 0 [ 2954.460883][T16823] CPU: 1 PID: 16823 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2954.469653][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2954.479713][T16823] Call Trace: [ 2954.483000][T16823] dump_stack+0x143/0x1db [ 2954.487339][T16823] should_fail.cold+0x5/0xa [ 2954.491860][T16823] ? ima_add_digest_entry+0x4e/0x510 [ 2954.497156][T16823] should_failslab+0x5/0x10 [ 2954.501676][T16823] kmem_cache_alloc_trace+0x55/0x2a0 [ 2954.506978][T16823] ima_add_digest_entry+0x4e/0x510 [ 2954.512105][T16823] ima_add_template_entry+0x446/0x790 [ 2954.517489][T16823] ? ima_get_binary_runtime_size+0x40/0x40 [ 2954.523306][T16823] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2954.529039][T16823] ? ima_calc_field_array_hash+0x377/0x430 [ 2954.534831][T16823] ima_store_template+0xdb/0x140 [ 2954.539751][T16823] ima_store_measurement+0x208/0x5a0 [ 2954.545019][T16823] ? ima_collect_measurement+0x570/0x570 [ 2954.550663][T16823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2954.556916][T16823] ? d_absolute_path+0x12e/0x180 [ 2954.561843][T16823] ? __d_path+0x160/0x160 [ 2954.566189][T16823] ? __slab_alloc+0x70/0x80 [ 2954.570697][T16823] ? kmem_cache_alloc+0x32c/0x360 [ 2954.575726][T16823] process_measurement+0x11fb/0x17e0 [ 2954.580992][T16823] ? mmap_violation_check+0x1e0/0x1e0 [ 2954.586408][T16823] ? tomoyo_path_number_perm+0x590/0x590 [ 2954.592023][T16823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2954.598009][T16823] ? find_held_lock+0x2d/0x110 [ 2954.602759][T16823] ? aa_get_task_label+0x25f/0x540 [ 2954.607856][T16823] ? lock_downgrade+0x6e0/0x6e0 [ 2954.612695][T16823] ? fsnotify+0x1070/0x1070 [ 2954.617183][T16823] ? ext4_file_write_iter+0x1980/0x1980 [ 2954.622713][T16823] ? path_get+0x5d/0x80 [ 2954.626854][T16823] ? aa_get_task_label+0x288/0x540 [ 2954.631950][T16823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2954.638179][T16823] ? apparmor_task_getsecid+0xc2/0x110 [ 2954.643637][T16823] ima_file_check+0xb9/0x100 [ 2954.648222][T16823] ? process_measurement+0x17e0/0x17e0 [ 2954.653680][T16823] ? may_open+0x1f6/0x420 [ 2954.658010][T16823] path_openat+0x15b5/0x27e0 [ 2954.662606][T16823] ? path_lookupat+0x850/0x850 [ 2954.667372][T16823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2954.673339][T16823] do_filp_open+0x190/0x3d0 [ 2954.677825][T16823] ? may_open_dev+0xf0/0xf0 [ 2954.682330][T16823] ? do_raw_spin_lock+0x120/0x2b0 [ 2954.687352][T16823] ? rwlock_bug.part.0+0x90/0x90 [ 2954.692283][T16823] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2954.698530][T16823] ? _find_next_bit+0x1e3/0x260 [ 2954.703383][T16823] ? _raw_spin_unlock+0x1a/0x30 [ 2954.708224][T16823] ? alloc_fd+0x2e6/0x660 [ 2954.712574][T16823] do_sys_openat2+0x16d/0x420 [ 2954.717243][T16823] ? build_open_flags+0x6f0/0x6f0 [ 2954.722257][T16823] ? __context_tracking_exit+0x9f/0xb0 [ 2954.727706][T16823] ? lock_downgrade+0x6e0/0x6e0 [ 2954.732542][T16823] __x64_sys_openat+0x13f/0x1f0 [ 2954.737373][T16823] ? __ia32_sys_open+0x1c0/0x1c0 [ 2954.742299][T16823] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2954.748274][T16823] ? syscall_enter_from_user_mode+0x27/0x70 [ 2954.754170][T16823] do_syscall_64+0x3a/0xb0 [ 2954.758566][T16823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2954.764437][T16823] RIP: 0033:0x4196c4 [ 2954.768307][T16823] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2954.787891][T16823] RSP: 002b:00007f240b1d3cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2954.796284][T16823] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2954.804242][T16823] RDX: 00000000000a64c3 RSI: 00007f240b1d3d60 RDI: 00000000ffffff9c [ 2954.812228][T16823] RBP: 00007f240b1d3d60 R08: 0000000000000000 R09: 0000000000000000 [ 2954.820194][T16823] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a64c3 [ 2954.828169][T16823] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2954.836205][T16823] ima: OUT OF MEMORY ERROR creating queue entry 11:56:19 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001200)={0x5, 0x1000, &(0x7f0000000200)="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"}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000080)=""/206) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000040)=""/64) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/47) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x5, 0x20080) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xd7) 11:56:19 executing program 4 (fault-call:0 fault-nth:24): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:19 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00000000000000, 0xa64c3) 11:56:19 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x80) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x200) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000080)=""/66) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x40, 0x400040) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f00000002c0)=""/113) [ 2954.903538][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2954.961168][T16836] FAULT_INJECTION: forcing a failure. [ 2954.961168][T16836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2954.974297][T16836] CPU: 1 PID: 16836 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 2954.983067][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2954.984026][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2954.993135][T16836] Call Trace: [ 2954.993148][T16836] dump_stack+0x143/0x1db [ 2954.993176][T16836] should_fail.cold+0x5/0xa [ 2954.993205][T16836] _copy_from_user+0x2c/0x180 [ 2954.993234][T16836] kstrtouint_from_user+0xb5/0x240 [ 2955.022800][T16836] ? kstrtou8_from_user+0x210/0x210 [ 2955.027989][T16836] ? lock_acquire+0x19d/0x700 [ 2955.032678][T16836] ? ksys_write+0x12d/0x250 [ 2955.037196][T16836] proc_fail_nth_write+0x79/0x220 [ 2955.042237][T16836] ? proc_task_getattr+0x1f0/0x1f0 [ 2955.047374][T16836] ? proc_task_getattr+0x1f0/0x1f0 [ 2955.052508][T16836] vfs_write+0x28e/0x9e0 [ 2955.056773][T16836] ksys_write+0x12d/0x250 [ 2955.061117][T16836] ? __ia32_sys_read+0xb0/0xb0 [ 2955.065871][T16836] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2955.071878][T16836] ? syscall_enter_from_user_mode+0x27/0x70 [ 2955.077769][T16836] do_syscall_64+0x3a/0xb0 [ 2955.082193][T16836] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2955.088103][T16836] RIP: 0033:0x4192bf [ 2955.091998][T16836] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 11:56:19 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0xa64c3) 11:56:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2955.111599][T16836] RSP: 002b:00007f240b1d4170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2955.120040][T16836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004192bf [ 2955.127995][T16836] RDX: 0000000000000001 RSI: 00007f240b1d41e0 RDI: 0000000000000003 [ 2955.135950][T16836] RBP: 00007f240b1d41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.143902][T16836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2955.151854][T16836] R13: 00007ffc165cf52f R14: 00007f240b1d4300 R15: 0000000000022000 [ 2955.253468][ T7101] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 2955.261511][ T7101] usb 3-1: config 1 has no interface number 0 [ 2955.269201][ T7101] usb 3-1: config 1 interface 7 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2955.279053][ T7101] usb 3-1: config 1 interface 7 has no altsetting 0 [ 2955.403306][T28469] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 2955.543384][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2955.549773][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2955.558833][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.606340][ T7101] usb 3-1: bad CDC descriptors 11:56:20 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2955.783247][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2955.816278][ T7101] usb 3-1: USB disconnect, device number 24 [ 2956.033278][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2956.039598][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2956.048666][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2956.094238][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2956.233183][ T7101] usb 3-1: new full-speed USB device number 25 using dummy_hcd 11:56:21 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:21 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x0, 0x1, 0xdf04, 0x81, 0x1ff, 0x3}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/249) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffff77, 0x267c3) 11:56:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:21 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0xa64c3) [ 2956.303690][T28469] usb 4-1: USB disconnect, device number 29 11:56:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x2, 0x20c02) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x2) [ 2956.400892][ T33] kauditd_printk_skb: 18 callbacks suppressed [ 2956.400918][ T33] audit: type=1800 audit(1625918181.169:2037): pid=16879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15585 res=0 errno=0 11:56:21 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/242) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:21 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x9c26000000000000, 0xa64c3) [ 2956.486661][ T33] audit: type=1800 audit(1625918181.169:2038): pid=16881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15603 res=0 errno=0 11:56:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xdb, 0x4000) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000040)="c96f7c81acf379009a0b0722654891fde1101a04357b318a90bf5edc98addb92ba18dd3c2154917a787b8a7db2f7756540d839faa002edc327cdea6f1af310a9212106a997d4268214d96c8e91886877c6b62b5e1d21258c5ff309c439c17c8bdf0ea2e252a9a1ea51c8f652") [ 2956.577505][ T33] audit: type=1800 audit(1625918181.179:2039): pid=16880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15619 res=0 errno=0 [ 2956.632979][ T33] audit: type=1800 audit(1625918181.289:2040): pid=16887 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15288 res=0 errno=0 [ 2956.644770][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2956.665436][ T33] audit: type=1800 audit(1625918181.329:2041): pid=16892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15603 res=0 errno=0 [ 2956.687288][ T33] audit: type=1800 audit(1625918181.329:2042): pid=16894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15275 res=0 errno=0 [ 2956.709672][ T33] audit: type=1800 audit(1625918181.389:2043): pid=16897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15345 res=0 errno=0 [ 2956.713272][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2956.773164][T28469] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 2956.823358][ T7101] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 2956.831361][ T7101] usb 3-1: config 1 has no interface number 0 [ 2956.838463][ T7101] usb 3-1: config 1 interface 9 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2956.848164][ T7101] usb 3-1: config 1 interface 9 has no altsetting 0 [ 2957.103312][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2957.109842][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2957.119046][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2957.163910][ T7101] usb 3-1: bad CDC descriptors [ 2957.173464][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2957.313562][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2957.321137][T28469] usb 4-1: can't read configurations, error -71 11:56:22 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:22 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0xa64c3) 11:56:22 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/153) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x3, 0x1, 0x8, 0x3, 0x1, 0x81}) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:22 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/82) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xd2b, 0x40000) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000100)) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000100)={0x2, 0x10001, 0x7, 0x10000, 0x0, 0x6}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x57, 0xfff, 0x3, {0x2, 0x400}, {0x341, 0xeccc}, @ramp={0x3, 0x1, {0x1, 0x80, 0x8}}}) 11:56:22 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x500, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2957.374522][ T7101] usb 3-1: USB disconnect, device number 25 [ 2957.443891][ T33] audit: type=1800 audit(1625918182.209:2044): pid=16920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15650 res=0 errno=0 11:56:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:22 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/124) syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x800) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:22 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/79) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0xffffff7f) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2957.516372][ T33] audit: type=1800 audit(1625918182.289:2045): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15845 res=0 errno=0 11:56:22 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0xa64c3) [ 2957.597612][ T33] audit: type=1800 audit(1625918182.329:2046): pid=16927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15637 res=0 errno=0 11:56:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:22 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x6d, 0x15, 0x9, 0xa322, "792cceb54ccde970e07077f6fc74aeaa23249a345a5f6585b1da9e2aa3d3238b"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000080)=""/153) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/4096) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) [ 2957.863041][ T7101] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 2958.023020][T28469] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 2958.313231][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2958.353258][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2958.433083][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2958.440832][ T7101] usb 3-1: config 1 has an invalid interface number: 10 but max is 0 [ 2958.448959][ T7101] usb 3-1: config 1 has no interface number 0 [ 2958.455127][ T7101] usb 3-1: config 1 interface 10 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2958.464914][ T7101] usb 3-1: config 1 interface 10 has no altsetting 0 [ 2958.613125][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2958.620699][T28469] usb 4-1: can't read configurations, error -71 [ 2958.628236][T28469] usb usb4-port1: attempt power cycle [ 2958.713277][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2958.719496][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2958.728563][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2958.793860][ T7101] usb 3-1: bad CDC descriptors 11:56:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:23 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0xa64c3) 11:56:23 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x8a3c3) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001040)=""/97) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001000)={0xfffffff8, 0xee, 0x3, 0x1800000, 0x6, 0x4}) r1 = syz_open_dev$evdev(&(0x7f00000010c0), 0x401, 0x40002) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000001100)=""/195) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/4096) 11:56:23 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x7) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x7ff) 11:56:23 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2959.003177][ T7101] usb 3-1: USB disconnect, device number 26 11:56:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0x408841) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/215) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x1f, 0x2) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000140)) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0xa64c3) 11:56:23 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xa64c3) 11:56:23 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1000, 0x541000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0xf70, 0x8]) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0xff262f55a5d16498, 0x7f, &(0x7f00000000c0)="804f5daee383922466541482622ee82ca290fbcaf36eadd715907c27f875a765d2edf8e6316d8bd625291a97ca278d43b8336b8e6bfb56ca2a2718428dd8d6f5a6f0f1ba743f33b9d1ff22cebcb68ac9e33872a0b142222eaba8906377feb6417a328ee4c68d0fbc30b33b00692fec75ca452c7562c7c9f3ebac0b26d4d957"}) 11:56:24 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x5e7483) [ 2959.443450][ T7101] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 2959.583402][T28469] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 2959.843124][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2959.863027][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2959.922948][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2960.003352][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2960.010925][T28469] usb 4-1: can't read configurations, error -71 [ 2960.018197][ T7101] usb 3-1: config 1 has an invalid interface number: 15 but max is 0 [ 2960.026345][ T7101] usb 3-1: config 1 has no interface number 0 [ 2960.032611][ T7101] usb 3-1: config 1 interface 15 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2960.042364][ T7101] usb 3-1: config 1 interface 15 has no altsetting 0 [ 2960.283447][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2960.289665][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2960.298718][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2960.353606][ T7101] usb 3-1: bad CDC descriptors 11:56:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x18, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:25 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffff000, 0xa64c3) 11:56:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:25 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x8f9a) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x12d483) 11:56:25 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x700, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2960.563468][ T7101] usb 3-1: USB disconnect, device number 27 11:56:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x80004000000, 0x921c3) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x800, 0x80) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000001c0)=0xff) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/135) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000000)=""/130) 11:56:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:25 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x201000) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000000, 0x1c280) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/35) 11:56:25 executing program 1: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x500, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x264743) 11:56:25 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) syz_open_dev$evdev(&(0x7f0000001000), 0xbdf, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001040)={0x2, 0x20, 0x0, 0x1, "8cc7beada692a33f76db9251769ebd583fd6978298dfe1d4fe3bfa52e6a23f34"}) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/4096) 11:56:25 executing program 0: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/180) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x400) 11:56:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2e, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:25 executing program 5: syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2961.092825][ T7101] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 2961.122784][ T6155] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2961.152770][T28469] usb 4-1: new full-speed USB device number 33 using dummy_hcd 11:56:26 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x900, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x80008, 0x6d2143) syz_open_dev$evdev(0xfffffffffffffffc, 0xb95, 0xa64c3) 11:56:26 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/48) 11:56:26 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2961.463332][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2961.534773][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2961.542742][ T33] kauditd_printk_skb: 22 callbacks suppressed [ 2961.542755][ T33] audit: type=1800 audit(1625918186.310:2069): pid=17054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15877 res=0 errno=0 [ 2961.572189][ T6155] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2961.600544][ T33] audit: type=1800 audit(1625918186.370:2070): pid=17058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15865 res=0 errno=0 [ 2961.623610][ T7101] usb 3-1: not running at top speed; connect to a high speed hub 11:56:26 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2961.625413][ T33] audit: type=1800 audit(1625918186.370:2071): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15882 res=0 errno=0 [ 2961.658352][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2961.666088][T28469] usb 4-1: can't read configurations, error -71 [ 2961.677239][T28469] usb usb4-port1: unable to enumerate USB device [ 2961.708371][ T33] audit: type=1800 audit(1625918186.470:2072): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15883 res=0 errno=0 [ 2961.732977][ T7101] usb 3-1: config 1 has an invalid interface number: 29 but max is 0 [ 2961.741109][ T7101] usb 3-1: config 1 has no interface number 0 [ 2961.748327][ T7101] usb 3-1: config 1 interface 29 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2961.758222][ T7101] usb 3-1: config 1 interface 29 has no altsetting 0 [ 2961.792878][ T6155] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2961.800433][ T6155] usb 2-1: can't read configurations, error -71 [ 2962.012748][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2962.019077][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2962.028141][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2962.052837][T28469] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 2962.073631][ T7101] usb 3-1: bad CDC descriptors 11:56:27 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:27 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x6d8801) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:27 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:27 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3a7481) 11:56:27 executing program 1: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2962.283417][ T7101] usb 3-1: USB disconnect, device number 28 11:56:27 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2962.364969][ T33] audit: type=1800 audit(1625918187.130:2073): pid=17084 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15893 res=0 errno=0 11:56:27 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/21) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/204) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x7fff, 0x8000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000180)) [ 2962.395490][ T33] audit: type=1800 audit(1625918187.170:2074): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15884 res=0 errno=0 [ 2962.479273][ T33] audit: type=1800 audit(1625918187.250:2075): pid=17093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15887 res=0 errno=0 11:56:27 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0xa00, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:27 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/66) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/4096) 11:56:27 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:27 executing program 5: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="19696f29993e68390d67669e30ed07fd5822f5c2dd84a93dc54054f8507e62f2189f70469375f4d2d97483f1e77625bb53fede89", 0x34) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2962.509929][ T33] audit: type=1800 audit(1625918187.250:2076): pid=17094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15884 res=0 errno=0 [ 2962.532926][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short 11:56:27 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4b6683) [ 2962.643767][ T33] audit: type=1800 audit(1625918187.420:2077): pid=17104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15895 res=0 errno=0 [ 2962.675395][ T33] audit: type=1800 audit(1625918187.440:2078): pid=17106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15878 res=0 errno=0 [ 2962.714483][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2962.722045][T28469] usb 4-1: can't read configurations, error -71 [ 2962.732831][ T6155] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 2962.882640][ T7101] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 2963.112676][T28469] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 2963.173113][ T6155] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2963.303274][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2963.312957][ T6155] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2963.320533][ T6155] usb 2-1: can't read configurations, error -71 [ 2963.327374][ T6155] usb usb2-port1: attempt power cycle [ 2963.342652][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2963.422690][ T7101] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2963.512589][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2963.652637][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2963.660250][T28469] usb 4-1: can't read configurations, error -71 [ 2963.667600][T28469] usb usb4-port1: attempt power cycle [ 2963.673454][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2963.679640][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2963.688702][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2963.733402][ T7101] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:28 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xa, 0x200) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x341200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0xc52b]) 11:56:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x8, 0x20]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/174) 11:56:28 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x6d8801) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:28 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0xf00, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2963.943209][ T8202] usb 3-1: USB disconnect, device number 29 11:56:28 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xdb, 0x4000) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000040)="c96f7c81acf379009a0b0722654891fde1101a04357b318a90bf5edc98addb92ba18dd3c2154917a787b8a7db2f7756540d839faa002edc327cdea6f1af310a9212106a997d4268214d96c8e91886877c6b62b5e1d21258c5ff309c439c17c8bdf0ea2e252a9a1ea51c8f652") 11:56:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x4, 0x50, &(0x7f0000000040)="85c6e7b88648e24dfdfdfc994734d0a8ac30843b73cc44bf5e2c5a0cfd084ec36372c7c4c42e92a938403d55aefbcdd913a9ae97b0a5615713d4a9cdc1c7c3527c6c630cda9584f20932cefbb1aed86e"}) syz_open_dev$evdev(0xfffffffffffffffc, 0xcb, 0x4e6c43) 11:56:28 executing program 0: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/52) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x963c3) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x3, 0x88040) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000240)=""/111) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000140)) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/129) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x864c1) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x12, 0x79, &(0x7f0000000040)="6325b1c05084d75319b848f0d7c5aad27ae046727d1cb6cd80ea4307a5d8082ecd43ed82fcf4ee5c4dcf0537146c748c2907566999c7b8b879ca9dfa4f49c68c79e5f706a4c188478e6cb150bebdb58ec5487415822d276be9d4aed5f574c687b427a905ffb835f882f80571fa739b5fada0bea1594ccde756"}) 11:56:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/246) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:29 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/242) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) 11:56:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40684) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:29 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2964.404461][T28469] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 2964.512539][ T8202] usb 3-1: new full-speed USB device number 30 using dummy_hcd 11:56:29 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x1800, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:29 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x4000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x3, 0x3, 0x7}) 11:56:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0xff) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0xe69c2) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/115) 11:56:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/246) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2964.662535][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2964.842631][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2964.850238][T28469] usb 4-1: can't read configurations, error -71 [ 2964.912548][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2964.952541][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2965.032611][ T8202] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2965.042258][ T8202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2965.232480][T28469] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 2965.282587][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2965.288815][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2965.297903][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2965.343530][ T8202] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:30 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:30 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x6, 0x5]) 11:56:30 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x6aa583) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/166) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/254) 11:56:30 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x1d00, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2965.522465][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2965.560825][ T6155] usb 3-1: USB disconnect, device number 30 11:56:30 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000001000)="23d6a6d5b448b7e45cada1540b2efd66cf8dd9176c5e75bca3afa003065504f4f643b7b0bf5986eb317d8426223d741e804de2b918df098c0c89356b6973aabee9d810d7520ddfaf9dbe8801f8999225965ec246e5ee7bb8d0e56715239097a4f13ca8d14696aaca2674b604d2b3a6bef6b944455c7f1b6b0a148933395516fca5bcc2e6905898fa979d7631b375599dd542ba15b19a6f10a5b1c2c7af1d6fc79516afc4bcb56c161024f6d8db9496c5d32221378f713d6011a07701ee") syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000010c0)=""/111) 11:56:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2965.694091][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2965.701723][T28469] usb 4-1: can't read configurations, error -71 [ 2965.714012][T28469] usb usb4-port1: unable to enumerate USB device 11:56:30 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1bffffffffff9, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000340)=""/4) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/69) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000240)=""/231) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/56) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000140)=""/242) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000440)=""/237) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xfffffffb, 0x6]) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/74) 11:56:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:30 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/56) 11:56:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2699, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2965.942486][ T7101] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 2966.072393][ T6155] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 2966.092545][T28469] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 2966.362971][ T7101] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2966.403445][ T7101] usb 2-1: not running at top speed; connect to a high speed hub [ 2966.492523][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2966.500526][ T7101] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 2966.508548][ T7101] usb 2-1: config 1 has no interface number 0 [ 2966.514891][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2966.522602][ T7101] usb 2-1: config 1 interface 7 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2966.532242][ T7101] usb 2-1: config 1 interface 7 has no altsetting 0 [ 2966.538954][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2966.622520][ T6155] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2966.632261][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2966.692410][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2966.699996][T28469] usb 4-1: can't read configurations, error -71 [ 2966.792415][ T7101] usb 2-1: string descriptor 0 read error: -22 [ 2966.798645][ T7101] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2966.807870][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2966.853080][ T7101] usb 2-1: bad CDC descriptors [ 2966.872384][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2966.878695][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2966.887867][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2966.933305][ T6155] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2967.068126][ T6155] usb 2-1: USB disconnect, device number 34 11:56:31 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:31 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) 11:56:31 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/175) 11:56:31 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2e00, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:31 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x1f00, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:31 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/56) [ 2967.143322][ T7101] usb 3-1: USB disconnect, device number 31 11:56:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:32 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/215) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/185) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x400) [ 2967.244531][ T33] kauditd_printk_skb: 19 callbacks suppressed [ 2967.244547][ T33] audit: type=1800 audit(1625918192.020:2098): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15327 res=0 errno=0 11:56:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x10000) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x9a, 0x400, 0x5, 0x8000, 0x8, 0x800}) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0xe6cc3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x0, 0x7, 0x6, 0x2, 0x5, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/11) 11:56:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x4000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x3, 0x3, 0x7}) 11:56:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2967.334248][ T33] audit: type=1800 audit(1625918192.030:2099): pid=17271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15328 res=0 errno=0 [ 2967.395832][ T33] audit: type=1800 audit(1625918192.040:2100): pid=17270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15310 res=0 errno=0 11:56:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2967.454321][ T33] audit: type=1800 audit(1625918192.130:2101): pid=17277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15303 res=0 errno=0 [ 2967.495584][ T33] audit: type=1800 audit(1625918192.170:2102): pid=17280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15062 res=0 errno=0 [ 2967.530464][ T33] audit: type=1800 audit(1625918192.180:2103): pid=17283 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15303 res=0 errno=0 [ 2967.552386][ T33] audit: type=1800 audit(1625918192.250:2104): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15328 res=0 errno=0 [ 2967.573998][ T33] audit: type=1800 audit(1625918192.290:2105): pid=17289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15271 res=0 errno=0 [ 2967.592277][T28469] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 2967.612285][ T7101] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 2968.002361][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2968.012836][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2968.052416][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2968.132325][ T7101] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2968.141956][ T7101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2968.148834][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2968.156444][T28469] usb 4-1: can't read configurations, error -71 [ 2968.162922][T28469] usb usb4-port1: attempt power cycle [ 2968.402250][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2968.408486][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2968.417563][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.483160][ T7101] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x155d01) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/251) 11:56:33 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x385641) 11:56:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x9926, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:33 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/222) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x80) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x200) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000080)=""/66) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8001]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x16, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x40, 0x400040) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f00000002c0)=""/113) 11:56:33 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2968.692935][ T7101] usb 3-1: USB disconnect, device number 32 11:56:33 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000008e4, 0x1f70c3) syz_open_dev$evdev(&(0x7f0000000080), 0x80000000067, 0x6a0180) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x100000000, 0x102000) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000140)={0x1, 0x4, 0x7, 0x6, 0x8, 0x3}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x15, 0x161, &(0x7f0000000380)="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"/353}) r4 = syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x240) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000500)=""/4096) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0xffffffffffffffe1, 0x200040) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000240)=""/27) r6 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20041) ioctl$EVIOCGKEY(r6, 0x80404518, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000340)={0xbf, 0xb250, 0x1, 0x1, 0x2, 0x10000}) syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0xc0000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/82) [ 2968.791856][ T33] audit: type=1800 audit(1625918193.560:2106): pid=17309 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15935 res=0 errno=0 11:56:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x40080) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/211) 11:56:33 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x440000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x20, 0x5, 0x7, 0x83b3, 0x10000, 0x2}) [ 2968.889073][ T33] audit: type=1800 audit(1625918193.560:2107): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15941 res=0 errno=0 11:56:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1133, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/8) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000010c0)={0x0, 0x1000, &(0x7f00000000c0)="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"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4ae4c3) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) [ 2969.132184][T28469] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2969.232116][ T7101] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 2969.402195][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2969.542134][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2969.549714][T28469] usb 4-1: can't read configurations, error -71 [ 2969.632113][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2969.672149][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2969.752187][ T7101] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2969.761836][ T7101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2970.002155][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2970.008408][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2970.017514][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.062993][ T7101] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/219) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:35 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:35 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x440000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x20, 0x5, 0x7, 0x83b3, 0x10000, 0x2}) 11:56:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000, 0x20002) 11:56:35 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x3f00, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2970.271785][ T8202] usb 3-1: USB disconnect, device number 33 11:56:35 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000000000, 0xe6443) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x10000) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/131) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000340)=""/23) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x7, 0x163a40) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000002c0)={0xfbc, 0x93, 0x1000, 0xfffffff9, 0x1, 0x80000001}) r4 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000380)=""/156) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000240)=""/54) r5 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000200), 0x47a2, 0x80182) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000001c0)=""/20) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000100)=""/173) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x0, 0xcd, &(0x7f0000000440)="d46dbbcff31611f0eadf223ad9635ffdf777d2162e14683dd2f25f1d33667e795a8244d281b84fc039de1519a9ff4e7216e4fd3e69a7c334e164ce260f331733d53fc86908885c75850de98c90c47fd07994b681fb6b666e99c6c875a0f430b13bebf38605add5d22bb8853f96d026d5bfd17522421860a8397c3408ec761a166203a7c42241fa634c1d23e79dfba9a7e25b462bc0144725f97530c039b87f42be057af86730a5dd163223e5ac2938abd49c0f961dce9eaedbc2876ff1a3da15c6153d14af1a5f0e1143ceebd6"}) 11:56:35 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xff0f, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x4400) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x7) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:35 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:35 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x440000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x20, 0x5, 0x7, 0x83b3, 0x10000, 0x2}) 11:56:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/153) [ 2970.662080][T28469] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 2970.822088][ T8202] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 2970.922165][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2971.062035][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2971.069590][T28469] usb 4-1: can't read configurations, error -71 [ 2971.076313][T28469] usb usb4-port1: unable to enumerate USB device [ 2971.242021][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2971.282186][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2971.362199][ T8202] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2971.371978][ T8202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2971.612048][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2971.618241][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2971.627307][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2971.682787][ T8202] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:36 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x964c1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000002c0)={0x17, 0xf6, &(0x7f00000001c0)="9f9d8900b28b49eb592ae761316768f21336f40ec0dc21b5bb4b9d58fe4ff4060fcc2d89e28658319097abe6c40f18806b559ccd1080c013256985913c1e78f406cb33dd74bbcca86cc5d579cbdb5d04beea1ce272aacc4b6d2523862efb28dd2e2a773e427bd07c0a6041ffc3284ccad76e1d8155587f55aa95da9723c96f2dccb04d16ffcb2f93582ac80fa18e622c813ef6408569fdd5963397c5422c35eec75bcdef7030cb764dd85257a5a71f2c596b3af657fb97f4b3871688005a3233c466f53ad56cbedf8c84c8b5b05aa1e9a680999be4e7aa2e253746a6bfa2b09fa54e5aa423a262778b0a3e3774a82920871ac2285787"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x16, 0xbc, &(0x7f0000000000)="1e3c3c000449487a3f5fe4ea6fae18f24a76fe5276527afb8e4ad2ab289b228e711fc627c6fc6109f12e6fd2308da796208583df65842aed5f974d8e3f40199b9ac2c8140a9bb28bd169e4a9b19f873cb91a00a4a37ddddaead9936e1e6f018fdb9b237f3849904d12228ee6b9b8958f19c63f80b3514255cb8c816a90723853a436aa3def67d42dcd3c38d477dea014afe1055d393f21531daabcf6ec6256dae24d1b20f17c783d1b80706584b1126b66bb2ebe4a4a1ca2b518be96"}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x10000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/89) 11:56:36 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:36 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/155) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x80000001, 0x2400) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/184) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:36 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x440000) 11:56:36 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2971.892661][ T8202] usb 3-1: USB disconnect, device number 34 11:56:36 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:36 executing program 5: ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0xbe, "b5a33868e17b60e47df8c524c64984adcca18cd22af8c750c4da423c65187fd478e51ccfa94338233f17e1ff64f76f0ef33bd009bd1bdf3587dd1f2bef94e030"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:36 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:36 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x103140) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x101c40) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/179) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x11, 0x68, &(0x7f0000000000)="9fd020545533afa5cc3eec3240cc431cf870328536762a496359e684632402ef8138af0f2b51160b3abaa526bd0da2fe002dde3548a69d73330880ad6b021e4aa007d1ea25cc7b2061489921af7b3efd3e62f61757c682c3069b1842aa554bb6f57697575d7e236c"}) 11:56:36 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0xb7, &(0x7f0000000000)="0d7d0eaa8979038830b4471d35739fcf7ea820e85593b11442d8f54c6fa570eaf5ba1f262a1992bcd1ffb1cb9ed7a6ee80b4fbb8c2b2a2c3827c069ce78b0af2938a577305e3761103d60b0bc132111697985704f463eb34c5a2e2d5f7cab007e25fc4ce5803c37c30cf60382e2afeadeaafd98988fc8a2e310936c093f7c7d80cb57a72126541e462f4fff8623d076842a1a4bd470aa52f1f5453df097ffe3289ac7e4c83a712ec8e46833d260f7dd0bdaffac787847b"}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x81, 0x100, {0x200, 0x20}, {0x3d0a}, @ramp={0x78, 0x9, {0x1ff, 0x9, 0xfff7, 0x9}}}) 11:56:36 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) [ 2972.221904][T28469] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 2972.341900][ T8202] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 2972.621993][T28469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2972.761879][T28469] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2972.769473][T28469] usb 4-1: can't read configurations, error -71 [ 2972.781916][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2972.832005][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2972.912341][ T8202] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2972.922252][ T8202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2973.161908][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2973.168151][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2973.177357][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2973.222648][ T8202] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:38 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:38 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:38 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x9a1c3) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x216dc0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0xf55, 0x81]) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x2000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f00000000c0)={0x4, 0x9, 0x2, 0x6, 0x7, 0x800}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x20) 11:56:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x80000001, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/4096) 11:56:38 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:38 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2973.433551][ T7101] usb 3-1: USB disconnect, device number 35 11:56:38 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2973.474475][ T33] kauditd_printk_skb: 11 callbacks suppressed [ 2973.474490][ T33] audit: type=1800 audit(1625918198.251:2119): pid=17442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14258 res=0 errno=0 11:56:38 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/200) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/52) 11:56:38 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/26) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:38 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:38 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/93) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) [ 2973.598727][ T33] audit: type=1800 audit(1625918198.251:2120): pid=17445 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14322 res=0 errno=0 11:56:38 executing program 5: ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="c0e051f9fe7d8f0bd72ac137e0ddbdbade9bc6052931c7ce737dbd5edd422322887ec544d78ff9792f2c9111f8dce6e0dbb850e402494b7cd4e38c110ecafcab") syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2973.666632][ T33] audit: type=1800 audit(1625918198.331:2121): pid=17455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14273 res=0 errno=0 [ 2973.699628][ T33] audit: type=1800 audit(1625918198.401:2122): pid=17461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14369 res=0 errno=0 [ 2973.721577][ T33] audit: type=1800 audit(1625918198.421:2123): pid=17463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14466 res=0 errno=0 [ 2973.743451][ T33] audit: type=1800 audit(1625918198.501:2124): pid=17468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14273 res=0 errno=0 [ 2973.881776][T28469] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 2973.941767][ T7101] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 2974.261985][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2974.362199][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2974.401911][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2974.481981][ T7101] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2974.491746][ T7101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2974.521763][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2974.527993][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2974.537166][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2974.602702][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2974.771704][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2974.778019][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2974.787140][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2974.820950][T28469] usb 4-1: USB disconnect, device number 43 [ 2974.836655][ T7101] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:39 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:39 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:39 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x801c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:39 executing program 5: syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x68ccc3) 11:56:39 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:39 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2975.045605][T28469] usb 3-1: USB disconnect, device number 36 11:56:39 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2975.109462][ T33] audit: type=1800 audit(1625918199.881:2125): pid=17499 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14595 res=0 errno=0 11:56:39 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x46, 0x6eaf41) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:39 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:39 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x4, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:40 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/110) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa44c1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5947b2be, 0x288c00) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/162) [ 2975.214280][ T33] audit: type=1800 audit(1625918199.991:2126): pid=17508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=13889 res=0 errno=0 11:56:40 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:40 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2975.280087][ T33] audit: type=1800 audit(1625918200.021:2127): pid=17509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14770 res=0 errno=0 11:56:40 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x46, 0x8, 0x3, 0xfffff800, "37854921139d5c4dfcf03a2e284ecc31e6adfdab727fa30ba92af87f8ef238f8"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/61) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/214) 11:56:40 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) [ 2975.335345][ T33] audit: type=1800 audit(1625918200.111:2128): pid=17521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14706 res=0 errno=0 [ 2975.392497][ T8202] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 2975.661663][T28469] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 2975.761659][ T8202] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 11:56:40 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4a64c3) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x5, 0xd2, &(0x7f0000000000)="6e498ce23e61ce9904e086489ff744f14171757af313c040cd710751e0a23858df67508d407b7600d178325179d5f36f660b7875ffad7ba754032187b5b6832d51ae893915f134f657db3e2cf8342ecda884d343b077e1c91e5d0dfc680c035700979bb9996aeb7054ab3bfc51f6e0374f77d485291feee64b247460518c14b2da3be454a3e159c9e52279949f1c2323f8139dbc8a8a47e257b566cfbe227813b0eac1437c903b839e015c341b7d096286cd87ac2573aa33aa85d8f4e993d8af516ec77e0069763401d473187edc6a9d5ba0"}) 11:56:40 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2976.031681][ T8202] usb 4-1: string descriptor 0 read error: -22 [ 2976.038049][ T8202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2976.047184][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2976.061834][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2976.101665][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2976.112947][ T8202] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2976.181681][T28469] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2976.191632][T28469] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2976.204525][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 11:56:41 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:41 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0xfff, 0x0) 11:56:41 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2976.321243][ T8202] usb 4-1: USB disconnect, device number 44 [ 2976.471712][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2976.478039][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2976.487137][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2976.552459][T28469] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:41 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x5, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/26) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x80, 0x8c, 0x3ff, 0xfff, 0x5, 0x7fff}) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000040)=""/49) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x8000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x54, 0x8a, 0xffff, {0x9, 0x4}, {0x2, 0x8}, @ramp={0x4, 0x7fff, {0xffff, 0x800, 0x7}}}) syz_open_dev$hiddev(&(0x7f0000000140), 0x8001, 0xa0000) 11:56:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x10000, 0x105000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000080)=""/134) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0xc87e, 0x91]) 11:56:41 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:41 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2976.741586][ T8202] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 2976.762092][T28469] usb 3-1: USB disconnect, device number 37 11:56:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000000000000, 0xa64c3) 11:56:41 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:41 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2977.101524][ T8202] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2977.261522][T28469] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 2977.351629][ T8202] usb 4-1: string descriptor 0 read error: -22 [ 2977.357983][ T8202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2977.367086][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2977.412442][ T8202] cdc_ether: probe of 4-1:1.0 failed with error -22 11:56:42 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:42 executing program 5: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/216) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfff, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000001c0)={0x80000001, 0x8001, 0x2777, 0x628c, 0x0, 0xa10}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x808) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/65) 11:56:42 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5efda381d9fee1de6671d76b9b655accd0bd8126780741250d8e82ea5bc478faa7626902da7ff187e8bbc3df7afb2dc07695c35e769f639338da0ca2bf1c1537fbf76e04b8455131e068c6e574d2f8ee90e57f88804f43f7982a", 0x5a) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:42 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000001180), 0x2, 0x400681) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000011c0)=""/72) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000001240)=""/255) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001080)=""/210) [ 2977.623542][ T7101] usb 4-1: USB disconnect, device number 45 [ 2977.721898][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2977.772534][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2977.851674][T28469] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2977.861308][T28469] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2977.874186][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2978.101502][ T7101] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2978.121613][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2978.127884][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2978.136971][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.182175][T28469] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:43 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x6, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:43 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:43 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:43 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x6820c1) 11:56:43 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x408241) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/150) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x200001) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/107) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x5) [ 2978.391850][ T8202] usb 3-1: USB disconnect, device number 38 11:56:43 executing program 0: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xb, 0xf7, {0xf7, 0xf, "4c3817224e38238e529b7431e0584c4735c93be605f1fa44d71f1f1fcbdc81e44b6fe14a6535d2f5c5688b7ef51066ba6a70def83c9c09ac8264361ff57dbde718add4651c1b8c0627a1facb3603fbd286e8335b0227c9f14eff3b142551eb11581410dfbcc269bd07f9a6d41a107d4134276b49b5754df46b23e1a91edbe4b65e11e2e797f3593b572d5dc3fab6e1b223cf90db70a2a36f2287ce762786f4fd9e37a1af3aa258c14fab5b297959811d3fbe907fe18317d1607284f549bcf502cc74c080289649bea15cb1e7d734365109ca8db4242e1a87706435c9d542aab7ec2b96356bd0cd0409e89be462827e79051e6ac1ef"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x7, 0x3e, "d3c7acc3fab2138da488e75f316e821987109642c9963f7c61d10a543290043bc633b3dd380ad0a54adf5ff22415878a120c68b641990e154074e1b5d658"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x81, 0x3, "d4aac7"}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "d32916"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "dbdfdd"}, &(0x7f0000000340)={0x20, 0x84, 0x1, "04"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "5be141"}}) r0 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe2, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x3a, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x7f, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x4}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x3, 0x1, 0x9, 0x10, 0x2}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44d}}, {0xe1, &(0x7f0000000600)=@string={0xe1, 0x3, "a2a53a44f0e387f6a86221548ecefad18c82e8b4b0e524f7391a0f33a50d2c755d41ab12f3e1d0d871688d9323c4af2ccca650235d1799447b57278bcd82a3e992468d3bdb720595c22932a8791199aa9d2bf02b2c7147e453f2fceed4fd486823467ffbccbc67ddc6c7307965ea24156d04174777279f17db1f64107000bdffc6aff32165569252bbdbb0e16caca8118351e881a2d29b5e5d8eb74b945629462282c204bb80494c469fe2fb1b505ab39f51ac2498b561c1483647dd56f1db8a30f799a7aeef43445f5beb2d8f92343abb61b237c3675680be47e279d1dd83"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x20, 0x9, 0x7f, {0x7f, 0xa, "9d8cfb8ad0e857e444c3a3a799bc59e4fb80bd7b2acd1888800d5f300bcf13e253a611c12aa6766fa46bf2be13b5662572d514389b41715cce80d21686b015822c20cf8d648f420f1bb1fed2bb6ff0b1cbedb7ffda3717c1b7cf593ab98616001c0f59126629c1fd135449fa525bdaa9e9f74c3bcc284c10d280f6af17"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000900)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x8, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b951967e9000a6e9dee9f27c43d055c3"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "e9170246d3782bb2d12d8ad8765656e6"}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa7, 0x0, 0x81, 0x0, "4de19300", "4f80f3c2"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x3, 0x81, 0x20, 0x6ae, 0x2}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000a00)={0x40, 0x30, 0x74, "66301c81c3963a2b22901861c83cd7f5cd954f2ac762f7fad7e82033373ecc4317a54b8cd48db7c245b96510a2266abdad876397bbbe563917ac5277a87350d85469051192435242ef6a6b3bf8552968460c37ed737195f40c453dab815b5fdacff0ecfc3d9e2747d275e0432e2889fc663a7246"}, &(0x7f0000000a80)={0x0, 0xa, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x120, 0x20, [0x0]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x29c}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "3fa1"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x28}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @random="087791560572"}, &(0x7f0000000cc0)={0x40, 0x17, 0x6}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "e378"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0x21, 0x1}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x8400) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000480)=0x8001) [ 2978.461815][ T7101] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2978.484402][ T33] kauditd_printk_skb: 6 callbacks suppressed [ 2978.484414][ T33] audit: type=1800 audit(1625918203.261:2135): pid=17625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15409 res=0 errno=0 11:56:43 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:43 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x9, 0x40, 0x70, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "53b60257"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0xf1e9, 0x1f}, [@dmm={0x7, 0x24, 0x14, 0x1ff, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x9, 0x0, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x86}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x85, 0x9, 0x8, 0x4}, 0x24, &(0x7f00000000c0)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe3, 0x9, 0x40, 0x1f, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x46, "ff5b4af8026b0efe9a92c308bb2b7ad1"}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40d}}, {0x5, &(0x7f0000000140)=@string={0x5, 0x3, "cc5090"}}, {0x50, &(0x7f0000000180)=@string={0x50, 0x3, "842b61d017a2ab3820f1bbffe91edd33971216dc876e61446b38bf6731a9e93168076ac262faf42163add163882e9b9b9d453849f19c85aae090582ee8b8a1ad8c2b7f29d1c8e8603d3732dfd103"}}, {0xc0, &(0x7f0000000200)=@string={0xc0, 0x3, "0f9a40f2b436184a20cfe07748c397821a9edb685cbe182d52443c025dc52cb99968881abeeba3d1872d7c165e0af918f6889c58651fbfa82bd4e0751dedea131e824ad63eeb2417104a4d40413fc0697dd6cafaff76d9f587906e14ee820890d617e45247fe8e2e853cd571cf5560b12028c90c37d97b37927739729fd1b91f4b7b7fcbaabf8600dce42a198c89c589d88050565a95ba529c00e17f9136f4ffb595d88cb3e3360915f8686ee7179e24cb8893d998fbd589daf178a0cd2d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x553101) [ 2978.600877][ T33] audit: type=1800 audit(1625918203.371:2136): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15330 res=0 errno=0 [ 2978.761418][ T7101] usb 4-1: string descriptor 0 read error: -22 [ 2978.767689][ T7101] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2978.776776][ T7101] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2978.832447][ T7101] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2978.871378][T28469] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 2978.891393][ T8202] usb 3-1: new full-speed USB device number 39 using dummy_hcd 11:56:43 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:43 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:43 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2979.041873][ T7101] usb 4-1: USB disconnect, device number 46 11:56:43 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x81, 0x9900) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x2, 0x3f]) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/134) [ 2979.119263][ T33] audit: type=1800 audit(1625918203.891:2137): pid=17653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15298 res=0 errno=0 [ 2979.142038][T28469] usb 6-1: Invalid ep0 maxpacket: 512 [ 2979.291376][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2979.301639][T28469] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 2979.331572][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2979.411540][ T8202] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2979.421191][ T8202] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2979.434073][ T8202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2979.511326][ T7101] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 2979.561330][T28469] usb 6-1: Invalid ep0 maxpacket: 512 [ 2979.566888][T28469] usb usb6-port1: attempt power cycle [ 2979.741439][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2979.747681][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2979.756776][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2979.812226][ T8202] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2979.871369][ T7101] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2979.981302][T28469] usb 6-1: new full-speed USB device number 61 using dummy_hcd 11:56:44 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:44 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:44 executing program 0: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x1, 0x2, 0x3bb, 0x81, 0x8000, 0xd1}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/241) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) [ 2980.031267][ T8202] usb 3-1: USB disconnect, device number 39 [ 2980.071835][T28469] usb 6-1: Invalid ep0 maxpacket: 512 11:56:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2e000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:44 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/88) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x101, 0x21000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc8a, 0xa002) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/103) [ 2980.106457][ T33] audit: type=1800 audit(1625918204.881:2138): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15537 res=0 errno=0 [ 2980.121541][ T7101] usb 4-1: string descriptor 0 read error: -22 [ 2980.138465][ T7101] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2980.147663][ T7101] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 11:56:44 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) [ 2980.214695][ T7101] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2980.231501][T28469] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 2980.249984][ T33] audit: type=1800 audit(1625918205.021:2139): pid=17688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15337 res=0 errno=0 [ 2980.321772][T28469] usb 6-1: Invalid ep0 maxpacket: 512 [ 2980.327889][T28469] usb usb6-port1: unable to enumerate USB device [ 2980.424185][T28469] usb 4-1: USB disconnect, device number 47 [ 2980.531253][ T8202] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 2980.931316][ T8202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2980.971337][ T8202] usb 3-1: not running at top speed; connect to a high speed hub [ 2981.051326][ T8202] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2981.061065][ T8202] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 2981.073969][ T8202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2981.311341][ T8202] usb 3-1: string descriptor 0 read error: -22 [ 2981.317545][ T8202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2981.326621][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.392250][ T8202] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:46 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/182) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x9) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x52, 0x4, 0x8, {0xce7, 0x400}, {0x2, 0x7}, @ramp={0x7ff, 0x1, {0x5, 0x40, 0x7, 0x7}}}) 11:56:46 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:46 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/200) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/152) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:46 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:46 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x9, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:46 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) [ 2981.661699][ T7101] usb 3-1: USB disconnect, device number 40 11:56:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x410040) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/4096) 11:56:46 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x10001, 0xa64c3) [ 2981.702512][ T33] audit: type=1800 audit(1625918206.481:2140): pid=17721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15617 res=0 errno=0 11:56:46 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x821b, 0xa83) 11:56:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x99260000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:46 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000000000000, 0x6a45c3) [ 2981.836268][ T33] audit: type=1800 audit(1625918206.611:2141): pid=17733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15810 res=0 errno=0 11:56:46 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa83) 11:56:46 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x92983) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/89) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3ff, 0x80000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x5, 0x20, 0x9, 0x80000000, "11700dbde8b358a23075c95f144fff29ec705b81b4715607f019ba00"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:46 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/155, 0x9b) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000100)) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x57, 0x7f, 0x1000, {0x43a7, 0xb077}, {0x8}, @rumble={0x7, 0x7}}) [ 2981.948372][ T33] audit: type=1800 audit(1625918206.721:2142): pid=17743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15731 res=0 errno=0 [ 2982.011972][ T8202] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2982.020229][ T33] audit: type=1800 audit(1625918206.761:2143): pid=17746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=13937 res=0 errno=0 [ 2982.054977][ T33] audit: type=1800 audit(1625918206.821:2144): pid=17749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15617 res=0 errno=0 [ 2982.191677][ T7101] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 2982.401141][ T8202] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2982.601154][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2982.641671][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2982.661302][ T8202] usb 4-1: string descriptor 0 read error: -22 [ 2982.667531][ T8202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2982.676600][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2982.721216][ T7101] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2982.730882][ T7101] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 2982.743804][ T7101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2982.751446][ T8202] hub 4-1:1.0: bad descriptor, ignoring hub [ 2982.759546][ T8202] hub: probe of 4-1:1.0 failed with error -5 [ 2982.766731][ T8202] cdc_ether: probe of 4-1:1.0 failed with error -22 11:56:47 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2983.041097][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2983.047456][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2983.056542][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2983.101907][ T7101] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2983.271010][T28469] usb 4-1: reset full-speed USB device number 48 using dummy_hcd 11:56:48 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0xa, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:48 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x6, 0x8000) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000100)) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000000)=""/160) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x250802) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xe4ffffff, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:48 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 11:56:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x1) [ 2983.314891][ T8202] usb 3-1: USB disconnect, device number 41 11:56:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/4096) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001000)=""/75) 11:56:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa44c3) 11:56:48 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 11:56:48 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0xf, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000, 0x2602) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) [ 2983.519182][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 2983.519199][ T33] audit: type=1800 audit(1625918208.291:2149): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15356 res=0 errno=0 [ 2983.601221][T28469] usb 4-1: device firmware changed [ 2983.606888][T28469] usb 4-1: USB disconnect, device number 48 [ 2983.850989][ T7101] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 2984.011055][T28469] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 2984.281635][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2984.321264][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2984.391081][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2984.411245][ T7101] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2984.420963][ T7101] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 2984.433976][ T7101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2984.650975][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2984.657203][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2984.666304][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2984.674517][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2984.680710][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2984.689824][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.741845][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2984.751699][ T7101] cdc_ether: probe of 3-1:1.0 failed with error -22 11:56:49 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:49 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x23d8, 0x20800) 11:56:49 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfbffffff, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:49 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 11:56:49 executing program 5: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000780)={0x6, 0x100, 0x7}) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1f, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0xe000, 0x6, 0x1, {0x22, 0xc9e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x16, 0x1f, 0xf1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0xff, 0x4, 0x10, 0x5}, 0x12, &(0x7f0000000100)={0x5, 0xf, 0x12, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x8, 0x3}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c09}}, {0xf4, &(0x7f0000000180)=@string={0xf4, 0x3, "921a08c739311cac0f23f9f06250c1413cd53c837a185cf1200863670a99321bbb16e5b7e70e846b09323936546268d5dcc3c7cd5c94484002b8be067e9fc9464f80389deb79ad5ec613d21ae840d815998b2cb75fc4d86a21025f11473dc5fed4e01ecd5a99290d20f84dd300f34007c0562edb8df6d1ae775432030d44fc87419343668b9f2bea9908a6316db81977960820929d4fe46489057e6abb4795fef57f5286b58aed066fe718e03ba23159f99bb0f5f132868846233248b5cb518e1f492071dd8d4a74e958209687fbf603f5eafdb5ed735564e023859a043b2615f77552cf92c43fe4032228824d0f886e4f80"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x418}}, {0x22, &(0x7f0000000300)=@string={0x22, 0x3, "a8d5c2306c2059b6c67ca9b400d8b7296e3aefd1492285efa6f3a678edc70374"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f00000003c0)={0x40, 0x11, 0x92, {0x92, 0x21, "27108ee2d0bb8aa0ac233beb66e6fa17bb9e3a00058d5228e4ad7b25ed3e854cc35b7874bd2181debf1d945630f51fc988a9a3e900ef2d37fc58c28a90b22d9d9126e4e5fe957e76c28ca73fe35b5600720a0daef0ca3d266b3cc39b2627b35a200ba95b2367d6ba3698638d80acef0ebdd77751da36386e90630f9034225ee5dbb1e5d9d7746c93532b61cf74784c34"}}, &(0x7f0000000480)={0x0, 0x3, 0x8, @string={0x8, 0x3, "c6ab94e140e5"}}, &(0x7f00000004c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0xa, "4ce65383"}, @local=@item_012={0x1, 0x2, 0x3, "ff"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0xe02}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x18, 0xb6, "d73eeb335429f659471c5b86bc8a32f3cb542550a9699365fa6a7284c2ba3767efd39543b0ec800dc7cba9730c2572fba109166486055f18ed3b603d092ede1092e6d19c7df6d4e51240ff808336f7ccbeb708474d86f4772584e11b72400fded6930532a243a106950a09529441958add46a697e485a0ab50ee30ceb4ca24f57c1ba723245d07524db0a88944a40a060aeaa65f50469ab90822363af0a3777079270bd8a76e82b0e272dc964ab6cd290d6415402b3f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x1, 0x25, "fae0cb11caf8aea2253d6d902372976fb7a9500cf17d58afcf74d9e5ddb592ea3537e7f5b8"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x81}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0xc200) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x20, 0x1, 0xdb, {0xdb, 0xd, "857b1f0ead958e9dacddb35a4d1bbfdbdbcbe8371a21af6562ec7fbadb4253753e90013e541709d4178dcadfdc9b9e9c9499f3f94b432cf778215ba485c912084253075b49c5061bd6230350f1808a158895d5da86156c078d8622c462cb3d658bb34ea40f67b8b48658ce04f460a1c583301cf761eb941af72793f43405527050beba91cd888d228185724c84d45e4018a8e7734ed586bd3e3541c70c40c7dc482e21f9be2d070084e0cf5a328d91067caac7d12956de61b7c96f44a473176b4df5797fc1dad30516b91e1ab7b7c5cfbf28ddf75c4a8d84b6"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x1c, &(0x7f0000000940)={0x0, 0xd, 0x8c, "e188f702fccad5bfce6c62ca159903461b551c93ddb9ff35cbc8610466e52797d61a560ab06c39e65a592f4cb55d9efa7a036d40489ecbaf63f5ee97a11ac7d5a078bee10490c7b5bdd7c5a2206c7b0dbae5dac4ec2c412fee8609ab43c398cc797b6cc481a54e54ad5d4036a43b444ba661a04dac785da4acadb3bf7a313da8e4ad6284ae85eed4967fd44f"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x3f}}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x7b) 11:56:49 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x63, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2984.958676][ T7101] usb 3-1: USB disconnect, device number 42 [ 2984.999707][T28469] usb 4-1: USB disconnect, device number 49 11:56:49 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2985.109744][ T33] audit: type=1800 audit(1625918209.882:2150): pid=17836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15651 res=0 errno=0 11:56:49 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffff8, 0x19b3c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x68140) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x129800) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/62) 11:56:49 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:49 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/4096) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001000)=""/75) 11:56:50 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x100043942c8e, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:50 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2985.246403][ T33] audit: type=1800 audit(1625918210.022:2151): pid=17847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15983 res=0 errno=0 [ 2985.270090][ T33] audit: type=1800 audit(1625918210.032:2152): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15985 res=0 errno=0 [ 2985.334389][ T8202] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 2985.343793][ T33] audit: type=1800 audit(1625918210.122:2153): pid=17850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15979 res=0 errno=0 [ 2985.531374][ T7101] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 2985.538990][T28469] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2985.580866][ T8202] usb 6-1: Invalid ep0 maxpacket: 32 [ 2985.730815][ T8202] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 2985.931475][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2985.951554][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2985.970870][ T8202] usb 6-1: Invalid ep0 maxpacket: 32 [ 2985.976421][ T8202] usb usb6-port1: attempt power cycle [ 2986.001091][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2986.081024][ T7101] usb 3-1: too many endpoints for config 1 interface 0 altsetting 1: 99, using maximum allowed: 30 [ 2986.091769][ T7101] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2986.101473][ T7101] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 99 [ 2986.114476][ T7101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2986.220907][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2986.227124][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2986.236185][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2986.291829][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2986.390801][ T8202] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 2986.460835][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2986.467229][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2986.476300][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.481427][ T8202] usb 6-1: Invalid ep0 maxpacket: 32 11:56:51 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x63, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:51 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x6, 0x8000) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000100)) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000000)=""/160) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x250802) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xff0f0000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:51 executing program 0: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x9, 0x1f, 0x9, 0x7, 0x5, 0x7}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2a6901) [ 2986.509930][T28469] usb 4-1: USB disconnect, device number 50 [ 2986.531763][ T7101] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2986.568986][ T33] audit: type=1800 audit(1625918211.342:2154): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15367 res=0 errno=0 [ 2986.631164][ T33] audit: type=1800 audit(1625918211.342:2155): pid=17872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15375 res=0 errno=0 [ 2986.661466][ T8202] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 2986.743805][ T7101] usb 3-1: USB disconnect, device number 43 [ 2986.751592][ T8202] usb 6-1: Invalid ep0 maxpacket: 32 [ 2986.757023][ T8202] usb usb6-port1: unable to enumerate USB device [ 2987.000744][T28469] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 2987.410848][T28469] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2987.680752][T28469] usb 4-1: string descriptor 0 read error: -22 [ 2987.687007][T28469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2987.696121][T28469] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2987.741559][T28469] cdc_ether: probe of 4-1:1.0 failed with error -22 11:56:52 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0x5, 0x78, &(0x7f0000000000)="a0da3987e418addbefe63268a5b348c1ba81c312dce3e84159eaffdaed916012af9092abbd0152a28c47e8b55f0131a81ee06fea180a8abb75c996318a37784eb456c944d92deeafb04c1a4b6d787969703553e251f3439686e24ada752e6568d02b90ee6ff5ce9658a99db3edc22614d98439cd586e48ac"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) 11:56:52 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:52 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:52 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x9, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:52 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/167) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000040)=""/159) r3 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000001500)=""/134) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/139) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000014c0)={0x2, 0x7, &(0x7f0000001300)="6a3b8794349583"}) r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x100000000, 0x304301) r5 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000001340)=""/82) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000001480)=0x3) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000280)={0x401, 0x87, 0x80000000, 0x9, 0x80, 0x18000000}) 11:56:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2987.960565][ T8202] usb 4-1: USB disconnect, device number 51 [ 2988.079189][ T33] audit: type=1800 audit(1625918212.852:2156): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15992 res=0 errno=0 11:56:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffff7f, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:52 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/229) 11:56:52 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000000200, 0x0) [ 2988.155218][ T33] audit: type=1800 audit(1625918212.902:2157): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15997 res=0 errno=0 11:56:53 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffe4, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2988.226770][ T33] audit: type=1800 audit(1625918213.002:2158): pid=17918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15998 res=0 errno=0 11:56:53 executing program 5: syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x345801) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0xe052, 0x8000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000180)={0x1000, 0x5, 0x5, 0x5aad, 0x1000, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x40, 0x80) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0xfff) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/237) 11:56:53 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x20000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/221) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/179) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x10001, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)) [ 2988.370732][T22565] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 2988.390737][T28469] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 2988.470598][ T8202] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 2988.801122][T22565] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2988.820769][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2988.851056][ T8202] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2988.860734][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2988.864221][T22565] usb 2-1: not running at top speed; connect to a high speed hub [ 2988.950690][T28469] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2988.960437][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2988.961270][T22565] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2988.976695][T22565] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 2988.989620][T22565] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2989.120585][ T8202] usb 4-1: string descriptor 0 read error: -22 [ 2989.126830][ T8202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2989.135938][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2989.181552][ T8202] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2989.230585][T22565] usb 2-1: string descriptor 0 read error: -22 [ 2989.236834][T22565] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2989.245998][T22565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2989.250707][T28469] usb 3-1: string descriptor 0 read error: -22 [ 2989.260361][T28469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2989.269455][T28469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2989.291551][T22565] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 2989.342544][T28469] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 2989.390640][T28469] usb 4-1: USB disconnect, device number 52 11:56:54 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffe, 0x7dccd48a79c6bfaf) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/238) r3 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000002c0)=""/29) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000040)=""/38) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x333059866dbdbd29) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000200)={0x2d6, 0x20, 0x7, 0x7, 0xfffffd5f, 0x80}) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000240)={0x10000, 0x6, 0x5, 0x8000, 0x80000001, 0x7}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) 11:56:54 executing program 1: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2989.507594][ T7101] usb 2-1: USB disconnect, device number 35 11:56:54 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x4, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:54 executing program 5: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000001c0)=""/196) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/215) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x3]) r1 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/99) 11:56:54 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x2, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2989.581583][ T6155] usb 3-1: USB disconnect, device number 44 [ 2989.583418][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 2989.583431][ T33] audit: type=1800 audit(1625918214.362:2161): pid=17963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15391 res=0 errno=0 11:56:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffb, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2989.696159][ T33] audit: type=1800 audit(1625918214.462:2162): pid=17978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15991 res=0 errno=0 11:56:54 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x98d01) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/60) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1ff, 0x18000) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x10000, 0x5e7, 0x2}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0xff) 11:56:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/172) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x38dac3) [ 2989.790895][ T33] audit: type=1800 audit(1625918214.532:2163): pid=17987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15391 res=0 errno=0 11:56:54 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001040), 0x7cb3, 0x420980) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/4096) 11:56:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2989.841601][ T33] audit: type=1800 audit(1625918214.612:2164): pid=17994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15405 res=0 errno=0 [ 2989.863535][ T33] audit: type=1800 audit(1625918214.612:2165): pid=17992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15406 res=0 errno=0 11:56:54 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x98c2d737ccd35d86) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/4096) [ 2989.916207][ T33] audit: type=1800 audit(1625918214.672:2166): pid=17997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15391 res=0 errno=0 [ 2989.941020][T22565] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 2989.961907][ T33] audit: type=1800 audit(1625918214.732:2167): pid=18001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15406 res=0 errno=0 [ 2989.992670][ T33] audit: type=1800 audit(1625918214.752:2168): pid=18002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15991 res=0 errno=0 [ 2990.060543][ T7101] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 2990.110565][ T6155] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 2990.310529][T22565] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2990.430925][ T7101] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2990.520491][ T6155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2990.560931][ T6155] usb 3-1: not running at top speed; connect to a high speed hub [ 2990.571100][T22565] usb 4-1: string descriptor 0 read error: -22 [ 2990.577334][T22565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2990.586451][T22565] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2990.631515][T22565] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2990.641199][ T6155] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2990.651033][ T6155] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2990.680508][ T7101] usb 2-1: string descriptor 0 read error: -22 [ 2990.686712][ T7101] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2990.695836][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2990.741173][ T7101] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 2990.840794][ T7101] usb 4-1: USB disconnect, device number 53 [ 2990.900544][ T6155] usb 3-1: string descriptor 0 read error: -22 [ 2990.907058][ T6155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2990.916144][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 11:56:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001900)=""/4096) r1 = syz_usb_connect(0x5, 0xb0a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x38, 0xc, 0x10, 0x20, 0x1164, 0x602, 0x936d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf8, 0x4, 0x81, 0x5, 0x50, 0x2, [{{0x9, 0x4, 0xe1, 0x67, 0x4, 0x4f, 0xf3, 0x46, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2}}], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0xe5, 0x1, [@generic={0x5f, 0x31, "740c2a4e805cafc15697c4a558ca286d04d4b8b8d0f34ced6c3f007496cbe7d0ec057a375ce549f4d00a7e588fe0e61958836ea7ad3d6a85e4eb13bc29da8d9b15a8f091adf58bad99ef917ed4c3412f40cfbf931d82a5be530cd5a39a"}, @generic={0xcf, 0x0, "8927d5ebf79b015ad1b860312d16582b9d1a889d02d8b16665f4a4ab27629337641fb718d2e1e0b644a6b62bf9ddc38eac2112e275618d2186f94e6a19e602bb5e0ebf8edc798e1a4019f997af1226ac5760a45084731a592792c84a049113af01672b3ae322ca8d869a47eb11fc332978cdad66c5c07e618940d4ad718daa213b3a08cebf435fc80404ed66997845acb5d438ec0a8e70094e4e384722e745d0584f2dc7162474f305d5fa2c2a4ca98ba4e5001d5c8584b9cedde80975c220a6b1c45610a3d0d01433446093ae"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x1, 0x6, 0x0, [@generic={0xf3, 0x9, "a620307be9899bbc40dfd69be70b0160e6647689f452400a610c070381cbb0b8b5cd0b29bba98bcc02293f08e14d9d068571c883fcb49779b8f36da397e528177396caea56b7634d3449e03e210cdbe22770cb4f91e6f9df9fd5fe7a0a3610f0a07be656ceea16f8e7a1164491f8c19af3a046818e7ee51f6b3cc8664f3e43c6220ad2796956e346090bd9bbe8dfef60cbb805e66c1e12685356a618da986322159b87a37c799af6605e9143a60074d6fade05546ebb2cb56b08b05f931d96c09c9a1a87bd5e7ef3748eb89ae7d42df1ba7daecdc757a74e26bb7879a957c5fbb4c14929a9455987d4c5883b561177ceae"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xff}, @generic={0xda, 0xd, "694aa1632e457e17a8f26a8d2b85f8330cc76763e4df60e8b8cb0a17f3b105c46229fdd36501d2114a72344787fc016e2485bb9ee193d173015995eb2db6e17956d05c7f7f2120247d66b189a56233a6d4b62ceb9d5e417d8251b2535185051423b16465a6b712f23c56b5803a2c8bc1a2b8be35932a738f302271ce9f724c40656c6fdb9a773f604e23356172cf5ab11dec5c6500ac94ab5243bd827a39e5526f61f58047689b25c3b8c5378f43be9e348999c12760a0e8d8fdf015855f1acf6acf5f95e877ed990eddf2eebcd920ac39a318e25c7c42d4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xfa, 0x0, 0x63, [@generic={0x75, 0x22, "1ada493ba1dda38283bf6865abc4098631b16baea04cba9c5d96db2438d96e5417c7423812e2624e6ee540474c2e55ff6a34bc66d0692d7e9f16ba88df569bf0f013c80497638e9dec7f9a57e4cadc91a0c5309a6cc473f365a73894ba4751084009b068f0b5f44df7794068ed4ea143394b65"}]}}]}}, {{0x9, 0x4, 0xf0, 0x1f, 0x8, 0xff, 0xff, 0xff, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "55c5"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x6c07, 0x20, 0x8001, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x800}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xfc, 0xfff}, @mdlm={0x15, 0x24, 0x12, 0xfff7}, @mbim_extended={0x8, 0x24, 0x1c, 0xe1b, 0x1, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0x8, 0x6}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0xce, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xf, 0xa, 0x10, 0x5, 0xe1, 0x1f, [@generic={0x5c, 0x7, "6a049ae40e28a138e3bfe18625d57d8e383cbc2f5718d82d5861f834f86695f43f0fc7cee7f691706ec8f225a16a347f6dbf49f81f57dee300c8c6c0c462d2b62efde888d9ae53e03a02bbc81daa4300ecfdea1ae9e246a2866d"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x20, 0x6, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x20}, @generic={0x79, 0x0, "3dac4b35c03f0fe9702a9fffd7a2600ee7d0f9c54913cfd64d8d60cddb31ad16a5d8b4bdc700989e9ee00a74de8eaa9de67b3843e81d748f11917be1980df965e7589b834f609913da2bc4554cdeefc787d4c92e7d3642a445e697f64583223cb49b48417eccdafa5d850f2ec4e051f064c16d83b478a2"}]}}, {{0x9, 0x5, 0xb, 0xb, 0x10, 0x1, 0x1, 0x7, [@generic={0xd8, 0x30, "95a82bf6a749c1925b48487157ac86bc435e7d57ac909d550297e6c96aadfbcc13fb18cfbc021a25ea4cb054ed9f0e37dabfe3ef5ade5359e6c6144c8be7167c17d730df0aebb4fa36e893af4f96d40c29b72f9d5ade6237fa7563d66fa9c60510a7a9534aa64c07432c940ca9e12adc9c2db9ac991969388bfdcbd8a8ee1c3127915baa86936f118778c77fcaa0feedd741104f83a551f76f51f6904bf9bd9e4f64b2c377118224dc4c5f101c8a4af91c71c697d5b6568acc879305c0da7e5625285a24381cf48c46748d3f0a9a019a4f8a8a4be907"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x448, 0x0, 0x40, 0x3f, [@generic={0xbb, 0xb, "7842f1a61987765ad07a1c8de48b6b584e6b4a1fc58d88c1616732f02bfd8a7e6d9c81ad79d59d05f7baf956e2d797b423886d8445b8e7643220db235244e84e25d5db1a72dea8ed869f2304ac56e97aa4a7dca86eedb3ef2980f65d1f4134ee29734c5e485819e64ba9641c67518f082f297e2693c3707f239b495dafc5e5e7329e90c3b66a3cb9532e23b2fd5f077fc464a456869c60580d6b780cbb5142c98e43718392ee860941433871e19b58a285384992b4e187a568"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x11, 0x6, 0xd4, [@generic={0x4f, 0xb87a75de228d0b4c, "0bf48d59d29eb81eab12bc6833e9e8c86792d9d4b1949a6245849ade35546f8875c8553c11a211f9e867dee9f0677d302b71b5f2492fe51cab93309c29138541674c235bd51a00b1b44b5cc4dc"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa5, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x1, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x503}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2f, 0x0, 0x8, [@generic={0xdb, 0x30, "aac6566ff34bb82d64b31b4a98ff2eb2958edfbde9df853791e22bbc917eb55f1440a0411d2bc47f442f5ac35311f782c97437a7197bbae0250c096fa488e88353cbf69d7916d43286c2d11cc3ba2a8437c8944e9ec12a4cecd12055eda9cb99368dd4029d88f0c7efa9a3e5e9fefc0cb9d27f3910e152c39379237762a5c69beefa00cdc2c9ecea37f7fd09c7f000e4deeb7177ee90702711806ad9c72790a466795a43538157570d37e959f4b6ac8ce113c59bfc068df4f171cf948d3343cc350a2bf83196009d0d35c416b7ec92799f71588485f3b16856"}]}}]}}, {{0x9, 0x4, 0x97, 0x55, 0x10, 0x5, 0x89, 0xdc, 0x7, [@generic={0x6, 0xa, "486c9956"}], [{{0x9, 0x5, 0x81, 0x1, 0x20, 0x9, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x1}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0xb8, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x10, 0xb2e69b2c186e6f5e, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x60, 0x57, 0x3, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x80, 0x5}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xff, 0x6, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2127}, @generic={0x9c, 0x2, "8c88e1184614f7985eb6e3682c9eacb3d1c0a6256be784401a52cf7994987008cbc054eec0d17f92fc9c6693102d79d845c13a178093f225b2c14e90a08ed139a68d5a1e9e4293e65ee798f3ef350baea03674d55c0758fcd9e4d7f6bd2631452695b2df23f81d9b1afdf90517802758f7de7262a0fd33fcd69713299f9c4d5ae9c35bb3c129b2031a6e60a941ccf4ed76a0de9ccb973ac44fc6"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x83, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x20, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xff06}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x80, 0x0, 0x8, [@generic={0x21, 0x11, "d3ca6021f2a874fe7174a527fecb6d3d339332d1cb91331007cf5a4ea5cb5c"}, @generic={0x45, 0x23, "ca4c680333ad68f29c95919a2249f5e8baba480b3f0a4d465611f30abdad472b49dc7d63658d02315552b897ec782bd597035664fddae7a6ab3855c481ccf2db6dde61"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0xfc, 0x2, 0xff}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x7, 0xff, 0x3}}, {{0x9, 0x5, 0xd, 0x14, 0x8, 0x9, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3f}, @generic={0x47, 0x22, "e3e8d8221458d9ad6b4bcdba0e4bd3efe857c472488de8d111de780157667dd106c9717f0cd6c22b6365d858667d715609256a744b9fd07399f6ddae72a88eacc77f64d9cb"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x40, 0x20, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1000}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x81, 0x1f, 0x6}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1, 0x2, 0x4}}]}}, {{0x9, 0x4, 0x80, 0x5, 0x1, 0x22, 0x8e, 0x18, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a8"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x8000, 0x62f7, 0x80}, {0x6, 0x24, 0x1a, 0xe6a0, 0x2e}, [@obex={0x5, 0x24, 0x15, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xa1, 0x401}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "5e37d36e22d79e0c264b65dc39374a6d87f7ce411a9147c9"}, @network_terminal={0x7, 0x24, 0xa, 0x4c, 0x1, 0x4, 0x98}, @mdlm={0x15}]}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x3f}, [@processing_unit={0xb, 0x24, 0x7, 0x1, 0x5, 0x20, "069ad4bb"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x6, 0xff, 0x6f, 0x7, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x1, 0x6, 0x8}]}], [{{0x9, 0x5, 0x5, 0x8, 0x8, 0x7, 0x80, 0x39}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x250, 0x20, 0x3, 0x1, 0x20, 0x2}, 0x7b, &(0x7f0000000b80)={0x5, 0xf, 0x7b, 0x6, [@generic={0x5, 0x10, 0x3, "c2b5"}, @generic={0x40, 0x10, 0xa, "0a57f30674270c2733c44c6a17cf036258a8ca847e3aa7a4911edc054b1741c419d071ae97370f40d4c87970839664d44f9f22a3144b364df6724a044e"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "4c8a8131f9ffb70dcbf78349c3915765"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x0, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x8, 0x3f, 0xfc00, 0x40}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x70, 0x8e, 0x800, 0x9}]}, 0x7, [{0xc3, &(0x7f0000000c00)=@string={0xc3, 0x3, "22a5080084a00f6016a2d04d08b4a41aad99a34c91ae74dd84e2b7ccde4b4afa228de89082d98196a2fac9901f8303734e5497f1c4f139307f9c2717f4c8091d27bdb66c14b9c8d08a62407f39a3f1a72024936a316885014dd4cd0b1a845573aedda57863bd176cbab1e6f868f33caae584a63d52bb0b9883540a2cb645c829a8fdd67ca6cc53d7d06844bbab2e45b927260a874e3480a972a697f80929c840d29e13c1d4cdea648139b20d1ee3984750039d0bb9c4e08092634da34cd74418ef"}}, {0xa8, &(0x7f0000000d00)=ANY=[@ANYBLOB="a803bf0f3e7180016d60ac0cd77d4ab0ca5f34c791f8e96b4f8ad8934df435f84907d017fd6fdc264eccd7a388fee5876d79c6366910c60fa23e7ec4b35933b176c574591b169ef212314baaadb93650c149d1176d4914292ba1f9e3a88b0024dd2cd19f5acad7771e9945f33395d018b249c36965fb77912a8f74673e1eab173affd12b4f297cb5da847edf40f03bee792508bc166bd080d79296e1d38299a870bb451c313acce1"]}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x804}}, {0xb4, &(0x7f0000000e00)=@string={0xb4, 0x3, "d7e0482cbea15fccffa4a07e84e24c69dd64c2270375dd18418238b4e555af72869e921d2028e2892e7f22ab14df423af4d17ececbbc5594df10d6016b699f52699f28dd432cfbe9e35f91c8b7dc2a7277b7a2a4226bc647c8af5413a6b82f13d35b75be7773b865fa78e2a833cc9798a3141b791a654e42e65f45777fbcda5f353eb522397f549d418b281f5337346d3eb86a4ea21bc49a5c652321afcfe15b44ab2b9dd41b75af344426a1e1fce1f9f1b2"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001140)={0x14, &(0x7f0000001000)={0x40, 0x22, 0xd0, {0xd0, 0x5, "ecadc55ce0965751a5b1dfbc68d7b1bdff5aa08548f0c08e88861f5ee6b8d8357cac447b77cf2a56e498c9ffe906ab2d78a3bf64c9bcd03aa8dee9d2a9d94b42a4d21a543c9143761c7de9798bda1bcc7ffb40fe38a5c89e1e80fce8df1157c4198aa952138ddd7d644388c99e8ae84f12c942bdb54e6529800b0c1a8621463668a6cf6705ce1a73e7c3f6ccc2cf5a6734eff0c585d0ba730c07e43b9f306aa5b9718c20836af7674c410b49ab1382442d8e148573064c4ca73fe06ff0c3411d189bed452934d91717b500a2060d"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001180)={0x20, 0xf, 0x9, "2c2c0b34c78116b38f"}, &(0x7f00000011c0)={0x0, 0xa, 0x1}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x1}}) r2 = syz_open_dev$evdev(&(0x7f0000002900), 0x0, 0x8200) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000002940)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0xa64c3) syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000001280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x9f, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x80, 0x120, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x61, {{0xa, 0x24, 0x6, 0x0, 0x0, "40b4a04a5e"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xb70e, 0x8, 0x3}, [@obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x80, 0x8b, 0x2, 0x3}, @obex={0x5, 0x24, 0x15, 0x800}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x7f, 0x93}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x250, 0x1f, 0x1, 0x5, 0x10, 0x99}, 0x52, &(0x7f0000001340)={0x5, 0xf, 0x52, 0x3, [@generic={0x1e, 0x10, 0x1, "b1081813e4f9ef29836a47c72aca49221120355d7d34fc11168540"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9c, 0x7, 0x0, 0x1ff, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x9, 0xf00, 0x1ff, [0xc000, 0xc030, 0xffc00f, 0xff3e20, 0x3f00, 0xc030]}]}, 0xa, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x5998eef0641066c1}}, {0x8e, &(0x7f0000001400)=@string={0x8e, 0x3, "6a58e2d663004d2854f7c7805b2f72a18fad50b1ee11af68d60264179eec3fdf495a3427e27e625329f045e41d69bae5fb4b12efe6c686acf340877962a2cb5931fc94dc6ead9f20df417f4ac4172ed0d7de1286acd3c26e5ff0e011bfd7269f643de0a9f07e0768ddc63d8d3aeefa85182e36a209791363e7477bfea35b958fae587040c26f351274e2e81d"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x41c}}, {0xfc, &(0x7f0000001500)=@string={0xfc, 0x3, "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"}}, {0xd1, &(0x7f0000001600)=@string={0xd1, 0x3, "375fddbe04f93ef1207558cc37b86fdc39e6cbeb741cbbb38f06321e434d34403bb367066698a97f2e404971e61623659ffab01ae8e7550bb3306683b9964d7e1956285f233764f1e44321f6b9db7c2512804061711ae6c2dcf2fdacc605f411a98793a57759fd6cc67cd7327fe20bff3dd11b7364b151b5e1ddfdc55f17c2b3b3bbcd24d2747a2c053053b08a7db348738bcc74f6fba1cd5f867a0ecf976daaaa861abc9f109016a9300906517d2912582c5b09f73c078335a66d5fee2305145aade68f3c7ccbad434013780f5b8f"}}, {0x23, &(0x7f0000001700)=@string={0x23, 0x3, "e92c1b5faccf55814af6b014c40dbb30aaf0185f14c4219826e35904a06a9bb09c"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x413}}, {0x26, &(0x7f0000001800)=@string={0x26, 0x3, "7bf0a04a2916a15c08c9106dc1f7536a53e48b324b98d6abfc34f3e153f34413c734cc3b"}}]}) [ 2990.958239][T22565] usb 2-1: USB disconnect, device number 36 [ 2991.003493][ T33] audit: type=1800 audit(1625918215.782:2169): pid=18032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15396 res=0 errno=0 11:56:55 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x5, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:55 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001040), 0x7cb3, 0x420980) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/4096) 11:56:55 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x3, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:55 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000, 0x2a64c3) 11:56:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc0000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2991.170834][ T7101] usb 3-1: USB disconnect, device number 45 11:56:56 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2991.259528][ T33] audit: type=1800 audit(1625918216.032:2170): pid=18050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=16011 res=0 errno=0 11:56:56 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x6, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:56 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x9d7743) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x1270c0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x8d2a, 0xe002]) 11:56:56 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:56 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x4, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2991.320816][ T8202] usb 6-1: new high-speed USB device number 67 using dummy_hcd 11:56:56 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2991.510455][ T6155] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 2991.610355][ T8202] usb 6-1: Using ep0 maxpacket: 32 [ 2991.720362][T28469] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 2991.731097][ T7101] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 2991.810682][ T8202] usb 6-1: config 129 has an invalid interface number: 225 but max is 3 [ 2991.819048][ T8202] usb 6-1: config 129 has an invalid interface number: 151 but max is 3 [ 2991.827405][ T8202] usb 6-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 2991.836303][ T8202] usb 6-1: config 129 has an invalid interface number: 128 but max is 3 [ 2991.844681][ T8202] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 2991.854959][ T8202] usb 6-1: config 129 has 3 interfaces, different from the descriptor's value: 4 [ 2991.864114][ T8202] usb 6-1: config 129 has no interface number 0 [ 2991.870413][ T8202] usb 6-1: config 129 has no interface number 1 [ 2991.876657][ T8202] usb 6-1: config 129 has no interface number 2 [ 2991.882964][ T8202] usb 6-1: config 129 interface 225 altsetting 103 bulk endpoint 0xF has invalid maxpacket 16 [ 2991.890484][ T6155] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2991.893423][ T8202] usb 6-1: config 129 interface 225 altsetting 103 has an invalid endpoint with address 0x0, skipping [ 2991.917184][ T8202] usb 6-1: config 129 interface 225 altsetting 103 has an invalid endpoint with address 0x0, skipping [ 2991.928156][ T8202] usb 6-1: config 129 interface 225 altsetting 103 has 8 endpoint descriptors, different from the interface descriptor's value: 4 [ 2991.941635][ T8202] usb 6-1: config 129 interface 151 altsetting 85 has a duplicate endpoint with address 0x81, skipping [ 2991.952718][ T8202] usb 6-1: config 129 interface 151 altsetting 85 endpoint 0x8 has invalid maxpacket 1886, setting to 64 [ 2991.963956][ T8202] usb 6-1: config 129 interface 151 altsetting 85 has a duplicate endpoint with address 0x1, skipping [ 2991.974958][ T8202] usb 6-1: config 129 interface 151 altsetting 85 has a duplicate endpoint with address 0x3, skipping [ 2991.985938][ T8202] usb 6-1: config 129 interface 151 altsetting 85 has a duplicate endpoint with address 0x7, skipping [ 2991.996920][ T8202] usb 6-1: config 129 interface 151 altsetting 85 has a duplicate endpoint with address 0xF, skipping [ 2992.007947][ T8202] usb 6-1: config 129 interface 151 altsetting 85 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2992.019201][ T8202] usb 6-1: config 129 interface 151 altsetting 85 has a duplicate endpoint with address 0xD, skipping [ 2992.030186][ T8202] usb 6-1: config 129 interface 151 altsetting 85 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2992.041429][ T8202] usb 6-1: config 129 interface 151 altsetting 85 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2992.052670][ T8202] usb 6-1: config 129 interface 151 altsetting 85 has a duplicate endpoint with address 0xF, skipping [ 2992.063655][ T8202] usb 6-1: config 129 interface 128 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2992.076931][ T8202] usb 6-1: config 129 interface 225 has no altsetting 0 [ 2992.083919][ T8202] usb 6-1: config 129 interface 151 has no altsetting 0 [ 2992.090908][ T8202] usb 6-1: config 129 interface 128 has no altsetting 0 [ 2992.160414][T28469] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2992.168157][ T7101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2992.175914][ T6155] usb 4-1: string descriptor 0 read error: -22 [ 2992.182246][ T6155] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2992.191319][ T6155] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2992.220477][ T7101] usb 3-1: not running at top speed; connect to a high speed hub [ 2992.228288][T28469] usb 2-1: not running at top speed; connect to a high speed hub [ 2992.241332][ T6155] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2992.271001][ T8202] usb 6-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=93.6d [ 2992.280048][ T8202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.288163][ T8202] usb 6-1: Product: ࠄ [ 2992.292365][ T8202] usb 6-1: Manufacturer: ྿焾ƀ恭ಬ緗끊忊윴毩詏鏘݉័濽⛜챎ꏗﺈ蟥祭㛆ၩ࿆㺢쑾妳넳앶奴ᘛㄒꩋ릭倶䧁៑䥭⤔ꄫ讨␀ⳝ鿑쩚矗餞锳ᣐ䦲槃ﭥ酷輪杴ḾឫＺ⯑⥏땼蓚╹밈欖胐鋗苓ꢙ뭰᱅㨱 [ 2992.300397][ T7101] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2992.317941][ T8202] usb 6-1: SerialNumber: ⱈꆾ챟꓿纠楌擝⟂甃ᣝ艁됸嗥犯麆ᶒ⠠觢缮ꬢ㩂퇴칾볋鑕ჟǖ楫功齩ⱃ忣좑爪띷꒢欢䟆꿈ፔ뢦ጯ寓빵獷斸磺꣢찳颗ᒣ礛攚䉎忦睅뱿忚㸵⊵缹鵔譁Ἠ㝓洴렾乪ᮢ髄敜℣쾯寡ꭄ鴫ᯔ꽵䐴ꄦﳡ李닱 [ 2992.354417][ T7101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2992.361119][T28469] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2992.362066][T18034] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2992.370789][T28469] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2992.381428][T18034] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2992.450897][ T6155] usb 4-1: USB disconnect, device number 54 11:56:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/216) 11:56:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffb, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:57 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x4, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2992.620420][T28469] usb 2-1: string descriptor 0 read error: -22 [ 2992.626748][ T7101] usb 3-1: string descriptor 0 read error: -22 [ 2992.633782][T28469] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2992.642960][T28469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.651156][ T7101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2992.660190][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.694323][ T8202] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 2992.715377][ T8202] usb 6-1: selecting invalid altsetting 0 [ 2992.748363][ T2375] pvrusb2: Invalid write control endpoint [ 2992.802414][ T8202] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 2992.809961][ T8202] usb 6-1: selecting invalid altsetting 0 [ 2992.820163][ T2375] pvrusb2: Invalid write control endpoint [ 2992.826263][ T2375] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2992.835718][ T2375] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. 11:56:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffb, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2992.843275][ T2375] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2992.853270][ T2375] pvrusb2: Device being rendered inoperable 11:56:57 executing program 5: r0 = syz_usb_connect(0x0, 0x7b2, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x1f, 0x88, 0x6f, 0xff, 0x257a, 0x2607, 0x5093, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a0, 0x3, 0xe, 0x8, 0x30, 0x9, [{{0x9, 0x4, 0x2a, 0x1f, 0xa, 0x93, 0xf8, 0x36, 0xe7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "57ced9"}, {0x5, 0x24, 0x0, 0xe730}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x0, 0x6c}, [@obex={0x5, 0x24, 0x15, 0x1}, @obex={0x5, 0x24, 0x15, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x81}]}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0xc7, 0x1, 0x97}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x0, 0x9, 0x1, [@generic={0x45, 0xd, "68ca7d092d46ed53689ab2fdd2f6144adb6a3f84a280de8cc5c86d94d2e75089fc316b4eef08ccb8f2820707cb539210e2261838b636478d6ff45d950137dbfdc85f39"}, @generic={0xaa, 0x22, "de8be58e43df4b8482039abe99af869ed54359d8451c8201f0fbbd19517e284a03516677487cce91861f5bb0d7d6a03d5653b952917e04a04811c8157cf89af7ea6365c3640b5dcb46d03b571d21d7f70c39c155da6b9c9a1ba622d0873f46b6916798d2cbacb333374d94cfcd3b668ac49409d781aba85e2e77fd6fbc05866f244cc1599e869d81b338cdc724dc86fc9af031648f7ff60dfb9fabf569d0b998bbef02584d5c95aa"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x4d, 0x2, 0x83, [@generic={0xb3, 0x24, "ad53363c95799f5d89abf87dd19758c99713dca80141057a65359e0830152614f889cb391f96c6a4f43962d3aba26ddcb82d3e035202ed25b4118e9ece17d667c409a9e0eca96d725da958d620c51b2d2d5b4eb1ec9a08b37fc4cd4a2e8f72712289f4990b70a5a74bcac37672f450f69af6da3239ff67a9246a29c0fa491e69d99f6feb74f41721dfc5891ab9cfd42aa9f1169f99cd5d92111b8a1356180cf6e41996f7ee6b91768f6734e214fc9239f4"}, @generic={0xb5, 0x22, "7014d51758447bdea6b259cae8da4d0495689fe7520c927e77f1bf0bf3a187e10729b3194c58379f82fa8057008f336cafea8de595c5802cf7c6baec4325e9c97836ee7f970d3dcbbbbb056b70846f064393f8547d80f9c2d3584ac9b1ef0a668690b07d827c0f65310b5eb604f6783ad764ab1dead04663a5d998b3dae0f6a5361758ac03f1ecf5233b8182bacc6b2ee1577bf136b289659600be2ac813acf7ff293762e58e88c200429e3be9cc73026fcc99"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x4, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x4, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x3}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x6, 0x13, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x3}, @generic={0x57, 0xe, "e4f24b70022a2db47d8a5cf767a5c4b15fdd9cd29537ca259c57ef7dfbcebbaf269c9ea844df406331a8a077fcaf28350a034428fc1d6f928cf742d5acad71bda1dbca9f7fb81d2713b285e30cedb41a7eadf14571"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x68, 0x1, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0xbb, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xc3, 0x5, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x3f, 0xff, 0x20, [@generic={0xd5, 0x9, "3f119b8bdef8ad29c383f584720fb07ad089042fb94cd37285db98c5d58b643b450650d7d1bc0a66c1bc1e39a46d799ba5828c44365a6c309267a0ad50dc73ae9cbac01e554be526bd743235e69c4727d48c23e8a0fa7d4bcb1557a8fc5f48d5b99e080d4c94e77f6f99b0dddddbd6fd6638c20e9b81b09f5eb3c5164b223a858856f50a01d5439f3e7f15aeaf703aba48bd9c6e341c659d59598311ecd92055606b3feee95a274451bf51bc75777a16a4f187eecd2a16c3b86dd2f421a94660d2168c2a317fe62e14c13161d35bd5a9709b09"}]}}]}}, {{0x9, 0x4, 0xce, 0x8, 0x1, 0x2, 0x2, 0xff, 0x5, [@generic={0x89, 0x22, "9d49acaa6d3f73720178f2ec84544453bde938abf3c46fdf9fb49b2c56679ef12c673e2f8b2d1c4325d4e76c4b9b01d72d623c2ecb0c8540b573122e2af3a566814fe2b391228f17feb0c094912cdc07b7057d20d7e006651fbdc202ebe2df8aadf47e1cc2f5ce80b4c0f9d179717de9a4512737f1bfe5ef24da92556eba49b961966a8b0ca971"}, @hid_hid={0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x784}}], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x8, 0x2, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0xffff}]}}]}}, {{0x9, 0x4, 0x13, 0xff, 0x8, 0x2, 0x2, 0xff, 0xf8, [@hid_hid={0x9, 0x21, 0x40, 0x2, 0x1, {0x22, 0xee}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "c24b"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x7, 0x8, 0xc0}, {0x6, 0x24, 0x1a, 0x47ec, 0x9}}], [{{0x9, 0x5, 0xa, 0x0, 0x210, 0x0, 0x1, 0x0, [@generic={0xbb, 0xf, "d990ead1e087d009ef64c0740d924f4cd7ca269b406d99d69a46a23ab578280a4ba2412ccf94f95b401770e4b7eac77db39c8d539735c51b289e8bee3d119eb9b7f850ee6ab324fe4f128c25eca9c331083856cd5769315102848b0e0fec7a894d14e64fa32a1b9df48a9ea1d4228f16584cd318f2f5fe32e1558f904d4564abcfde4b1afb872aaa8293ae6050c4698f9e457abe7281c27062e60d344059e324ccdfb113cee3eae36d3899818a5e7468c5615d482b5b0739ac"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x6, 0xac, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x6, 0xff, 0xff}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xe5, 0x8, 0x20}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x7, 0x4, 0x4, [@generic={0xb4, 0x5, "67aa5b0fdf79940a9db2e5f208a5f00dfbd4a1a499d8db9b5e3141c044e00dd9aca295aa7ab64071a8916843c1697a32ea7ed0f7075d9fb03994a7aa9dfc81187a036f9845224bbed4792f4535ec1fa2c2c5028f8eb5979e4c8560c4f9e39d636378560145df70bc8e9daab449206d8ae106fd8dd0b7c6d7c4db163939531d08936a2b535ee5b996805f81f23fd9bda366abdc7982e10c86aacaceeb5123a3c74d4123ec60ef47a6b08b653c89bf21e62947"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x8, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x40, 0x5, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf7, 0x94de}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x6, 0x83, 0x10, [@generic={0xa6, 0x9, "b60c2699b98084f0a1ced0242a31417b7cfae07d1f4ac34ad473501ecf472794818f581337d9eedf9f2e40572f59056a5412731f5af0f261cfa1d7db273f98a9c3772677d7af95b341d682d0270208117bbac49ddc94b0554d629ab2736831dde069671e62c96921ed4b49bdff7aca4d141458e2bf5912e55702756984dbed3cbcfbcdbfb5fa4c8e22f93c0a112cb4cec5aa705327eb82d2ec3f2733f9bd4dde8fb4e504"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x310, 0x6, 0x7, 0x80, 0x10, 0x4}, 0x5, &(0x7f0000000880)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x100a}}, {0xf8, &(0x7f0000000900)=@string={0xf8, 0x3, "ee606b6800286cfc3e268553d11ae590ed2bcfdf9957d220d37bc8ec477eb02909bae0e34bab56833765a2661b163b079686baa3573269e3aa73c1322605e22015d3bb187e7c040b19545df87ce9bc3efc459985df6b56226197ba8a1ad8d5625c7013d094859a0c6d9e59f4a142084208997236ac29c5f876c3a273e9c70aa009705c3c2919111946453816d6e187df2548d7dbf06613d5376cb648e181c7dae4cc1fba8435291e91559272174619901be08756365acd8062d2f9ad78d79147488c7cdad2b650be3d63cbfb47fe70cbefa42daab7abedab1db75711bd8c172dfec0145ad153dc2d5e07d13edb6df1a6b374a746a6f3"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x0, 0x24, 0x70, {0x70, 0x22, "c5fe3008a6046e845a1d865ebbf47da66b98038d2c77cb55949ba17fd78de711b8b59b82f8673d1904c03a9a168572d21d855f90364806ec5c6969b1a1d2520bb313af808b1e85e69da98dd242fd2175641c10123c47905e9705075db6ade40ea2479a919d4879295a5826f052c4"}}, &(0x7f0000000b00)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "a253f2ba9dca93c99aedd3b465440580868fa7ff74ee846a65157f3d6a6217383980b1c9d00542158f9c104d4cd6d94e04260face504cbf66d7dd10ac00a91b692b837ebea9ba40332f9fcb689534c0ce668108a2804b258f0d6332c25dfda330d06f613d89938f4dbb7d2db0ba02b85e1806e6cb7abdfa3c88bac2c182aed74732aa29334161277fcd37ddd24b841ca10f0c09bfe32e180938e5de0ac4879e4340fc68ddd185254b0f200d503d53a36365c958a1ccba1ef66874de51e4ea2bd"}}, &(0x7f0000000c00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7d, 0x4, 0x80, 0x0, "b231a274", "47f2e2dc"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x0, 0x4a, 0x8, 0x0, 0x0, 0x8}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d00)={0x40, 0x14, 0x93, "07d8c85d9169faa95f5cd2be601d1ff266dad019b6e822ae324962d4ba9447f272694f621e141203132b28c86560b1e31267a5a5e3c4c12a5cbc6822922a9c414bf89106ad15b40504230ae8f75c27aed0a5ab239854a2e585f8a49b04a395d63d35363ba2f345a845cefcc960fc61b578e470aa4b556f6b01cd47eac376ecbc70444b8ed55c5177371e11dfc7717a883609ac"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x800, 0x2}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "df74"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x13}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001000)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001040)={0x40, 0x19, 0x2, "b202"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x9a}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) syz_open_dev$evdev(0xfffffffffffffffc, 0x80003, 0x9ab4c1) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/18) [ 2992.933297][ T8202] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 2992.941684][ T2375] cx25840 0-0044: Unable to detect h/w, assuming cx23887 [ 2992.948985][ T2375] cx25840 0-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2992.970574][ T8202] usb 6-1: selecting invalid altsetting 0 11:56:57 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x6, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "86deeb9ccc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x7, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 2992.979783][ T8202] usb 6-1: USB disconnect, device number 67 [ 2992.992243][T28469] usb 3-1: USB disconnect, device number 46 11:56:57 executing program 1: syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x345801) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0xe052, 0x8000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000180)={0x1000, 0x5, 0x5, 0x5aad, 0x1000, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x40, 0x80) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001740)=""/16) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0xfff) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/237) 11:56:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2993.025663][T16126] usb 2-1: USB disconnect, device number 37 [ 2993.033236][ T2375] pvrusb2: Attached sub-driver cx25840 [ 2993.050452][ T7101] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 2993.079408][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 2993.100676][ T2375] pvrusb2: Attempted to execute control transfer when device not ok 11:56:57 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x20000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/221) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/179) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x10001, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)) 11:56:58 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2993.151903][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 2993.173510][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 2993.181644][ T2375] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. 11:56:58 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2993.265753][ T2375] TUNER: Unable to find symbol tda829x_probe() [ 2993.298845][ T2375] DVB: Unable to find symbol tda9887_attach() [ 2993.305159][ T2375] tuner: 0-0043: Tuner 4 found with type(s) Radio TV. 11:56:58 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x921c3) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa64c3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x20000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/221) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/179) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x10001, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)) [ 2993.315361][ T2375] pvrusb2: Attached sub-driver tuner [ 2993.320719][ T2375] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 2993.333605][ T2375] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 2993.356141][ T8202] pvrusb2: Device being rendered inoperable [ 2993.373555][ T8202] pvrusb2: Device being rendered inoperable [ 2993.394995][ T2375] ------------[ cut here ]------------ [ 2993.400513][ T2375] sysfs group 'power' not found for kobject '0-0044' [ 2993.407318][ T2375] WARNING: CPU: 1 PID: 2375 at fs/sysfs/group.c:279 sysfs_remove_group+0x126/0x170 [ 2993.410480][ T7101] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2993.416872][ T2375] Modules linked in: [ 2993.430249][ T6155] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 2993.433438][ T2375] CPU: 1 PID: 2375 Comm: pvrusb2-context Not tainted 5.13.0-rc7-syzkaller #0 [ 2993.433473][ T2375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2993.459797][ T2375] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 2993.465688][ T2375] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 20 04 13 86 e8 89 49 f0 03 <0f> 0b eb 98 e8 e1 02 d5 ff e9 01 ff ff ff 48 89 df e8 d4 02 d5 ff [ 2993.485337][ T2375] RSP: 0018:ffffc90007347b80 EFLAGS: 00010286 [ 2993.491426][ T2375] RAX: 0000000000000000 RBX: ffffffff863e37e0 RCX: 0000000000000000 [ 2993.499393][ T2375] RDX: ffff88810fec9b40 RSI: ffffffff812a6723 RDI: fffff52000e68f62 [ 2993.507403][ T2375] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2993.515418][ T2375] R10: ffffffff814b9bef R11: 0000000000000000 R12: ffff88813d791020 [ 2993.523444][ T2375] R13: ffffffff863e3d80 R14: 1ffff92000e68f98 R15: dffffc0000000000 [ 2993.531449][ T2375] FS: 0000000000000000(0000) GS:ffff8881f6b00000(0000) knlGS:0000000000000000 [ 2993.540447][ T2375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2993.547027][ T2375] CR2: 000055aca084c1c8 CR3: 0000000007225000 CR4: 00000000001506e0 [ 2993.550252][T28469] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2993.555027][ T2375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2993.570536][ T2375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2993.578490][ T2375] Call Trace: [ 2993.581795][ T2375] ? i2c_adapter_lock_bus+0x130/0x130 [ 2993.587172][ T2375] dpm_sysfs_remove+0x97/0xb0 [ 2993.591880][ T2375] device_del+0x20c/0xd40 [ 2993.596208][ T2375] ? __device_links_queue_sync_state+0x400/0x400 [ 2993.602575][ T2375] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2993.608554][ T2375] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2993.614400][ T2375] ? trace_hardirqs_on+0x5b/0x1a0 [ 2993.619425][ T2375] ? dev_fwnode+0x79/0x90 [ 2993.623784][ T2375] ? i2c_adapter_lock_bus+0x130/0x130 [ 2993.629158][ T2375] device_unregister+0x22/0xc0 [ 2993.633938][ T2375] ? i2c_adapter_lock_bus+0x130/0x130 [ 2993.639306][ T2375] __unregister_client+0x95/0xa0 [ 2993.644262][ T2375] device_for_each_child+0xf9/0x170 [ 2993.649458][ T2375] ? device_remove_class_symlinks+0x210/0x210 [ 2993.655545][ T2375] ? __radix_tree_lookup+0x211/0x2a0 [ 2993.660872][ T2375] i2c_del_adapter+0x37b/0x680 [ 2993.665635][ T2375] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2993.671637][ T2375] pvr2_i2c_core_done+0x69/0xc0 [ 2993.676496][ T2375] pvr2_hdw_destroy+0x179/0x3b0 [ 2993.681368][ T2375] pvr2_context_destroy+0x84/0x230 [ 2993.686480][ T2375] pvr2_context_thread_func+0x64b/0x850 [ 2993.692046][ T2375] ? pvr2_context_destroy+0x230/0x230 [ 2993.697415][ T2375] ? finish_wait+0x260/0x260 [ 2993.702030][ T2375] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2993.708268][ T2375] ? __kthread_parkme+0x118/0x1d0 [ 2993.713330][ T2375] ? pvr2_context_destroy+0x230/0x230 [ 2993.718700][ T2375] kthread+0x38c/0x460 [ 2993.720844][ T7101] usb 4-1: string descriptor 0 read error: -22 [ 2993.722796][ T2375] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2993.728938][ T7101] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2993.734090][ T2375] ? __kthread_bind_mask+0xc0/0xc0 [ 2993.734117][ T2375] ret_from_fork+0x1f/0x30 [ 2993.743217][ T7101] usb 4-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 2993.748233][ T2375] Kernel panic - not syncing: panic_on_warn set ... [ 2993.767220][ T2375] CPU: 1 PID: 2375 Comm: pvrusb2-context Not tainted 5.13.0-rc7-syzkaller #0 [ 2993.775982][ T2375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2993.786028][ T2375] Call Trace: [ 2993.789304][ T2375] dump_stack+0x143/0x1db [ 2993.793626][ T2375] panic+0x306/0x73d [ 2993.797506][ T2375] ? __warn_printk+0xf3/0xf3 [ 2993.801046][ T7101] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2993.802094][ T2375] ? __warn.cold+0x1a/0x44 [ 2993.813052][ T2375] ? sysfs_remove_group+0x126/0x170 [ 2993.818246][ T2375] __warn.cold+0x35/0x44 [ 2993.822489][ T2375] ? irq_work_queue+0x44/0x50 [ 2993.827168][ T2375] ? sysfs_remove_group+0x126/0x170 [ 2993.832370][ T2375] report_bug+0x1bd/0x210 [ 2993.836695][ T2375] handle_bug+0x3c/0x60 [ 2993.840865][ T2375] exc_invalid_op+0x14/0x40 [ 2993.845346][ T2375] asm_exc_invalid_op+0x12/0x20 [ 2993.850189][ T2375] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 2993.855990][ T2375] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 20 04 13 86 e8 89 49 f0 03 <0f> 0b eb 98 e8 e1 02 d5 ff e9 01 ff ff ff 48 89 df e8 d4 02 d5 ff [ 2993.870253][ T6155] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2993.875579][ T2375] RSP: 0018:ffffc90007347b80 EFLAGS: 00010286 [ 2993.875600][ T2375] RAX: 0000000000000000 RBX: ffffffff863e37e0 RCX: 0000000000000000 [ 2993.875614][ T2375] RDX: ffff88810fec9b40 RSI: ffffffff812a6723 RDI: fffff52000e68f62 [ 2993.875628][ T2375] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2993.875640][ T2375] R10: ffffffff814b9bef R11: 0000000000000000 R12: ffff88813d791020 [ 2993.920774][ T6155] usb 1-1: not running at top speed; connect to a high speed hub [ 2993.921057][ T2375] R13: ffffffff863e3d80 R14: 1ffff92000e68f98 R15: dffffc0000000000 [ 2993.936731][ T2375] ? irq_work_queue+0x1f/0x50 [ 2993.941403][ T2375] ? vprintk+0x93/0x1c0 [ 2993.945536][ T2375] ? i2c_adapter_lock_bus+0x130/0x130 [ 2993.950890][ T2375] dpm_sysfs_remove+0x97/0xb0 [ 2993.955549][ T2375] device_del+0x20c/0xd40 [ 2993.959885][ T2375] ? __device_links_queue_sync_state+0x400/0x400 [ 2993.966194][ T2375] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2993.970210][T28469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2993.972191][ T2375] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2993.972216][ T2375] ? trace_hardirqs_on+0x5b/0x1a0 [ 2993.972239][ T2375] ? dev_fwnode+0x79/0x90 [ 2993.994896][ T2375] ? i2c_adapter_lock_bus+0x130/0x130 [ 2994.000251][ T2375] device_unregister+0x22/0xc0 [ 2994.000782][ T6155] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2994.005008][ T2375] ? i2c_adapter_lock_bus+0x130/0x130 [ 2994.005033][ T2375] __unregister_client+0x95/0xa0 [ 2994.005055][ T2375] device_for_each_child+0xf9/0x170 [ 2994.014775][ T6155] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2994.019994][ T2375] ? device_remove_class_symlinks+0x210/0x210 [ 2994.028880][T28469] usb 3-1: not running at top speed; connect to a high speed hub [ 2994.030067][ T2375] ? __radix_tree_lookup+0x211/0x2a0 [ 2994.030096][ T2375] i2c_del_adapter+0x37b/0x680 [ 2994.030123][ T2375] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2994.030148][ T2375] pvr2_i2c_core_done+0x69/0xc0 [ 2994.030171][ T2375] pvr2_hdw_destroy+0x179/0x3b0 [ 2994.060100][ T7101] usb 4-1: USB disconnect, device number 55 [ 2994.060473][ T2375] pvr2_context_destroy+0x84/0x230 [ 2994.087027][ T2375] pvr2_context_thread_func+0x64b/0x850 [ 2994.092586][ T2375] ? pvr2_context_destroy+0x230/0x230 [ 2994.097967][ T2375] ? finish_wait+0x260/0x260 [ 2994.102558][ T2375] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2994.108803][ T2375] ? __kthread_parkme+0x118/0x1d0 [ 2994.110856][T28469] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 11:56:58 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x5, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0xf, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:56:58 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:56:58 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0xa64c3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 2994.113823][ T2375] ? pvr2_context_destroy+0x230/0x230 [ 2994.113850][ T2375] kthread+0x38c/0x460 [ 2994.113872][ T2375] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2994.123551][T28469] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2994.128825][ T2375] ? __kthread_bind_mask+0xc0/0xc0 [ 2994.149683][ T2375] ret_from_fork+0x1f/0x30 [ 2994.155810][ T2375] Kernel Offset: disabled [ 2994.160199][ T2375] Rebooting in 86400 seconds..